last executing test programs: 3.179493761s ago: executing program 1 (id=5341): r0 = io_uring_setup(0x30d3, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10048, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.159169022s ago: executing program 1 (id=5342): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$eJzs3E9rVOcaAPDnHDMmxtw7uXDh3nZRBAUFcZKYja5MN90UQRC6tSGZhJCTTMhMrJMKatcF0U0L3bRdl34GsR+gW6GF7gultemidDPlTCYTnM7EMYmOf34/OJ7nPf+e93EOb+aEvCeAN9aJ/J8kYiwirkREsbU9jYijzWgk4vb2cVuPb87lSxKNxtVfk/y02GoU29dKWuvj0Twl/h8RDwsRZz/5Z95qfXN5NsvK6632RG1lbaJa3zy3NBKL5cXy6tT0xckL09MXJqefWsP/+qz11AcXj937/r377zcajbvvDJ1LYqZZd7Rq2/Pk230m6bD9f1KImY7tq/u73EsrGXQHAADoS/49/0hEDDW/pRbz+MGg+wQAAAAcrsZwo6tHoxHd9wAAAACvnqS/5/wT4RcCAAAA8Ira+TuAnbm9T50He8h+eTcixrvlH2pNuR2JQkSMbiXNOQo7ku3T4EBu34mIBzOd99/X+R22zynfbZMd7SfnSB894NU5DA/y8WemPf6MRHv8SdvjT3QZf4Z23p1wQL3Hv938R3qMf1f6zHEr3ir0zH8n4u2hbvlb9//ISDNXt/wf9pn/7v1P7/Xa1/gq4nTXnz/JE7l23w+xMtvxfoiZhaUsiRjumf/hX2ce7VX/aK/8zS70rn+tz/o/3vp9uddYkuc/c3Lvz79b/iPf7n6kaUTca63zY+935Di58sN3e9U/H9Ho+fnvUf+Xfdb/0zfDN/o8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrSiBiLJC214zQtlSKOR8R/YzTNKtXa2YXKxup8vi9iPArpwlJWnoyI4nY7ydtTzXi3fb6jPR0R//nx2HbSpaxcmqtk84MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLbjETEWSVqKiDQi/iimaakUMdTHucMvoH8AAADAIRkfdAcAAACA587zPwAAALz+9vv8nxxyPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDX2pXLl/OlsfX45lzenr9e31iuXD83X64ul1Y25kpzlfW10mKlspiVS3OVladdL6tU1qYuxsaNiVq5Wpuo1jevrVQ2VmvXllZmF8vXyoUXUhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPaqy5JGkpItJmnKalUsS/ImI8CsnCUlaejIh/R8SjYmE4b08NutMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcump9c3k2y8rrAoGgZ3DpkC94KyJehrp6B4MemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIRqfXN5NsvK69VB9wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDBSn9OIiJfThdPjXXuPZr8WWyuI+KjL65+dmN2pLX9t/b22uf59lpt/fyL7z0AAAC8IS49y8E7z+nN9dTz6xQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD6qdY3l2ezrLx+sOBS1DcbSY9jBl0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwP38HAAD//2XXvc4=") chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 3.080464869s ago: executing program 2 (id=5343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d7286dd", 0x0, 0x69873270, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.569480091s ago: executing program 1 (id=5345): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = socket$igmp(0x2, 0x3, 0x2) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) 2.243219647s ago: executing program 2 (id=5347): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x1, r0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000946d7416851d64328510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4d3, &(0x7f0000000540)="$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") sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="870aa25c4220e1372ef161b02fcca93d4d3cd5871de550b0f0432e628c0f59230f5a1945bfb01d3f8472d991b92500a37df4e5e059410b141627ae6c16", 0x3d, 0x20000845, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) 2.076891011s ago: executing program 3 (id=5348): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 2.053442883s ago: executing program 3 (id=5349): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = syz_io_uring_setup(0x516b, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x2b, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/23, 0x17}}], 0x1, 0x0, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0xffffffff}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@ifindex, r6, 0x36, 0x0, 0x0, @prog_fd}, 0x20) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 1.608763949s ago: executing program 1 (id=5353): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400500, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x8) close(r1) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411ada0c5b7adecf509872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076f02000000610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339456c13ad3c328a182c15dc760a3000000005dc2ed0e0b80008fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58b58d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a6540eaef64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603067ca1b1f801bf68713630b820a95cf6d72012ad78189dc614bf257584ab6aff35a808dcadd5b8f709256233ff88731e982a73d0e6eb43961343703fac65bfab3034142b02eff67db88e4fb8400f50e94043e0096eb0f63fe81dc3b0a5968128b49c5c2ed3ec99883b3f42700dd751fff84c39d177b45526095362940afd31697565", @ANYRESDEC=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x6, 0x80, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r3}, 0x38) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) syz_open_procfs$userns(r2, &(0x7f00000027c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x44, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x0, @default, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}}, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x204401, 0x0) prctl$PR_MCE_KILL(0x22, 0xfe8679d1aaaa176c, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', r7, &(0x7f0000000280)='./file0\x00') r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x7, &(0x7f0000000000), 0x4) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc) getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001a40)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100010000000000000000000200000000000c00f43f000000000000000000607a89842f0000"], 0x30}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x31, 0x1, 0x5b, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x1, 0x80, 0x5, 0x7}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000380)=""/26, &(0x7f0000000180)=0x1a) 1.608259069s ago: executing program 4 (id=5354): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000ecea333eb7ffffec2100ff850000000c0400009500000000000a6682f08a000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) 1.570561772s ago: executing program 4 (id=5355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "ac82e77988458eee"}, 0x3}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffff7}}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000002c0)=""/163, 0xa3, 0x140, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getuid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ptrace$peek(0x2, r2, &(0x7f0000000380)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) 1.374563008s ago: executing program 3 (id=5356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="85000000610000003500000000000020850000000500000095000000000000000001000000000000200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ae0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b0800000000000000087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ec91d83cf4fbf975d9c07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037865f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec596838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1473fa0ac0c0e71925a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c31a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5408e4dbfdb2fbfec699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c163ad419753bd73882336d42036a179bb33162b31f2a58436ea88fba598fad987a60b1847cc63a77c2bb30477ecbeaaa590cde56be4102d0365987eed64bdf01bbd9aaeb77dde491845e612557f"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d7286dd", 0x0, 0x69873270, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.258405618s ago: executing program 2 (id=5357): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x65a0, &(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', r1, &(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) 976.67599ms ago: executing program 2 (id=5358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') 884.643948ms ago: executing program 2 (id=5359): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc058534b, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = getpid() r2 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000003580)=0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0xc, 0x8000, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r8, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r8, &(0x7f00000005c0)="91"}, 0x20) io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) write$cgroup_devices(r11, &(0x7f0000000100)={'b', ' *:* ', 'wm\x00'}, 0x9) mkdirat$cgroup(r10, &(0x7f0000000280)='syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 685.436034ms ago: executing program 4 (id=5360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 659.352366ms ago: executing program 1 (id=5361): setfsgid(0xee00) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setresgid(r1, 0x0, 0x0) 591.109112ms ago: executing program 1 (id=5362): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1}}], 0x2, 0x0, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x160) 590.695312ms ago: executing program 4 (id=5363): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='msdos\x00', 0x0, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000180)={[{@noload}, {@errors_remount}, {@test_dummy_encryption}, {@noload}, {@noblock_validity}]}, 0xfe, 0x452, &(0x7f0000000700)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x10003, 0x0) read(r5, &(0x7f0000000140)=""/173, 0xad) readv(r5, &(0x7f0000000400)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0x10034) 408.390587ms ago: executing program 3 (id=5364): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000200de007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x400, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340), 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000003c0)={'lo\x00', @broadcast}) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x35}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 213.611503ms ago: executing program 3 (id=5365): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x7}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 197.350814ms ago: executing program 0 (id=5334): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0x45, &(0x7f0000000000)=0x1f, 0x4) 184.821985ms ago: executing program 0 (id=5366): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b00090000110000cd0000000100000018000480342d", @ANYRESHEX], 0x2c}}, 0x0) 180.349655ms ago: executing program 3 (id=5367): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x1, r0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@nodiscard}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600013, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000946d7416851d64328510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x82000, 0x0, 0xfe, 0x0, &(0x7f0000000000)) ftruncate(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000080)={[{@nobarrier}, {@noblock_validity}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4d3, &(0x7f0000000540)="$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") sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="870aa25c4220e1372ef161b02fcca93d4d3cd5871de550b0f0432e628c0f59230f5a1945bfb01d3f8472d991b92500a37df4e5e059410b141627ae6c16", 0x3d, 0x20000845, &(0x7f00000002c0)={0x2, 0x4e22, @loopback}, 0x10) 169.839086ms ago: executing program 0 (id=5368): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x65a0, &(0x7f0000000140), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='.\x00', r1, &(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fspick(r1, &(0x7f0000000080)='./file0\x00', 0x0) 142.393018ms ago: executing program 0 (id=5369): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 130.7668ms ago: executing program 0 (id=5370): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = syz_io_uring_setup(0x516b, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x2b, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/23, 0x17}}], 0x1, 0x0, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0xffffffff}, r4, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@ifindex, r6, 0x36, 0x0, 0x0, @prog_fd}, 0x20) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 108.130351ms ago: executing program 0 (id=5371): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20080001, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x11}, 0x1c) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 90.280283ms ago: executing program 2 (id=5372): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = memfd_create(&(0x7f0000000180)='\xb3\xbf@\x9c\xfb\xb2Ml\xd2\x1aL\xab\xa1a>\x03\xf5\x04\xf4qT\x13\x1d\xc9\xd6\x13\x9f!\x97\x8d\x04\x9eA\x86-\x83B\xc4\':D\xdc\xab\xf0\xe6\xb7\xed\xcc\x85\x03\x1a1\x05m)\xf7\x87\x898\xa9\xc5\x91\xcfJ\vvj\xe0P\x8erAx\xf4\x9a1!6@\xe0G*[\x81Z\xe16\xe0H\xb1b\x13\xe7\f\xf5\xec\xa2\xbd\x05\xd5\xba\xdd\xf5\xc5ncl\xfe\x1em\xd0A\x89\xd6\x022\xd7\xf1=\xf6`\x8c\x90\x80\x9b\x91\xc3d(_f\x99\xe9\xb4\xd4X\x84G;x\xe8v\x8d\x01\xb9\xb6\x99\xa8j\xfb\xbc\x16\xfa\xefc\xad\xb8\xa0t\x90\x94_\xb1\x96\x05\xadB\x93\xea$|\xf1\xa9\x8c\xfa\xc9\xd7=([\xe5\x84D\xe8@.