last executing test programs: 25.785866344s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) write$P9_RLERRORu(r0, 0x0, 0x18) 25.739476741s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000000, 0x1, 0xffffffff}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x1d, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x280}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x0, 0x7, 0x8, 0xc, 0xffffffffffffffbc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x121002) ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000000440)=""/244) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xfffffffffffff801]}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) 25.584572495s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r4, 0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r1], 0x40}}, 0x0) 25.49126679s ago: executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') 25.453530795s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x49c}]}]}, 0x30}}, 0x0) 21.228848164s ago: executing program 4: setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "d8dda79cffbab637ed68517f4b8b80c92e7380f3ff2b6af1350bc66d504e1f39bc7443921d5f850e07a0b59a286fffc0c092856957ba3bea4edc78761fe65d564814e4be2859ffbbb82cea36ab4dfad6"}, 0xd8) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @multicast, 'veth0_to_bridge\x00'}}, 0x1e) ptrace(0x10, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0xd, r1, 0x0, &(0x7f0000000000)) 9.311629299s ago: executing program 0: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) pivot_root(&(0x7f0000000680)='./file0\x00', 0x0) 9.222972503s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x541b, 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 8.984264701s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 8.949377226s ago: executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3c7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd52}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpid() open$dir(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) 8.905268753s ago: executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 8.842979572s ago: executing program 0: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) 4.414559832s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.322067957s ago: executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) fcntl$lock(r2, 0x6, &(0x7f0000001cc0)={0x0, 0x1}) 4.230759201s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000f50000000000000000fffffffb920006"], 0x22) 1.790639101s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5f7, &(0x7f0000002200)="$eJzs2ztoW1cYB/BPjiXlMbhDpiyNM3QKlISM0dAEWUlIwSjJYjokbUoI8eSCQaEigmRoNSREQ+jYJRS0+DH5MXiysWnnYjy0GDx4KdiLqTv4FlW3ftJagzWU/n7Ld7j30/nfD531BP9pPZFNV0n+r/Lx5//an/TtrWvxoFkcuJ0kSXI/IhP9e6964+CucSkicvv2ef/92dlvN29lmyv3tj56OF/v2d0zHx9ExLncsZ+e72A8umyssND38tVI6fW+v2N8o1ievltvTNzJ3nzcevAiYjF91z4YZyITlXgez+JRb8dR+05E5kB+rZVfKTxdLlXXvmuuXtm5UGpOPbm+fXH2zdzViNFWxOCh38Xx56sju/On+aP9b4ca1RuXJ8+/u1aZWSqvn/o9aUsjsyeTCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAd4wVFvpevhopva4Uni6Xqmvf/PzTp+MbxfL03Xpj4k7u5uO0bzGtvWn9KirxPJ7FoxiO4fgyRjqPHMr8Y/4fZyNWr+xcKDWnnlzfHph9M3c17Rv88SSmPerw/KP9b4ca1RuXJ8+/u1aZWSqvn2r3Defji8i21/nufAoAAAAAAAAAAAAAAAAAAAD/Y8WB2xcHPynfj8jEZ6cj4reve1rPk/SS+9939S+l9Zd8xJmIeH86orZ5K9tcubeVezhf/zXtr0U+ahFx7ofpBxEf7ua8OJKc6fZodODPAAAA//+2K5Ei") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x2, 0x0, 0x0, 0x0) 1.54092343s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r1, 0x401, 0x2, 0x0, {0x2}}, 0x14}}, 0x0) 1.440128646s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[]) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003300000001e0a01020000000000000000010011000900020073797a3227000000040003800900010073797a30"], 0xb4}}, 0x0) socket(0x22, 0x2, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @ramp}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862901) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 1.190478984s ago: executing program 1: r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f8) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002f00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000cd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 937.798474ms ago: executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000340)="5e7ace", 0x3}, {0x0}], 0x2}, 0x0) 921.496056ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x540, &(0x7f0000000fc0)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbuepd4Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgw8njYiPRMRn8vt/Iabyf50AwHnWbi9Ee6E7DQCcd2k+BpakpYhI06ITUOqM4T0XF9Jao9m6fq+xtb7SGSu7FDPpvbVa9eblud9/Jz94JsnSi3lenp+nK8fStyLickT8cO6pPF1abtRWxtPlAYCJ93R3+x8R/5hL01Kpr1N7fKsHADwx5sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBnmhm+4LJ1VcTnncSfnPmZQHGo+fDvOd7bn7Qj/+HIH5nBP9Xrn28//F/czzD+WL8HybXhxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jDLHws30XvvfGzFn9rZ75xvRRX3G4V/5GdsURVycdei0G2ng4qljje08CRuPRTT/ukgAAAAAAAAAAAAAAAKcZxX9dGncdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL/+EwAA//+4xcs4") openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000340)=0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x80d010, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000010c0)=0x8000005, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b030600e0ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) listen(r3, 0x0) 488.034104ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r1, 0x401, 0x2, 0x0, {0x2}}, 0x14}}, 0x0) 476.714366ms ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) 463.135698ms ago: executing program 3: syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 243.543012ms ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8a, 0x0, &(0x7f00000000c0)) 219.099786ms ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) 162.457365ms ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) io_setup(0x0, &(0x7f00000002c0)) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), 0x0, 0x2}, 0x38) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, 0x0, 0x1300) sendmsg$kcm(r0, 0x0, 0x8000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4bfa, &(0x7f0000002080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000000c0000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 145.828847ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) socket$rds(0x15, 0x5, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 12.497798ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) 0s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x3}}, 0x10, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101301) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[], 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_connect) kernel console output (not intermixed with test programs): de [ 229.378436][ T3139] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.650503][ T3139] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.672019][ T3139] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.692913][ T3139] @ (unregistering): Released all slaves [ 229.701669][ T3139] bond0 (unregistering): Released all slaves [ 229.725987][ T3139] bond1 (unregistering): Released all slaves [ 229.822089][ T3139] IPVS: stopping master sync thread 9997 ... [ 229.833019][ T3139] hsr_slave_0: left promiscuous mode [ 229.851909][ T3139] hsr_slave_1: left promiscuous mode [ 229.861086][ T3139] veth1_macvtap: left promiscuous mode [ 229.866603][ T3139] veth0_macvtap: left promiscuous mode [ 229.872111][ T3139] veth1_vlan: left promiscuous mode [ 229.877466][ T3139] veth0_vlan: left promiscuous mode [ 229.994511][ T3139] pim6reg (unregistering): left allmulticast mode [ 230.037511][ T3139] team0 (unregistering): Port device team_slave_1 removed [ 230.047878][ T3139] team0 (unregistering): Port device team_slave_0 removed [ 230.645563][T14560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.745896][T14560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.802044][T14560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.918853][T14560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.018670][T14560] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.041568][T14560] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.070030][T14560] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.091363][T14560] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.160382][T14573] loop2: detected capacity change from 0 to 512 [ 231.203152][T14573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 231.218613][T14573] System zones: 0-5 [ 231.229774][T14573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.267238][T14573] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 161: padding at end of block bitmap is not set [ 231.330665][T13906] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.387222][T14583] loop1: detected capacity change from 0 to 512 [ 231.422745][T14583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.456733][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 231.456745][ T29] audit: type=1400 audit(219.262:31480): avc: denied { watch } for pid=14584 comm="syz-executor.2" path="/root/syzkaller-testdir798932595/syzkaller.AKrvmh/74/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 231.490526][T13736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.785289][T14602] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.817695][T14604] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 231.882884][T14602] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.946306][T14602] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.011208][T14602] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.783978][T14608] loop1: detected capacity change from 0 to 512 [ 232.822767][T14608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 232.834333][T14608] System zones: 0-5 [ 232.838783][T14608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.875319][T14608] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 161: padding at end of block bitmap is not set [ 232.925944][T13736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.088801][T14615] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 233.320294][T14617] loop1: detected capacity change from 0 to 256 [ 233.343402][T14617] FAT-fs (loop1): bogus logical sector size 8 [ 233.349518][T14617] FAT-fs (loop1): Can't find a valid FAT filesystem [ 234.166842][T14623] macvlan2: entered promiscuous mode [ 234.172196][T14623] macvlan2: entered allmulticast mode [ 234.198171][T14623] bridge0: entered promiscuous mode [ 234.203395][T14623] bridge0: entered allmulticast mode [ 234.232010][T14623] team0: Port device macvlan2 added [ 235.373969][T14602] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.393290][T14602] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.418531][T14602] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.433186][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.457869][T14602] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.511699][T14639] 9pnet_fd: Insufficient options for proto=fd [ 235.517882][ T29] audit: type=1400 audit(223.009:31481): avc: denied { mounton } for pid=14638 comm="syz-executor.2" path="/root/syzkaller-testdir798932595/syzkaller.AKrvmh/80/file0" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 235.586917][ T29] audit: type=1400 audit(223.019:31482): avc: denied { map } for pid=14640 comm="syz-executor.1" path="socket:[56894]" dev="sockfs" ino=56894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.610401][ T29] audit: type=1400 audit(223.019:31483): avc: denied { read } for pid=14640 comm="syz-executor.1" path="socket:[56894]" dev="sockfs" ino=56894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.008738][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.069743][T14666] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.119214][T14661] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 236.172999][T14666] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.247451][T14666] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.323001][T14666] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.724737][T14668] loop2: detected capacity change from 0 to 256 [ 236.806551][ T29] audit: type=1326 audit(224.200:31484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 236.840066][ T29] audit: type=1326 audit(224.228:31485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 236.863629][ T29] audit: type=1326 audit(224.228:31486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 236.887129][ T29] audit: type=1326 audit(224.228:31487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 236.993367][ T29] audit: type=1326 audit(224.228:31488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.016904][ T29] audit: type=1326 audit(224.228:31489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.040432][ T29] audit: type=1326 audit(224.228:31490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.063917][ T29] audit: type=1326 audit(224.255:31491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3bda1c9a7 code=0x7ffc0000 [ 237.087469][ T29] audit: type=1326 audit(224.255:31492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.111118][ T29] audit: type=1326 audit(224.255:31493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.134649][ T29] audit: type=1326 audit(224.255:31494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.158275][ T29] audit: type=1326 audit(224.255:31495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.181807][ T29] audit: type=1326 audit(224.255:31496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe3bda1dea9 code=0x7ffc0000 [ 237.229667][T14666] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.261403][T14666] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.293178][T14666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.321717][T14666] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.700799][T13906] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 