\x06\xf7O\x9f\xd4z\xb0\xa4\xacJ\xda', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x12, r1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1848, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) 29.165428ms ago: executing program 4 (id=5373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=5374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d7286dd", 0x0, 0x69873270, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 249.892875][T15840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.901576][T15840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.931219][T15884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.943339][T15884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.952866][T15884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.962059][T15884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.000706][T15884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.015151][T15884] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.026369][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.033563][T12072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.053466][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.060583][T12072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.089879][T15884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.165760][T15884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.176450][T15978] loop1: detected capacity change from 0 to 8192 [ 250.211046][T15978] program syz.1.4562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.249944][T15884] veth0_vlan: entered promiscuous mode [ 250.259845][T15884] veth1_vlan: entered promiscuous mode [ 250.286261][T15989] veth0_vlan: entered allmulticast mode [ 250.305244][T15884] veth0_macvtap: entered promiscuous mode [ 250.326390][ T3099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.370440][T15884] veth1_macvtap: entered promiscuous mode [ 250.397519][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.408120][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.418206][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.428826][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.438789][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.449384][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.459361][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.469999][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.482179][T15884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.490455][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.500964][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.510961][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.521492][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.531339][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.541930][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.551804][T15884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.562324][T15884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.574407][T15884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.609277][T15884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.618153][T15884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.627075][T15884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.636376][T15884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.648323][T15998] netlink: 'syz.2.4566': attribute type 7 has an invalid length. [ 250.751037][T15998] loop2: detected capacity change from 0 to 8192 [ 250.770229][T15992] chnl_net:caif_netlink_parms(): no params data found [ 250.856238][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.863435][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.870857][T15992] bridge_slave_0: entered allmulticast mode [ 250.890889][T15992] bridge_slave_0: entered promiscuous mode [ 250.901496][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 250.901513][ T29] audit: type=1400 audit(1720532817.772:2910): avc: denied { ioctl } for pid=16015 comm="syz.3.4569" path="socket:[61325]" dev="sockfs" ino=61325 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.949829][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.956985][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.964362][T15992] bridge_slave_1: entered allmulticast mode [ 250.970796][T15992] bridge_slave_1: entered promiscuous mode [ 251.004294][T15992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.020271][T15992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.065470][T15992] team0: Port device team_slave_0 added [ 251.073749][T16025] netlink: 566 bytes leftover after parsing attributes in process `syz.2.4573'. [ 251.083727][T15992] team0: Port device team_slave_1 added [ 251.105152][T16027] loop3: detected capacity change from 0 to 1024 [ 251.125108][T15992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.132359][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.158932][T15992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.171972][T15992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.178975][T15992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.205126][T15992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.223481][T16027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.247545][T15992] hsr_slave_0: entered promiscuous mode [ 251.256357][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.268548][T15992] hsr_slave_1: entered promiscuous mode [ 251.275700][T15992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.283367][T15992] Cannot create hsr debugfs directory [ 251.381629][ T29] audit: type=1326 audit(1720532818.242:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16041 comm="syz.3.4579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd67e1d1bd9 code=0x0 [ 251.424737][T16044] loop2: detected capacity change from 0 to 256 [ 251.431543][T16044] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.444220][T16044] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.509314][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4581'. [ 251.531073][T16050] netlink: 'syz.2.4582': attribute type 1 has an invalid length. [ 251.538996][T16050] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4582'. [ 251.843888][T16055] program syz.2.4584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.880025][T16059] loop2: detected capacity change from 0 to 512 [ 251.893658][T16059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.906591][T16059] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.923480][T16059] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4586: corrupted inode contents [ 251.936573][T16059] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz.2.4586: mark_inode_dirty error [ 251.948172][T16059] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz.2.4586: corrupted inode contents [ 251.961055][T16059] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.4586: mark_inode_dirty error [ 251.975098][T16059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4586'. [ 251.995371][T14488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.068468][T16065] loop1: detected capacity change from 0 to 8192 [ 252.094901][T16065] program syz.1.4589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.116570][ T3099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.187682][ T3099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.233404][ T29] audit: type=1326 audit(1720532819.112:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16068 comm="syz.2.4590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d95bd2bd9 code=0x0 [ 252.259571][ T3099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.295325][T16088] program syz.1.4595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.329629][T16093] loop3: detected capacity change from 0 to 1024 [ 252.340262][T16095] loop1: detected capacity change from 0 to 512 [ 252.362709][T16093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.378251][ T3099] bridge_slave_1: left allmulticast mode [ 252.384181][ T3099] bridge_slave_1: left promiscuous mode [ 252.389917][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.398683][ T3099] bridge_slave_0: left allmulticast mode [ 252.404585][ T3099] bridge_slave_0: left promiscuous mode [ 252.410241][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.416175][T16095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.434212][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.437357][T16095] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.493058][T16095] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4597: corrupted inode contents [ 252.505623][T16095] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.4597: mark_inode_dirty error [ 252.524089][T16095] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.4597: corrupted inode contents [ 252.536471][T16095] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.4597: mark_inode_dirty error [ 252.554553][ T3099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.566070][ T3099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.576659][ T3099] bond0 (unregistering): Released all slaves [ 252.593870][T16110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4597'. [ 252.609748][T16113] netlink: 566 bytes leftover after parsing attributes in process `syz.3.4600'. [ 252.628207][T15840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.694039][ T3099] hsr_slave_0: left promiscuous mode [ 252.700552][ T29] audit: type=1326 audit(1720532819.572:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16118 comm="syz.3.4603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd67e1d1bd9 code=0x0 [ 252.723826][ T3099] hsr_slave_1: left promiscuous mode [ 252.730077][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.737788][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.747223][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.754710][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.767267][ T3099] veth1_macvtap: left promiscuous mode [ 252.772815][ T3099] veth0_macvtap: left promiscuous mode [ 252.778362][ T3099] veth1_vlan: left promiscuous mode [ 252.783679][ T3099] veth0_vlan: left promiscuous mode [ 252.880869][ T3099] team0 (unregistering): Port device team_slave_1 removed [ 252.894097][ T3099] team0 (unregistering): Port device team_slave_0 removed [ 252.988441][T16136] loop1: detected capacity change from 0 to 256 [ 252.999567][T16136] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00006005) [ 253.010236][T16136] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006005) [ 253.079826][T15992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.090133][T15992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.099604][T15992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.118495][T15992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.177636][T15992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.191144][ T29] audit: type=1400 audit(1720532820.062:2914): avc: denied { mount } for pid=16150 comm="syz.1.4614" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 253.192439][T15992] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.240069][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.247213][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.295906][T15992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.306309][T15992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.327553][T16154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4614'. [ 253.389976][T12094] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.397118][T12094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.566995][ T3099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.695649][T15992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.707066][T16138] chnl_net:caif_netlink_parms(): no params data found [ 253.719561][ T3099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.776360][ T3099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.790841][ T29] audit: type=1326 audit(1720532820.662:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.3.4615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd67e1d1bd9 code=0x0 [ 253.844412][T16138] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.851540][T16138] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.875128][T16138] bridge_slave_0: entered allmulticast mode [ 253.885731][T16138] bridge_slave_0: entered promiscuous mode [ 253.895120][T16138] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.902273][T16138] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.909905][T16138] bridge_slave_1: entered allmulticast mode [ 253.916785][T16138] bridge_slave_1: entered promiscuous mode [ 253.934060][ T3099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.958637][T16138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.974788][T16138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.005207][T16138] team0: Port device team_slave_0 added [ 254.021575][T16138] team0: Port device team_slave_1 added [ 254.043145][ T29] audit: type=1400 audit(1720532820.922:2916): avc: denied { unmount } for pid=15840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 254.080469][T16205] netlink: 'syz.1.4621': attribute type 1 has an invalid length. [ 254.088288][T16205] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4621'. [ 254.101508][ T3099] bridge_slave_1: left allmulticast mode [ 254.107254][ T3099] bridge_slave_1: left promiscuous mode [ 254.112981][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.128356][ T3099] bridge_slave_0: left allmulticast mode [ 254.134077][ T3099] bridge_slave_0: left promiscuous mode [ 254.139715][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.245702][ T3099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.256636][ T3099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.267270][ T3099] bond0 (unregistering): Released all slaves [ 254.276285][T16138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.283456][T16138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.309371][T16138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.324583][T16138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.331690][T16138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.357734][T16138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.391401][T16138] hsr_slave_0: entered promiscuous mode [ 254.397717][T16138] hsr_slave_1: entered promiscuous mode [ 254.409470][T16138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.420992][T16138] Cannot create hsr debugfs directory [ 254.432155][T15992] veth0_vlan: entered promiscuous mode [ 254.451711][ T3099] hsr_slave_0: left promiscuous mode [ 254.461770][ T3099] hsr_slave_1: left promiscuous mode [ 254.481715][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.489251][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.498567][T16222] loop3: detected capacity change from 0 to 512 [ 254.506040][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.508863][T16222] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.4628: casefold flag without casefold feature [ 254.513536][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.528060][T16222] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.4628: couldn't read orphan inode 15 (err -117) [ 254.545991][ T3099] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 254.546571][T16222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.552855][ T3099] batman_adv: batadv0: Removing interface: ipvlan2 [ 254.575017][ T3099] veth1_macvtap: left promiscuous mode [ 254.580597][ T3099] veth0_macvtap: left promiscuous mode [ 254.586227][ T3099] veth1_vlan: left promiscuous mode [ 254.591478][ T3099] veth0_vlan: left promiscuous mode [ 254.631684][T16222] loop3: detected capacity change from 512 to 0 [ 254.640101][T16222] syz.3.4628: attempt to access beyond end of device [ 254.640101][T16222] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 254.655544][T16222] syz.3.4628: attempt to access beyond end of device [ 254.655544][T16222] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 254.668969][T16222] syz.3.4628: attempt to access beyond end of device [ 254.668969][T16222] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 254.682363][T16222] syz.3.4628: attempt to access beyond end of device [ 254.682363][T16222] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 254.696505][T16222] syz.3.4628: attempt to access beyond end of device [ 254.696505][T16222] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 254.710110][T16224] syz.3.4628: attempt to access beyond end of device [ 254.710110][T16224] loop3: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 254.723502][ T29] audit: type=1400 audit(1720532821.582:2917): avc: denied { read } for pid=16221 comm="syz.3.4628" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 254.732750][T16222] syz.3.4628: attempt to access beyond end of device [ 254.732750][T16222] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 254.763340][T16222] syz.3.4628: attempt to access beyond end of device [ 254.763340][T16222] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 254.777299][T16222] syz.3.4628: attempt to access beyond end of device [ 254.777299][T16222] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 254.777357][ T3099] team0 (unregistering): Port device team_slave_1 removed [ 254.790671][T16222] syz.3.4628: attempt to access beyond end of device [ 254.790671][T16222] loop3: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 254.811951][ T3099] team0 (unregistering): Port device team_slave_0 removed [ 254.813325][T16222] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #18: block 9: comm syz.3.4628: unable to read itable block [ 254.833407][T16222] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 254.841810][T16222] EXT4-fs (loop3): I/O error while writing superblock [ 254.848624][T16222] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 254.857404][T16222] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 254.865795][T16222] EXT4-fs (loop3): I/O error while writing superblock [ 254.872674][T16222] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #18: comm syz.3.4628: mark_inode_dirty error [ 254.886348][T15992] veth1_vlan: entered promiscuous mode [ 254.897818][T16222] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 254.906302][T16222] EXT4-fs (loop3): I/O error while writing superblock [ 254.923781][T15992] veth0_macvtap: entered promiscuous mode [ 254.943140][T15992] veth1_macvtap: entered promiscuous mode [ 254.945374][T15884] EXT4-fs error (device loop3): ext4_get_inode_loc:4495: inode #2: block 5: comm syz-executor: unable to read itable block [ 254.964899][T15992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.965836][T15884] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 254.975564][T15992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.993361][T15884] EXT4-fs (loop3): I/O error while writing superblock [ 254.993835][T15992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.000517][T15884] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5731: IO failure [ 255.010954][T15992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.010976][T15992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.023547][T15884] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 255.029552][T15992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.042142][T15884] EXT4-fs (loop3): I/O error while writing superblock [ 255.050111][T15992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.058206][T15884] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 255.060351][T15884] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 255.067232][T15992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.102902][T15992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.109372][T15884] EXT4-fs (loop3): I/O error while writing superblock [ 255.112725][T15992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.112744][T15992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.140264][T15992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.151123][T15992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.161965][ T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #18: block 9: comm kworker/u8:2: unable to read itable block [ 255.162868][T15992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.177075][ T36] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 255.193760][ T36] EXT4-fs (loop3): I/O error while writing superblock [ 255.200356][T15992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.209325][T15992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.218807][T15992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.227746][T15992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.230423][ T36] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:2: unable to read itable block [ 255.251264][ T36] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 255.272458][ T36] EXT4-fs (loop3): I/O error while writing superblock [ 255.297426][T15884] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.316940][T15884] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 255.506056][T16244] loop4: detected capacity change from 0 to 512 [ 255.514812][T16244] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz.4.4637: iget: bogus i_mode (0) [ 255.526476][T16244] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4637: couldn't read orphan inode 17 (err -117) [ 255.543444][ T29] audit: type=1400 audit(1720532822.422:2918): avc: denied { read } for pid=16243 comm="syz.4.4637" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.567143][ T29] audit: type=1400 audit(1720532822.422:2919): avc: denied { open } for pid=16243 comm="syz.4.4637" path="/3/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 255.602887][T16244] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4637: bg 0: block 7: invalid block bitmap [ 255.624609][T16138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.633557][T16138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.648284][T16138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.657289][T16138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.697235][T16138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.711316][T16138] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.721397][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.728607][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.743551][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.750708][T12084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.770511][T16138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 255.781051][T16138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.839416][T16138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.910881][T16138] veth0_vlan: entered promiscuous mode [ 255.919585][T16138] veth1_vlan: entered promiscuous mode [ 255.939036][T16138] veth0_macvtap: entered promiscuous mode [ 255.947839][T16138] veth1_macvtap: entered promiscuous mode [ 255.959020][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.969541][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.979404][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.989865][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.999776][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.010317][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.020265][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.030894][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.042494][T16138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.053710][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.064389][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.074321][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.084804][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.094705][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.105291][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.115804][T16138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.126243][T16138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.137784][T16138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.147900][T16138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.156717][T16138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.165678][T16138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.174519][T16138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.220572][T16261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4611'. [ 256.281344][T16263] syzkaller0: entered promiscuous mode [ 256.348040][T16271] loop1: detected capacity change from 0 to 128 [ 256.354762][T16271] FAT-fs (loop1): Unrecognized mount option "ÿ" or missing value [ 256.527942][T16285] loop4: detected capacity change from 0 to 512 [ 256.536144][T16285] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #17: comm syz.4.4650: iget: bogus i_mode (0) [ 256.548034][T16285] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4650: couldn't read orphan inode 17 (err -117) [ 256.560761][T16285] EXT4-fs mount: 2 callbacks suppressed [ 256.560776][T16285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.588222][T16285] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4650: bg 0: block 7: invalid block bitmap [ 256.609239][T15992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.729866][ T3099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.766664][T16303] loop4: detected capacity change from 0 to 8192 [ 256.786346][T16313] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4664'. [ 256.803189][ T3099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.822455][T16303] loop4: p1 p2 p4 < > [ 256.826641][T16303] loop4: p1 size 8275718 extends beyond EOD, truncated [ 256.843648][T16303] loop4: p2 start 87291392 is beyond EOD, truncated [ 256.864377][ T3099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.906874][ T3099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.996998][ T3099] bridge_slave_1: left allmulticast mode [ 257.002876][ T3099] bridge_slave_1: left promiscuous mode [ 257.008651][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.017832][ T3099] bridge_slave_0: left allmulticast mode [ 257.023665][ T3099] bridge_slave_0: left promiscuous mode [ 257.029375][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.151779][ T3099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.170427][ T3099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.183989][ T3099] bond0 (unregistering): Released all slaves [ 257.194477][T16311] chnl_net:caif_netlink_parms(): no params data found [ 257.292931][T16348] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4671'. [ 257.336906][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.344159][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.377164][T16311] bridge_slave_0: entered allmulticast mode [ 257.410777][T16311] bridge_slave_0: entered promiscuous mode [ 257.461233][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.468479][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.478163][T16311] bridge_slave_1: entered allmulticast mode [ 257.516771][T16311] bridge_slave_1: entered promiscuous mode [ 257.527594][ T3099] hsr_slave_0: left promiscuous mode [ 257.536223][ T3099] hsr_slave_1: left promiscuous mode [ 257.577746][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.585319][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.601203][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.608767][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.634778][ T3099] veth1_macvtap: left promiscuous mode [ 257.640717][ T3099] veth0_macvtap: left promiscuous mode [ 257.646579][ T3099] veth1_vlan: left promiscuous mode [ 257.651952][ T3099] veth0_vlan: left promiscuous mode [ 257.764745][ T3099] team0 (unregistering): Port device team_slave_1 removed [ 257.777018][ T3099] team0 (unregistering): Port device team_slave_0 removed [ 257.839545][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.866579][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.890050][T16311] team0: Port device team_slave_0 added [ 257.898009][T16311] team0: Port device team_slave_1 added [ 257.917568][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.924664][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.950811][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.972734][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.979730][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.005706][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.019778][T16369] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4681'. [ 258.080460][T16311] hsr_slave_0: entered promiscuous mode [ 258.086751][T16311] hsr_slave_1: entered promiscuous mode [ 258.320094][T16393] loop1: detected capacity change from 0 to 128 [ 258.328045][T16393] FAT-fs (loop1): Unrecognized mount option "ÿ" or missing value [ 258.555327][T16311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.584310][T16311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.652548][T16402] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4693'. [ 259.048485][T16311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.084916][T16311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.117039][T16406] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4695'. [ 