237.708449][T13906] FAT-fs (loop2): Filesystem has been set read-only [ 237.730097][T13906] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 237.974344][T14689] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.002769][T14689] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 238.947134][T14695] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.021033][T14695] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.108476][T14695] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.172479][T14695] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.261619][ T50] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.368436][ T50] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.446966][ T50] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.509912][ T50] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.644473][ T50] bridge_slave_1: left allmulticast mode [ 242.650162][ T50] bridge_slave_1: left promiscuous mode [ 242.655813][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.682417][ T50] bridge_slave_0: left allmulticast mode [ 242.688074][ T50] bridge_slave_0: left promiscuous mode [ 242.693751][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.858294][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.878217][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.909996][ T50] bond0 (unregistering): Released all slaves [ 242.940609][T14697] chnl_net:caif_netlink_parms(): no params data found [ 243.000345][ T50] hsr_slave_0: left promiscuous mode [ 243.006387][ T50] hsr_slave_1: left promiscuous mode [ 243.028020][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.035495][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.062243][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.069654][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.095208][ T50] veth1_macvtap: left promiscuous mode [ 243.100719][ T50] veth0_macvtap: left promiscuous mode [ 243.106295][ T50] veth1_vlan: left promiscuous mode [ 243.111508][ T50] veth0_vlan: left promiscuous mode [ 243.332644][ T50] team0 (unregistering): Port device team_slave_1 removed [ 243.366461][ T50] team0 (unregistering): Port device team_slave_0 removed [ 243.468554][T14695] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.486017][T14695] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.522910][T14695] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.551242][T14695] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.590881][T14697] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.598005][T14697] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.629013][T14697] bridge_slave_0: entered allmulticast mode [ 243.647433][T14697] bridge_slave_0: entered promiscuous mode [ 243.655596][T14697] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.662733][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.710606][T14697] bridge_slave_1: entered allmulticast mode [ 243.734030][T14697] bridge_slave_1: entered promiscuous mode [ 243.775778][T14697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.800797][T14697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.863721][T14697] team0: Port device team_slave_0 added [ 243.870125][T14697] team0: Port device team_slave_1 added [ 243.917974][T14697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.925026][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.951086][T14697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.988953][T14716] loop1: detected capacity change from 0 to 256 [ 244.014565][T14697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.021582][T14697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.047660][T14697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.062279][ T29] kauditd_printk_skb: 1748 callbacks suppressed [ 244.062290][ T29] audit: type=1326 audit(230.901:33245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.124490][ T29] audit: type=1326 audit(230.929:33246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.148014][ T29] audit: type=1326 audit(230.929:33247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.171614][ T29] audit: type=1326 audit(230.938:33248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.195158][ T29] audit: type=1326 audit(230.938:33249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.218637][ T29] audit: type=1326 audit(230.938:33250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.242177][ T29] audit: type=1326 audit(230.938:33251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f025cc9f9a7 code=0x7ffc0000 [ 244.265706][ T29] audit: type=1326 audit(230.938:33252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.289199][ T29] audit: type=1326 audit(230.938:33253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.312793][ T29] audit: type=1326 audit(230.938:33254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f025cca0ea9 code=0x7ffc0000 [ 244.341950][T14697] hsr_slave_0: entered promiscuous mode [ 244.348279][T14697] hsr_slave_1: entered promiscuous mode [ 244.354160][T14697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.365402][T14697] Cannot create hsr debugfs directory [ 244.669465][T14697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.689500][T14697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.710564][T14697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.730691][T14697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.802559][T14697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.831458][T14697] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.853387][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.860477][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.904946][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.912126][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.992833][T14697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.009552][T13736] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 245.017149][T13736] FAT-fs (loop1): Filesystem has been set read-only [ 245.043159][T13736] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 245.129617][T14697] veth0_vlan: entered promiscuous mode [ 245.147530][T14697] veth1_vlan: entered promiscuous mode [ 245.178551][T14697] veth0_macvtap: entered promiscuous mode [ 245.196672][T14697] veth1_macvtap: entered promiscuous mode [ 245.219889][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.230412][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.240408][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.250875][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.260966][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.271417][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.281221][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.291669][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.301495][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.311977][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.321854][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.332296][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.446175][T14697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.457962][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.492939][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.503436][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.513268][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.523822][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.533654][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.544092][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.553916][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.564394][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.574337][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.584744][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.594643][T14697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.605133][T14697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.619550][T14697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.641420][T14697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.650193][T14697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.658962][T14697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.667735][T14697] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.721402][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.796650][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.891504][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.951798][T14731] chnl_net:caif_netlink_parms(): no params data found [ 245.994155][ T55] bridge_slave_1: left allmulticast mode [ 245.999843][ T55] bridge_slave_1: left promiscuous mode [ 246.005451][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.031114][ T55] bridge_slave_0: left allmulticast mode [ 246.036812][ T55] bridge_slave_0: left promiscuous mode [ 246.042466][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.205666][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.216242][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.236468][ T55] bond0 (unregistering): Released all slaves [ 246.287687][T14731] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.294812][T14731] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.317661][T14731] bridge_slave_0: entered allmulticast mode [ 246.334452][T14731] bridge_slave_0: entered promiscuous mode [ 246.350752][ T55] hsr_slave_0: left promiscuous mode [ 246.356489][ T55] hsr_slave_1: left promiscuous mode [ 246.366279][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.373672][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.398175][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.405616][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.430511][ T55] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 246.437300][ T55] batman_adv: batadv0: Removing interface: ipvlan2 [ 246.462902][ T55] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 246.469683][ T55] batman_adv: batadv0: Removing interface: ipvlan3 [ 246.485216][ T55] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 246.491997][ T55] batman_adv: batadv0: Removing interface: ipvlan4 [ 246.509304][ T55] veth1_macvtap: left promiscuous mode [ 246.514773][ T55] veth0_macvtap: left promiscuous mode [ 246.520344][ T55] veth1_vlan: left promiscuous mode [ 246.525622][ T55] veth0_vlan: left promiscuous mode [ 246.710486][ T55] team0 (unregistering): Port device team_slave_1 removed [ 246.722018][ T55] team0 (unregistering): Port device team_slave_0 removed [ 246.810949][T14731] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.818122][T14731] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.852539][T14731] bridge_slave_1: entered allmulticast mode [ 246.885016][T14731] bridge_slave_1: entered promiscuous mode [ 246.963174][T14731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.984307][T14731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.027192][T14731] team0: Port device team_slave_0 added [ 247.033907][T14731] team0: Port device team_slave_1 added [ 247.080984][T14731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.088141][T14731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.114204][T14731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.167940][T14731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.174893][T14731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.200912][T14731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.314342][T14731] hsr_slave_0: entered promiscuous mode [ 247.320721][T14731] hsr_slave_1: entered promiscuous mode [ 247.340038][T14731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.347590][T14731] Cannot create hsr debugfs directory [ 247.659144][T14731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.688539][T14731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.721106][T14731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.743760][T14731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.818096][T14731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.847616][T14731] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.864102][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.871217][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.918784][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.925889][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.963347][T14731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.052246][T14731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.255850][T14731] veth0_vlan: entered promiscuous mode [ 248.275875][T14731] veth1_vlan: entered promiscuous mode [ 248.305339][T14731] veth0_macvtap: entered promiscuous mode [ 248.317042][T14731] veth1_macvtap: entered promiscuous mode [ 248.341084][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.351635][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.361497][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.371959][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.381777][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.392228][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.402078][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.412519][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.422362][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.432803][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.442622][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.453046][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.465007][T14731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.475898][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.486434][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.496302][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.506789][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.516774][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.527267][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.537140][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.547619][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.557439][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.567926][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.577761][T14731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.588178][T14731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.600223][T14731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.608805][T14731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.617546][T14731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.626391][T14731] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.635122][T14731] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.977234][T14781] loop4: detected capacity change from 0 to 128 [ 249.558712][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.566156][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.573582][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.581010][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.588480][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.595871][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.603240][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.610644][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.618037][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.625486][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.632885][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.640292][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.647809][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.655178][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.662576][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.669988][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.677367][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.684780][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.692280][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.699748][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.707281][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.714696][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.722064][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.729456][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.736845][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.744282][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.751742][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.759141][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.766555][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.773970][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.781382][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.788772][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.796158][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.796217][T14802] loop4: detected capacity change from 0 to 256 [ 249.803615][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.817249][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.824709][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.832153][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.839653][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.847102][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.854607][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.862011][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.869548][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.876952][ T8] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 249.885788][ T8] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 250.610998][ T50] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.738733][ T50] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.808782][ T50] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.862824][ T50] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.962040][ T50] bridge_slave_1: left allmulticast mode [ 250.967695][ T50] bridge_slave_1: left promiscuous mode [ 250.973419][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.038086][ T50] bridge_slave_0: left allmulticast mode [ 251.043869][ T50] bridge_slave_0: left promiscuous mode [ 251.049632][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.189615][ T50] bridge0 (unregistering): left allmulticast mode [ 251.209584][ T50] team0: Port device macvlan2 removed [ 251.384182][ T50] hsr_slave_0: left promiscuous mode [ 251.392302][ T50] hsr_slave_1: left promiscuous mode [ 251.400627][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.408078][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.457382][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.464858][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.495930][ T50] veth1_macvtap: left promiscuous mode [ 251.501452][ T50] veth0_macvtap: left promiscuous mode [ 251.507016][ T50] veth1_vlan: left promiscuous mode [ 251.512541][ T50] veth0_vlan: left promiscuous mode [ 251.696493][ T50] team0 (unregistering): Port device team_slave_1 removed [ 251.719661][ T50] team0 (unregistering): Port device team_slave_0 removed [ 251.866739][T14811] chnl_net:caif_netlink_parms(): no params data found [ 251.988426][T14811] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.995494][T14811] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.021983][T14811] bridge_slave_0: entered allmulticast mode [ 252.031576][T14811] bridge_slave_0: entered promiscuous mode [ 252.065930][T14811] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.073010][T14811] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.109793][T14811] bridge_slave_1: entered allmulticast mode [ 252.139620][T14811] bridge_slave_1: entered promiscuous mode [ 252.185113][T14811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.217117][T14811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.217205][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.233603][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.241023][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.248428][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.255800][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.263324][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.270737][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.278176][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.285558][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.293145][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.300561][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.307967][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.315359][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.322783][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.330523][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.337912][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.345290][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.352737][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.360191][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.367585][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.374963][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.382526][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.389915][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.397287][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.404687][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.412107][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.419489][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.426899][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.426943][T14842] loop4: detected capacity change from 0 to 256 [ 252.440702][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.448095][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.455540][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.462921][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.470324][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.477721][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.485097][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.492533][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.500013][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.507459][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.514849][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.522262][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.529716][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.537247][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.544741][ T3180] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 252.557768][ T3180] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 252.580509][T14811] team0: Port device team_slave_0 added [ 252.595684][T14811] team0: Port device team_slave_1 added [ 252.629271][T14811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.636274][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.662425][T14811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.716425][T14811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.723394][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.749520][T14811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.845608][T14811] hsr_slave_0: entered promiscuous mode [ 252.865706][T14811] hsr_slave_1: entered promiscuous mode [ 252.875515][T14811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.887072][T14811] Cannot create hsr debugfs directory [ 253.286058][T14811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.306201][T14811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.325188][T14811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.346092][T14811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.443240][T14811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.479248][T14811] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.497393][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.504466][ T3169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.514480][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.521549][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.544254][T14811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.554668][T14811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.727074][T14811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.885706][T14811] veth0_vlan: entered promiscuous mode [ 253.894168][T14811] veth1_vlan: entered promiscuous mode [ 253.940988][T14811] veth0_macvtap: entered promiscuous mode [ 253.966313][T14811] veth1_macvtap: entered promiscuous mode [ 253.994738][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.005213][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.015076][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.025573][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.035425][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.045863][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.055727][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.066187][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.076011][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.086516][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.096347][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.106863][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.118884][T14811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.132722][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.143317][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.153163][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.163746][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.173623][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.184110][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.194003][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.204675][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.214545][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.225042][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.234963][T14811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.245387][T14811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.257473][T14811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.271273][T14811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.280063][T14811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.289171][T14811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.297956][T14811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.382701][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.473808][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.525565][T14876] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 254.558651][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.585851][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.593361][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.600858][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.608282][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.615678][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.623163][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.630536][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.638019][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.645454][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.652841][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.660235][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.667637][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.675029][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.682410][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.689814][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.697350][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.704733][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.712121][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.719545][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.726