259.217331][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.247916][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.276146][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.283305][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.309207][T16311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.319753][T16311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.349678][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.356831][T12072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.476226][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.800263][T16311] veth0_vlan: entered promiscuous mode [ 259.835386][T16311] veth1_vlan: entered promiscuous mode [ 259.926240][T16311] veth0_macvtap: entered promiscuous mode [ 259.955980][T16311] veth1_macvtap: entered promiscuous mode [ 260.015429][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.026057][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.036030][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.046570][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.056459][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.066982][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.076826][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.087277][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.178401][T16311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.194867][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.205525][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.215485][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.226017][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.235938][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.246391][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.256446][T16311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.267086][T16311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.296565][T16311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.408445][T16311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.417667][T16311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.426606][T16311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.435409][T16311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.706784][T16470] loop3: detected capacity change from 0 to 1024 [ 260.723131][T16470] EXT4-fs: Ignoring removed orlov option [ 260.728990][T16470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.833370][T16470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.860415][ T29] audit: type=1400 audit(1720532827.732:2920): avc: denied { setattr } for pid=16469 comm="syz.3.4662" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 260.906620][ T331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.956348][ T331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.007316][T16311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.038565][ T331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.104932][ T331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.190136][ T331] bridge_slave_1: left allmulticast mode [ 261.196004][ T331] bridge_slave_1: left promiscuous mode [ 261.201898][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.209446][T16493] loop3: detected capacity change from 0 to 8192 [ 261.216516][ T331] bridge_slave_0: left allmulticast mode [ 261.222533][ T331] bridge_slave_0: left promiscuous mode [ 261.228277][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.253095][T16493] loop3: p1 p2 p4 < > [ 261.257590][T16493] loop3: p1 size 8275718 extends beyond EOD, truncated [ 261.265135][T16493] loop3: p2 start 87291392 is beyond EOD, truncated [ 261.341419][T16498] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4725'. [ 261.376503][ T331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.396334][ T331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.409118][ T331] bond0 (unregistering): Released all slaves [ 261.556745][ T331] hsr_slave_0: left promiscuous mode [ 261.574079][ T331] hsr_slave_1: left promiscuous mode [ 261.580221][ T331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.587704][ T331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.597731][ T331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.605377][ T331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.618672][ T331] veth1_macvtap: left promiscuous mode [ 261.624344][ T331] veth0_macvtap: left promiscuous mode [ 261.629891][ T331] veth1_vlan: left promiscuous mode [ 261.635223][ T331] veth0_vlan: left promiscuous mode [ 261.765529][ T331] team0 (unregistering): Port device team_slave_1 removed [ 261.777631][ T331] team0 (unregistering): Port device team_slave_0 removed [ 261.820497][T16473] chnl_net:caif_netlink_parms(): no params data found [ 261.873616][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.880756][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.888042][T16473] bridge_slave_0: entered allmulticast mode [ 261.894923][T16473] bridge_slave_0: entered promiscuous mode [ 261.902162][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.909268][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.916599][T16473] bridge_slave_1: entered allmulticast mode [ 261.924490][T16473] bridge_slave_1: entered promiscuous mode [ 261.950594][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.964294][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.014318][T16473] team0: Port device team_slave_0 added [ 262.024228][T16473] team0: Port device team_slave_1 added [ 262.089712][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.096949][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.123129][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.203481][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.210541][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.236579][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.356303][T16473] hsr_slave_0: entered promiscuous mode [ 262.364634][T16473] hsr_slave_1: entered promiscuous mode [ 262.370738][T16473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.379430][T16473] Cannot create hsr debugfs directory [ 262.387948][T16525] tipc: Started in network mode [ 262.392979][T16525] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 262.400169][T16525] tipc: Enabled bearer , priority 10 [ 262.430419][T16525] tipc: Resetting bearer [ 262.463924][T16525] tipc: Disabling bearer [ 262.794676][T16473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.816178][T16473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.835247][T16473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.855433][T16473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.971243][T16473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.020690][T16473] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.039392][T12094] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.046545][T12094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.083553][T12094] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.090769][T12094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.120395][T16533] netlink: 'syz.0.4738': attribute type 10 has an invalid length. [ 263.143660][T16533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.152386][T16533] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 263.153733][T16536] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16536 comm=syz.0.4738 [ 263.178550][T16473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.189240][T16473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.206883][T16538] loop3: detected capacity change from 0 to 512 [ 263.232924][T16538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.258513][T16538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.279182][T16538] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.281927][T16473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.296209][T16538] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.4740: failed to insert inode 16: doubly allocated? [ 263.296737][ T29] audit: type=1400 audit(1720532830.172:2921): avc: denied { unlink } for pid=16537 comm="syz.3.4740" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.340937][T16311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.341110][ T29] audit: type=1400 audit(1720532830.192:2922): avc: denied { map } for pid=16537 comm="syz.3.4740" path="socket:[64752]" dev="sockfs" ino=64752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.374347][ T29] audit: type=1400 audit(1720532830.192:2923): avc: denied { read } for pid=16537 comm="syz.3.4740" path="socket:[64752]" dev="sockfs" ino=64752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.427704][T16473] veth0_vlan: entered promiscuous mode [ 263.446375][T16473] veth1_vlan: entered promiscuous mode [ 263.462284][T16473] veth0_macvtap: entered promiscuous mode [ 263.469740][T16473] veth1_macvtap: entered promiscuous mode [ 263.480151][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.490917][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.500971][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.511523][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.521367][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.531872][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.541748][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.552184][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.563613][T16473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.576653][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.587250][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.597183][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.607632][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.617727][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.628205][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.638118][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.648678][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.659318][T16473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.670555][T16473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.679481][T16473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.688376][T16473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.697152][T16473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.936232][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.955154][T16567] tipc: Enabling of bearer rejected, failed to enable media [ 264.998018][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.027646][T16579] netlink: 'syz.0.4752': attribute type 10 has an invalid length. [ 265.053441][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.065771][T16579] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16579 comm=syz.0.4752 [ 265.115459][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.282495][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.296356][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.312759][ T28] bond0 (unregistering): Released all slaves [ 265.322240][ T28] bond1 (unregistering): Released all slaves [ 265.331633][ T28] bond2 (unregistering): Released all slaves [ 265.370308][T16628] autofs4:pid:16628:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 265.448118][ T28] hsr_slave_0: left promiscuous mode [ 265.456759][ T28] hsr_slave_1: left promiscuous mode [ 265.463774][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.471217][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.479265][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.486867][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.504001][ T28] veth1_macvtap: left promiscuous mode [ 265.509494][ T28] veth0_macvtap: left promiscuous mode [ 265.515043][ T28] veth1_vlan: left promiscuous mode [ 265.520263][ T28] veth0_vlan: left promiscuous mode [ 265.615498][ T28] team0 (unregistering): Port device team_slave_1 removed [ 265.627770][ T28] team0 (unregistering): Port device team_slave_0 removed [ 265.668377][T16570] chnl_net:caif_netlink_parms(): no params data found [ 265.715106][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.722238][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.728281][T16658] autofs4:pid:16658:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 265.729464][T16570] bridge_slave_0: entered allmulticast mode [ 265.747071][T16570] bridge_slave_0: entered promiscuous mode [ 265.754523][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.761646][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.768923][T16570] bridge_slave_1: entered allmulticast mode [ 265.775898][T16570] bridge_slave_1: entered promiscuous mode [ 265.794076][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.805466][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.826430][T16570] team0: Port device team_slave_0 added [ 265.833291][T16570] team0: Port device team_slave_1 added [ 265.859673][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.866704][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.892721][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.904752][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.911799][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.938039][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.982741][T16570] hsr_slave_0: entered promiscuous mode [ 265.989029][T16570] hsr_slave_1: entered promiscuous mode [ 265.994961][T16570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.002787][T16570] Cannot create hsr debugfs directory [ 266.167228][ T29] audit: type=1400 audit(1720532833.042:2924): avc: denied { nlmsg_write } for pid=16682 comm="syz.0.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 266.277621][T16570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.286774][T16570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.295586][T16570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.304671][T16570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.346070][T16570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.366708][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.378839][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.386039][T12072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.394523][T12084] kernel write not supported for file /vcsa1 (pid: 12084 comm: kworker/0:13) [ 266.398126][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.410520][T12072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.437130][T16570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.447619][T16570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.506044][T16570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.592976][T16570] veth0_vlan: entered promiscuous mode [ 266.601636][T16570] veth1_vlan: entered promiscuous mode [ 266.634666][T16570] veth0_macvtap: entered promiscuous mode [ 266.643974][T16570] veth1_macvtap: entered promiscuous mode [ 266.656574][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.667199][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.677058][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.687531][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.697520][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.708140][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.718082][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.728559][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.740457][T16570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.751866][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.762611][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.772653][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.783278][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.793126][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.803897][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.813973][T16570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.824401][T16570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.835829][T16570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.845673][T16570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.854420][T16570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.863273][T16570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.872119][T16570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.991285][T16722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4807'. [ 267.347570][ T29] audit: type=1400 audit(1720532834.222:2925): avc: denied { getopt } for pid=16760 comm="syz.1.4823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.464822][T16777] nfs4: Unknown parameter 'fscontexttch' [ 267.482598][ T967] kernel write not supported for file /vcsa1 (pid: 967 comm: kworker/0:2) [ 267.707505][T16797] bridge0: entered promiscuous mode [ 267.712831][T16797] bridge0: entered allmulticast mode [ 267.730641][T16801] nfs4: Unknown parameter 'fscontexttch' [ 267.759515][ T967] kernel write not supported for file /vcsa1 (pid: 967 comm: kworker/0:2) [ 267.882647][T16824] loop1: detected capacity change from 0 to 128 [ 267.964363][T16829] nfs4: Unknown parameter 'fscontexttch' [ 268.052132][T16826] bridge0: entered promiscuous mode [ 268.057406][T16826] bridge0: entered allmulticast mode [ 268.159456][T16863] loop2: detected capacity change from 0 to 512 [ 268.168234][T16863] EXT4-fs: Ignoring removed bh option [ 268.184407][T16863] EXT4-fs error (device loop2): __ext4_iget:4906: inode #15: block 1803188595: comm syz.2.4865: invalid block [ 268.196763][T16863] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.4865: couldn't read orphan inode 15 (err -117) [ 268.209846][T16863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.236106][T16570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.476917][ T29] audit: type=1400 audit(1720532835.352:2926): avc: denied { nlmsg_write } for pid=16909 comm="syz.1.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 269.054099][T16916] nfs4: Unknown parameter 'fscontexttch' [ 269.191309][T16918] bridge0: entered promiscuous mode [ 269.196641][T16918] bridge0: entered allmulticast mode [ 270.434347][T16983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4910'. [ 270.458393][T16988] x_tables: duplicate underflow at hook 4 [ 270.705505][T17007] loop2: detected capacity change from 0 to 1024 [ 270.724269][T17007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.746681][T16570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.847277][T17022] x_tables: duplicate underflow at hook 4 [ 270.866721][T17024] pim6reg: entered allmulticast mode [ 270.873782][T17024] pim6reg: left allmulticast mode [ 270.970892][T17032] loop2: detected capacity change from 0 to 1024 [ 270.993673][T17032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.017101][T16570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.388763][T17039] chnl_net:caif_netlink_parms(): no params data found [ 271.417924][T17061] x_tables: duplicate underflow at hook 4 [ 271.436409][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.461848][T17066] pim6reg: entered allmulticast mode [ 271.484930][T17066] pim6reg: left allmulticast mode [ 271.505010][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.516465][T17039] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.523630][T17039] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.538102][T17039] bridge_slave_0: entered allmulticast mode [ 271.547031][T17039] bridge_slave_0: entered promiscuous mode [ 271.554588][T17039] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.561723][T17039] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.570456][T17039] bridge_slave_1: entered allmulticast mode [ 271.584420][T17039] bridge_slave_1: entered promiscuous mode [ 271.596859][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.624647][T17039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.636102][T17039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.662447][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.690322][T17039] team0: Port device team_slave_0 added [ 271.698686][T17039] team0: Port device team_slave_1 added [ 271.718365][T17039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.725440][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.751516][T17039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.762871][T17039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.769987][T17039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.796091][T17039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.834716][T17039] hsr_slave_0: entered promiscuous mode [ 271.840738][T17039] hsr_slave_1: entered promiscuous mode [ 271.846574][T17039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.854435][T17039] Cannot create hsr debugfs directory [ 271.878891][T17090] loop1: detected capacity change from 0 to 1024 [ 271.886162][ T28] bridge_slave_1: left allmulticast mode [ 271.891932][ T28] bridge_slave_1: left promiscuous mode [ 271.897595][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.910034][ T28] bridge_slave_0: left allmulticast mode [ 271.915804][ T28] bridge_slave_0: left promiscuous mode [ 271.921624][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.932550][T17090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.959204][T16473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.055443][T17097] loop1: detected capacity change from 0 to 1764 [ 272.075753][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.086831][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.099235][ T28] bond0 (unregistering): Released all slaves [ 272.146525][T17097] netlink: 'syz.1.4953': attribute type 10 has an invalid length. [ 272.165182][T17097] team0: Device veth1_macvtap failed to register rx_handler [ 272.203305][ T28] hsr_slave_0: left promiscuous mode [ 272.215156][ T28] hsr_slave_1: left promiscuous mode [ 272.221086][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.228653][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.237565][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.245011][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.256745][ T28] veth1_macvtap: left promiscuous mode [ 272.262348][ T28] veth0_macvtap: left promiscuous mode [ 272.267867][ T28] veth1_vlan: left promiscuous mode [ 272.273348][ T28] veth0_vlan: left promiscuous mode [ 272.440761][ T28] team0 (unregistering): Port device team_slave_1 removed [ 272.453168][ T28] team0 (unregistering): Port device team_slave_0 removed [ 272.522056][T17104] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 272.661001][T17121] loop2: detected capacity change from 0 to 164 [ 272.673320][T17121] bio_check_eod: 38 callbacks suppressed [ 272.673336][T17121] syz.2.4963: attempt to access beyond end of device [ 272.673336][T17121] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 272.694529][T17121] syz.2.4963: attempt to access beyond end of device [ 272.694529][T17121] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.708563][T17121] syz.2.4963: attempt to access beyond end of device [ 272.708563][T17121] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.725603][T17121] syz.2.4963: attempt to access beyond end of device [ 272.725603][T17121] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.739112][T17124] syz.2.4963: attempt to access beyond end of device [ 272.739112][T17124] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.752749][T17121] syz.2.4963: attempt to access beyond end of device [ 272.752749][T17121] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.766325][T17124] syz.2.4963: attempt to access beyond end of device [ 272.766325][T17124] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.780017][T17121] syz.2.4963: attempt to access beyond end of device [ 272.780017][T17121] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.801697][T17121] syz.2.4963: attempt to access beyond end of device [ 272.801697][T17121] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.823969][T17124] syz.2.4963: attempt to access beyond end of device [ 272.823969][T17124] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 272.917299][T17039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.943918][T17039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.964072][T17039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.982487][T17039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.070364][T17039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.103378][T17039] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.135363][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.142516][T12088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.154493][T17145] program syz.0.4973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.161937][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.170874][T12088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.172515][T17145] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.316599][T17039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.611182][T17039] veth0_vlan: entered promiscuous mode [ 273.626542][T17039] veth1_vlan: entered promiscuous mode [ 273.660305][T17189] program syz.0.4985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.671326][T17039] veth0_macvtap: entered promiscuous mode [ 273.672707][T17189] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 273.680731][T17039] veth1_macvtap: entered promiscuous mode [ 273.699391][T17187] netlink: 'syz.1.4986': attribute type 8 has an invalid length. [ 273.729403][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.739981][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.749920][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.760511][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.770401][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.780960][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.790897][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.801366][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.813014][T17039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.814272][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.814293][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.814319][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.814335][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.814346][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.814359][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.814445][T17039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.814539][T17039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.815381][T17039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.816643][T17039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.816680][T17039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.816849][T17039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.816882][T17039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.905679][T17198] loop2: detected capacity change from 0 to 1024 [ 273.937800][T17198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.021213][T17207] loop1: detected capacity change from 0 to 164 [ 274.028933][T17198] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 274.044574][T17198] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 257 with error 28 [ 274.057112][T17198] EXT4-fs (loop2): This should not happen!! Data will be lost [ 274.057112][T17198] [ 274.067001][T17198] EXT4-fs (loop2): Total free blocks count 0 [ 274.067811][T17209] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 274.073168][T17198] EXT4-fs (loop2): Free/Dirty block details [ 274.073183][T17198] EXT4-fs (loop2): free_blocks=68451041280 [ 274.073196][T17198] EXT4-fs (loop2): dirty_blocks=272 [ 274.073208][T17198] EXT4-fs (loop2): Block reservation details [ 274.073219][T17198] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 274.155465][T16570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.204802][T17221] program syz.4.4998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.214330][T17221] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 274.263889][T17226] loop4: detected capacity change from 0 to 1024 [ 274.270813][T17226] EXT4-fs: Ignoring removed nobh option [ 274.276545][T17226] EXT4-fs: Ignoring removed orlov option [ 274.296176][T17226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.447270][T17235] loop2: detected capacity change from 0 to 128 [ 274.467996][T17235] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.504569][T17235] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.600651][T16570] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.614726][T17039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.718804][T17239] loop2: detected capacity change from 0 to 1764 [ 274.780370][T17239] netlink: 'syz.2.5003': attribute type 10 has an invalid length. [ 274.820424][T17239] team0: Device veth1_macvtap failed to register rx_handler [ 274.915190][T17251] netlink: 'syz.4.5009': attribute type 8 has an invalid length. [ 275.025215][T17258] program syz.1.5011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.062106][T17258] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 275.094287][T17263] netlink: 'syz.4.5014': attribute type 5 has an invalid length. [ 275.113832][T17273] loop2: detected capacity change from 0 to 128 [ 275.141986][ T29] audit: type=1400 audit(1720532842.012:2927): avc: denied { unmount } for pid=16473 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 275.142134][T17273] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.178044][T17273] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 275.214745][T17279] loop1: detected capacity change from 0 to 1024 [ 275.232563][T17279] EXT4-fs: Ignoring removed nobh option [ 275.238166][T17279] EXT4-fs: Ignoring removed orlov option [ 275.259258][T16570] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.275213][T17279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.362623][T17292] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5025'. [ 275.385017][ T29] audit: type=1400 audit(1720532842.262:2928): avc: denied { recv } for pid=17277 comm="syz.1.5021" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 275.414045][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.421479][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.429016][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 275.436630][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.444076][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.451535][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.459353][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.466827][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.474630][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.482075][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.489777][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.497304][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.504784][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.512348][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.519861][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.527305][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.534977][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.542695][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.550281][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.557791][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.565244][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.573029][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.580561][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.588094][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.595579][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.603167][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.610640][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.618147][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.625760][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.633306][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.640850][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.648284][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.655783][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.663279][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.670680][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.678151][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.685625][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.693353][ T967] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 275.711197][ T967] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 275.722925][T16473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.732216][T17286] chnl_net:caif_netlink_parms(): no params data found [ 275.766797][T17325] autofs4:pid:17325:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc0189374) [ 275.780058][T17325] autofs4:pid:17325:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 275.813177][ T3099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.867567][ T3099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.905072][ T29] audit: type=1326 audit(1720532842.776:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cdc43bd9 code=0x7ffc0000 [ 275.920957][T17348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5046'. [ 275.940623][T17286] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.947849][T17286] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.957461][ T29] audit: type=1326 audit(1720532842.826:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f06cdc43bd9 code=0x7ffc0000 [ 275.981104][ T29] audit: type=1326 audit(1720532842.826:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cdc43bd9 code=0x7ffc0000 [ 276.004827][ T29] audit: type=1326 audit(1720532842.826:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f06cdc4275f code=0x7ffc0000 [ 276.013389][T17286] bridge_slave_0: entered allmulticast mode [ 276.028232][ T29] audit: type=1326 audit(1720532842.826:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cdc43bd9 code=0x7ffc0000 [ 276.056537][T17286] bridge_slave_0: entered promiscuous mode [ 276.057675][ T29] audit: type=1326 audit(1720532842.826:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06cdc43bd9 code=0x7ffc0000 [ 276.074412][T17286] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.086918][ T29] audit: type=1326 audit(1720532842.826:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cdc43bd9 code=0x7ffc0000 [ 276.086949][ T29] audit: type=1326 audit(1720532842.826:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.0.5044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06cdc459f7 code=0x7ffc0000 [ 276.141260][T17286] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.152585][T17286] bridge_slave_1: entered allmulticast mode [ 276.159063][T17286] bridge_slave_1: entered promiscuous mode [ 276.169065][T17346] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 276.200779][ T3099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.214582][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.222042][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.229622][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 276.237069][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.244495][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.252028][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.259424][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.266881][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.274316][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.281740][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.289142][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.296629][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.304042][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.311508][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.318949][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.326366][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.333850][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.341294][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.348726][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.356216][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.363624][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.364682][T17361] autofs4:pid:17361:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc0189374) [ 276.371012][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.371043][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.384207][T17361] autofs4:pid:17361:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 276.391556][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.417830][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.425349][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.432774][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.440159][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.447661][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.455105][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.462591][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.470001][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.477433][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.484896][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.492417][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.499908][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.507341][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.514764][ T3614] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 276.523403][ T3614] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 276.551020][T17286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.563371][T17367] netlink: 45 bytes leftover after parsing attributes in process `syz.1.5053'. [ 276.575891][T17286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.604171][ T3099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.624246][T17286] team0: Port device team_slave_0 added [ 276.631692][T17286] team0: Port device team_slave_1 added [ 276.655501][T17377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5056'. [ 276.670005][T17286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.677116][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.703070][T17286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.723743][T17376] netlink: 'syz.1.5055': attribute type 5 has an invalid length. [ 276.783153][T17286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.790219][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.816374][T17286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.831853][T17386] autofs4:pid:17386:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc0189374) [ 276.845192][T17386] autofs4:pid:17386:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 276.872911][ T3099] bridge_slave_1: left allmulticast mode [ 276.878611][ T3099] bridge_slave_1: left promiscuous mode [ 276.884307][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.894693][ T3099] bridge_slave_0: left allmulticast mode [ 276.900470][ T3099] bridge_slave_0: left promiscuous mode [ 276.906223][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.024243][ T3099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.036501][ T3099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.047221][ T3099] bond0 (unregistering): Released all slaves [ 277.057492][T17389] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 277.075072][T17391] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5063'. [ 277.111090][T17286] hsr_slave_0: entered promiscuous mode [ 277.128806][T17286] hsr_slave_1: entered promiscuous mode [ 277.136492][T17286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.142435][T17396] 9pnet: p9_errstr2errno: server reported unknown error ¥Š [ 277.151726][T17286] Cannot create hsr debugfs directory [ 277.166741][ T3099] hsr_slave_0: left promiscuous mode [ 277.173719][ T3099] hsr_slave_1: left promiscuous mode [ 277.179508][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.187021][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.198896][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.206451][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.217412][T17400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5066'. [ 277.226644][ T3099] veth1_macvtap: left promiscuous mode [ 277.232201][ T3099] veth0_macvtap: left promiscuous mode [ 277.237746][ T3099] veth1_vlan: left promiscuous mode [ 277.243146][ T3099] veth0_vlan: left promiscuous mode [ 277.392184][ T3099] team0 (unregistering): Port device team_slave_1 removed [ 277.400301][T17415] autofs4:pid:17415:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc0189374) [ 277.413614][T17415] autofs4:pid:17415:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 277.439778][ T3099] team0 (unregistering): Port device team_slave_0 removed [ 277.487987][T17419] 9pnet: p9_errstr2errno: server reported unknown error ¥Š [ 277.513659][T17423] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5074'. [ 277.590793][T17439] loop2: detected capacity change from 0 to 2048 [ 277.599934][T17439] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 277.810753][T17456] netlink: 45 bytes leftover after parsing attributes in process `syz.2.5091'. [ 277.886114][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 277.927235][T17286] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.941307][T17286] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.961427][T17286] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.980911][T17286] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.991338][T17471] loop4: detected capacity change from 0 to 512 [ 278.011102][T17471] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.5098: corrupted in-inode xattr: invalid ea_ino [ 278.033341][T17471] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.5098: couldn't read orphan inode 15 (err -117) [ 278.052260][T17286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.072430][T17472] loop2: detected capacity change from 0 to 2048 [ 278.074952][T17286] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.087068][T17472] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 278.097211][T17471] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.102770][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.116391][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.127802][T17471] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz.4.5098: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 278.159982][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.167095][T12071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.192403][T17039] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 278.280516][T17286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.331998][T17488] netlink: 45 bytes leftover after parsing attributes in process `syz.4.5102'. [ 278.390246][T17286] veth0_vlan: entered promiscuous mode [ 278.408818][T17286] veth1_vlan: entered promiscuous mode [ 278.436480][T17286] veth0_macvtap: entered promiscuous mode [ 278.455443][T17286] veth1_macvtap: entered promiscuous mode [ 278.467153][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.477760][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.487774][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.498239][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.508251][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.518806][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.528802][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.539361][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.553387][T17286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.564261][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.575039][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.585156][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.595679][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.605533][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.605555][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.605568][T17286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.605604][T17286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.617905][T17286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.625679][T17286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.625722][T17286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.625764][T17286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.625872][T17286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.653675][T17506] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 278.745115][T17508] loop4: detected capacity change from 0 to 512 [ 278.768454][T17508] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.5109: corrupted in-inode xattr: invalid ea_ino [ 278.797463][T17508] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.5109: couldn't read orphan inode 15 (err -117) [ 278.810010][T17508] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.832577][T17508] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz.4.5109: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 278.861448][T17039] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 278.888844][T17515] loop3: detected capacity change from 0 to 164 [ 278.910591][T17515] bio_check_eod: 32931 callbacks suppressed [ 278.910609][T17515] syz.3.5022: attempt to access beyond end of device [ 278.910609][T17515] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 278.942629][T17515] syz.3.5022: attempt to access beyond end of device [ 278.942629][T17515] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.958074][T17515] syz.3.5022: attempt to access beyond end of device [ 278.958074][T17515] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.976180][T17515] syz.3.5022: attempt to access beyond end of device [ 278.976180][T17515] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 278.989830][T17530] syz.3.5022: attempt to access beyond end of device [ 278.989830][T17530] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.006144][T17529] 9pnet: p9_errstr2errno: server reported unknown error ¥Š [ 279.012396][T17530] syz.3.5022: attempt to access beyond end of device [ 279.012396][T17530] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.027172][T17515] syz.3.5022: attempt to access beyond end of device [ 279.027172][T17515] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.040883][T17530] syz.3.5022: attempt to access beyond end of device [ 279.040883][T17530] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.062850][T17530] syz.3.5022: attempt to access beyond end of device [ 279.062850][T17530] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.076541][T17515] syz.3.5022: attempt to access beyond end of device [ 279.076541][T17515] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 279.667561][T17551] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 279.890849][T17573] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 279.976715][T17581] loop4: detected capacity change from 0 to 512 [ 279.977258][T17582] loop2: detected capacity change from 0 to 128 [ 279.992061][T17581] EXT4-fs: Ignoring removed nobh option [ 280.022221][T17581] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 280.041914][T17581] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.5136: attempt to clear invalid blocks 2 len 1 [ 280.062811][T17581] EXT4-fs (loop4): Remounting filesystem read-only [ 280.085002][T17581] EXT4-fs (loop4): 1 truncate cleaned up [ 280.105712][T17581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.131562][T17581] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 280.141616][T17599] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ac1e:0001 with DS=0xd [ 280.157883][T17581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.278039][T17610] loop2: detected capacity change from 0 to 128 [ 280.360110][T17615] netlink: 'syz.1.5155': attribute type 5 has an invalid length. [ 280.594099][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.674810][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.727280][T17634] __nla_validate_parse: 1 callbacks suppressed [ 280.727299][T17634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5160'. [ 280.745075][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5158'. [ 280.811998][T17638] loop2: detected capacity change from 0 to 128 [ 280.910086][T17646] loop2: detected capacity change from 0 to 512 [ 280.913921][T17648] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 280.916823][T17646] EXT4-fs: Ignoring removed nobh option [ 280.931778][T17646] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 280.940491][T17646] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.5163: attempt to clear invalid blocks 2 len 1 [ 280.954868][T17646] EXT4-fs (loop2): Remounting filesystem read-only [ 280.962182][T17646] EXT4-fs (loop2): 1 truncate cleaned up [ 280.967345][T17653] loop3: detected capacity change from 0 to 512 [ 280.968245][T17646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.986975][T17646] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 280.994229][T17646] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.004910][T17653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.018820][T17653] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.062045][T17653] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz.3.5169: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 281.099499][T17286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.140238][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5173'. [ 281.140511][T17662] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 281.182253][T17668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5171'. [ 281.237625][T17676] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 281.368541][T17683] loop3: detected capacity change from 0 to 512 [ 281.375781][T17683] EXT4-fs: Ignoring removed nobh option [ 281.393894][T17683] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 281.394906][T17685] loop2: detected capacity change from 0 to 512 [ 281.409505][T17683] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.5182: attempt to clear invalid blocks 2 len 1 [ 281.422821][T17683] EXT4-fs (loop3): Remounting filesystem read-only [ 281.431026][T17683] EXT4-fs (loop3): 1 truncate cleaned up [ 281.437787][T17683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.450640][T17683] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 281.466376][T17683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.554339][T17685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.569109][T17685] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.639734][T17698] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 281.664066][T17685] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.5183: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 281.799630][T16570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.838320][T17704] netlink: 'syz.0.5191': attribute type 5 has an invalid length. [ 281.935067][T17717] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.945043][T17717] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.020113][T17728] loop2: detected capacity change from 0 to 512 [ 282.020840][T17729] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 282.054067][T17728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.067201][T17728] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.084761][T17728] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 3: comm syz.2.5201: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 282.174525][T16570] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.177206][T17735] loop1: detected capacity change from 0 to 512 [ 282.192045][T17735] EXT4-fs: Ignoring removed nobh option [ 282.199820][T17735] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 282.208528][T17735] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.5204: attempt to clear invalid blocks 2 len 1 [ 282.230506][T17735] EXT4-fs (loop1): Remounting filesystem read-only [ 282.254030][T17735] EXT4-fs (loop1): 1 truncate cleaned up [ 282.260222][T17735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.274091][T17735] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 282.298110][T17735] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.419364][T17759] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 282.500730][T17763] loop4: detected capacity change from 0 to 512 [ 282.534974][T17763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.548056][T17763] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.561174][T17763] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #2: block 3: comm syz.4.5216: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 282.661000][T17039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.846720][T17777] loop3: detected capacity change from 0 to 256 [ 282.909738][T17777] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 282.969157][T17777] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 283.102869][T17806] netlink: 'syz.2.5233': attribute type 5 has an invalid length. [ 283.200178][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.210735][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.210915][T17812] loop3: detected capacity change from 0 to 256 [ 283.238069][T17812] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 283.248780][T17812] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 283.441634][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 283.441651][ T29] audit: type=1400 audit(1720532850.226:3025): avc: denied { write } for pid=17809 comm="syz.0.5235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 283.839870][ T29] audit: type=1400 audit(1720532850.706:3026): avc: denied { ioctl } for pid=17842 comm="syz.3.5247" path="socket:[71084]" dev="sockfs" ino=71084 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.845783][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5247'. [ 283.878807][ T29] audit: type=1400 audit(1720532850.706:3027): avc: denied { append } for pid=17842 comm="syz.3.5247" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 283.882497][T17845] loop1: detected capacity change from 0 to 256 [ 283.913158][T17845] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 283.924379][T17845] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 284.048562][ T29] audit: type=1400 audit(1720532850.916:3028): avc: denied { mounton } for pid=17859 comm="syz.2.5255" path="/139/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 284.108551][T17870] loop2: detected capacity change from 0 to 256 [ 284.187087][T17870] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 284.229611][T17884] netlink: 'syz.3.5266': attribute type 5 has an invalid length. [ 284.240199][T17870] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 284.286421][T17884] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.297060][T17884] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.332246][T17887] loop1: detected capacity change from 0 to 1764 [ 284.484077][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5269'. [ 284.530122][T17893] netlink: 340 bytes leftover after parsing attributes in process `syz.2.5270'. [ 284.690566][T17914] loop2: detected capacity change from 0 to 256 [ 284.711234][T17914] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 284.735246][T17914] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 284.773147][T17923] netlink: 340 bytes leftover after parsing attributes in process `syz.4.5285'. [ 284.819498][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'. [ 284.852085][T17939] netlink: 'syz.0.5292': attribute type 5 has an invalid length. [ 284.958367][ T29] audit: type=1326 audit(1720532851.826:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.4.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034497ebd9 code=0x7fc00000 [ 285.006601][ T29] audit: type=1400 audit(1720532851.876:3030): avc: denied { watch watch_reads } for pid=17949 comm="syz.2.5295" path="/syzcgroup/cpu/syz2/cpuset.cpus" dev="cgroup" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 285.048197][ T29] audit: type=1326 audit(1720532851.916:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.4.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f034497ebd9 code=0x7fc00000 [ 285.097484][T17948] loop4: detected capacity change from 0 to 512 [ 285.132296][T17948] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.5291: corrupted in-inode xattr: invalid ea_ino [ 285.147778][T17948] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.5291: couldn't read orphan inode 12 (err -117) [ 285.195837][T17948] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.565748][T17980] loop1: detected capacity change from 0 to 1764 [ 285.674992][ T29] audit: type=1326 audit(1720532852.546:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17936 comm="syz.4.5291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f034497ebd9 code=0x7fc00000 [ 285.766736][T17039] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 285.792490][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5307'. [ 285.892720][T17989] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 285.974809][T17999] loop3: detected capacity change from 0 to 2048 [ 286.004691][T17999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.019315][T17999] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.039757][T17286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.137565][ T29] audit: type=1400 audit(1720532853.006:3033): avc: denied { mount } for pid=18010 comm="syz.2.5320" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 286.173759][T18018] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 286.263542][T18022] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5326'. [ 286.365601][T18031] loop3: detected capacity change from 0 to 2048 [ 286.383304][T18031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.396908][T18031] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.424287][T17286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.639117][T18043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5332'. [ 286.985475][T18056] loop4: detected capacity change from 0 to 512 [ 287.023219][T18056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.048667][T18056] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.070178][T18056] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.5337: corrupted inode contents [ 287.105387][T18056] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.5337: mark_inode_dirty error [ 287.131136][T18056] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.5337: corrupted inode contents [ 287.153998][T18056] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.5337: mark_inode_dirty error [ 287.169984][ T3099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.235429][ T3099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.250020][T17039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.315218][ T3099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.353998][T18051] chnl_net:caif_netlink_parms(): no params data found [ 287.384605][T18081] loop1: detected capacity change from 0 to 2048 [ 287.406266][T18081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.750706][T18087] loop4: detected capacity change from 0 to 4096 [ 287.758263][T18081] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.791400][ T3099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.805204][T18087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.885223][T16473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.907414][T18051] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.914692][T18051] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.922551][T18051] bridge_slave_0: entered allmulticast mode [ 287.929240][T18051] bridge_slave_0: entered promiscuous mode [ 287.937755][T18051] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.944855][T18051] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.952930][T18051] bridge_slave_1: entered allmulticast mode [ 287.959691][T18051] bridge_slave_1: entered promiscuous mode [ 287.979991][ T3099] bridge_slave_1: left allmulticast mode [ 287.985694][ T3099] bridge_slave_1: left promiscuous mode [ 287.991448][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.000191][ T3099] bridge_slave_0: left allmulticast mode [ 288.005949][ T3099] bridge_slave_0: left promiscuous mode [ 288.011682][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.117183][ T3099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.129665][ T3099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.144140][ T3099] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 288.155009][ T3099] bond0 (unregistering): Released all slaves [ 288.186070][T18051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.200162][T17039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.205912][T18051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.225134][ T3099] tipc: Left network mode [ 288.231431][T18051] team0: Port device team_slave_0 added [ 288.239350][T18051] team0: Port device team_slave_1 added [ 288.279959][T18051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.286984][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.313147][T18051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.327674][ T29] audit: type=1326 audit(1720532855.206:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.2.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ec5dfbd9 code=0x7fc00000 [ 288.329460][T18051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.358701][T18051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.385072][T18051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.399500][T18100] netlink: 'syz.4.5346': attribute type 1 has an invalid length. [ 288.409703][ T3099] hsr_slave_0: left promiscuous mode [ 288.417097][ T3099] hsr_slave_1: left promiscuous mode [ 288.425490][T18098] loop2: detected capacity change from 0 to 512 [ 288.432060][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.439626][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.453240][ T3099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.453456][T18098] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.5347: corrupted in-inode xattr: invalid ea_ino [ 288.460723][ T3099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.474241][T18098] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5347: couldn't read orphan inode 12 (err -117) [ 288.497195][T18110] loop4: detected capacity change from 0 to 512 [ 288.504037][ T3099] veth1_macvtap: left promiscuous mode [ 288.509567][ T3099] veth0_macvtap: left promiscuous mode [ 288.510372][T18098] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.515310][ T3099] veth1_vlan: left promiscuous mode [ 288.530397][T18110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.532887][ T3099] veth0_vlan: left promiscuous mode [ 288.551240][T18110] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.573640][T18110] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.5350: corrupted inode contents [ 288.585837][T18110] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.5350: mark_inode_dirty error [ 288.597556][T18110] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.5350: corrupted inode contents [ 288.611207][T18110] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.5350: mark_inode_dirty error [ 288.641800][T17039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.706199][ T3099] team0 (unregistering): Port device team_slave_1 removed [ 288.718620][ T3099] team0 (unregistering): Port device team_slave_0 removed [ 288.787136][T18051] hsr_slave_0: entered promiscuous mode [ 288.795743][T18051] hsr_slave_1: entered promiscuous mode [ 288.941810][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5353'. [ 289.061559][T18130] loop4: detected capacity change from 0 to 4096 [ 289.131445][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 289.131461][ T29] audit: type=1326 audit(1720532855.996:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.2.5347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ec5dfbd9 code=0x7fc00000 [ 289.177743][T16570] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 289.224355][T18130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.349094][T18051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.388101][T18051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.404019][T18051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.433292][T18051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.553574][ T29] audit: type=1326 audit(1720532856.426:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18140 comm="syz.2.5359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58ec5dfbd9 code=0x0 [ 289.557835][T18051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.619444][T18051] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.645091][T12072] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.652206][T12072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.662697][T12072] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.669800][T12072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.721171][T18051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.778709][T17039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.826473][T18051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.894018][ T29] audit: type=1400 audit(1720532856.766:3041): avc: denied { write } for pid=18156 comm="syz.4.5363" name="file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 289.924583][T18051] veth0_vlan: entered promiscuous mode [ 289.933600][T18051] veth1_vlan: entered promiscuous mode [ 289.952592][T18051] veth0_macvtap: entered promiscuous mode [ 289.960151][T18051] veth1_macvtap: entered promiscuous mode [ 289.972936][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.983481][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.993407][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.994629][T18158] loop4: detected capacity change from 0 to 512 [ 290.003842][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.003866][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.003883][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.003902][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.003916][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.005580][T18051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.055682][T18158] EXT4-fs: test_dummy_encryption option not supported [ 290.066051][ T29] audit: type=1400 audit(1720532856.926:3042): avc: denied { mounton } for pid=18156 comm="syz.4.5363" path="/83/file1/file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 290.100008][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.110508][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.120365][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.130960][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.140881][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.151364][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.161320][T18051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.171855][T18051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.183436][T18051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.193951][T18051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.202822][T18051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.211552][T18051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.220337][T18051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.388096][ T29] audit: type=1326 audit(1720532857.256:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.3.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806dcfabd9 code=0x7fc00000 [ 290.415155][ T29] audit: type=1326 audit(1720532857.286:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.3.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f806dcfabd9 code=0x7fc00000 [ 290.805350][T18201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5378'. [ 291.043398][T18208] loop1: detected capacity change from 0 to 4096 [ 291.115789][T18208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.397199][ T29] audit: type=1326 audit(1720532858.266:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18215 comm="syz.0.5383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8214b56bd9 code=0x0 [ 291.764880][T16473] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.284366][ T29] audit: type=1326 audit(1720532860.156:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.3.5367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f806dcfabd9 code=0x7fc00000 [ 425.981779][ T0] ================================================================== [ 425.989928][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 425.998121][ T0] [ 426.000442][ T0] write to 0xffff888237d205e4 of 1 bytes by task 0 on cpu 1: [ 426.007809][ T0] __tmigr_cpu_activate+0x55/0x1f0 [ 426.012964][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 426.017826][ T0] timer_clear_idle+0x28/0x100 [ 426.022611][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 426.028423][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 426.033446][ T0] do_idle+0x1ee/0x230 [ 426.037514][ T0] cpu_startup_entry+0x25/0x30 [ 426.042282][ T0] start_secondary+0x94/0xa0 [ 426.046892][ T0] common_startup_64+0x12c/0x137 [ 426.051858][ T0] [ 426.054172][ T0] read to 0xffff888237d205e4 of 1 bytes by task 0 on cpu 0: [ 426.061464][ T0] tmigr_update_events+0x41d/0x5d0 [ 426.066569][ T0] __tmigr_cpu_deactivate+0x283/0x470 [ 426.071938][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 426.077124][ T0] __get_next_timer_interrupt+0x137/0x530 [ 426.082856][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 426.088406][ T0] tick_nohz_idle_stop_tick+0x15b/0x640 [ 426.093955][ T0] do_idle+0x178/0x230 [ 426.098049][ T0] cpu_startup_entry+0x25/0x30 [ 426.102817][ T0] rest_init+0xef/0xf0 [ 426.106887][ T0] start_kernel+0x581/0x5e0 [ 426.111408][ T0] x86_64_start_reservations+0x2a/0x30 [ 426.116889][ T0] x86_64_start_kernel+0x94/0xa0 [ 426.121828][ T0] common_startup_64+0x12c/0x137 [ 426.126796][ T0] [ 426.129139][ T0] value changed: 0x00 -> 0x01 [ 426.133830][ T0] [ 426.136142][ T0] Reported by Kernel Concurrency Sanitizer on: [ 426.142291][ T0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 426.152000][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 426.162070][ T0] ==================================================================