925][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.734460][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.741864][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.749411][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.757061][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.764602][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.772039][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.779507][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.786928][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.794344][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.801751][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.809200][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.816659][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.824095][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.831583][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.839007][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.846399][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.853879][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.861291][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.868667][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.876060][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.883473][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.890861][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.890989][T14890] loop1: detected capacity change from 0 to 256 [ 254.898281][ T5432] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.909684][ T5432] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 254.957763][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.049721][ T50] bridge_slave_1: left allmulticast mode [ 255.055424][ T50] bridge_slave_1: left promiscuous mode [ 255.061139][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.111352][ T50] bridge_slave_0: left allmulticast mode [ 255.117009][ T50] bridge_slave_0: left promiscuous mode [ 255.122708][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.294547][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.311165][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.332330][ T50] bond0 (unregistering): Released all slaves [ 255.428260][ T50] hsr_slave_0: left promiscuous mode [ 255.435357][ T50] hsr_slave_1: left promiscuous mode [ 255.444286][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.451692][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.480364][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.487894][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.521405][ T50] veth1_macvtap: left promiscuous mode [ 255.527245][ T50] veth0_macvtap: left promiscuous mode [ 255.532810][ T50] veth1_vlan: left promiscuous mode [ 255.538048][ T50] veth0_vlan: left promiscuous mode [ 255.622976][T14916] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 255.721795][T14925] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.731885][ T50] team0 (unregistering): Port device team_slave_1 removed [ 255.742643][ T50] team0 (unregistering): Port device team_slave_0 removed [ 255.774848][ T29] kauditd_printk_skb: 2499 callbacks suppressed [ 255.774860][ T29] audit: type=1400 audit(241.709:35754): avc: denied { bind } for pid=14928 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.895693][T14879] chnl_net:caif_netlink_parms(): no params data found [ 255.955876][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.963027][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.987407][T14879] bridge_slave_0: entered allmulticast mode [ 256.000021][T14879] bridge_slave_0: entered promiscuous mode [ 256.015956][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.023177][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.047660][T14879] bridge_slave_1: entered allmulticast mode [ 256.063257][T14879] bridge_slave_1: entered promiscuous mode [ 256.112494][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.134238][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.182101][T14879] team0: Port device team_slave_0 added [ 256.189178][T14879] team0: Port device team_slave_1 added [ 256.308814][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.315829][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.341801][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.374361][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.381458][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.407378][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.456398][T14879] hsr_slave_0: entered promiscuous mode [ 256.463800][T14879] hsr_slave_1: entered promiscuous mode [ 256.472369][T14879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.480132][T14879] Cannot create hsr debugfs directory [ 256.490421][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.546148][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.596304][T14963] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 256.609973][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.644129][T14967] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.700941][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.793991][ T50] bridge_slave_1: left allmulticast mode [ 256.799754][ T50] bridge_slave_1: left promiscuous mode [ 256.805437][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.818086][ T50] bridge_slave_0: left allmulticast mode [ 256.823811][ T50] bridge_slave_0: left promiscuous mode [ 256.829548][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.974180][T14987] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 257.030702][T14993] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.152937][T14944] chnl_net:caif_netlink_parms(): no params data found [ 257.195008][T14944] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.202213][T14944] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.223072][T14944] bridge_slave_0: entered allmulticast mode [ 257.231206][T14944] bridge_slave_0: entered promiscuous mode [ 257.240417][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.256182][T14944] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.263305][T14944] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.280777][T14944] bridge_slave_1: entered allmulticast mode [ 257.292224][T14944] bridge_slave_1: entered promiscuous mode [ 257.304381][ T50] hsr_slave_0: left promiscuous mode [ 257.310578][ T50] hsr_slave_1: left promiscuous mode [ 257.316510][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.324081][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.346557][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.354027][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.363074][ T50] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 257.369905][ T50] batman_adv: batadv0: Removing interface: ipvlan2 [ 257.385098][ T50] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 257.391905][ T50] batman_adv: batadv0: Removing interface: ipvlan3 [ 257.404832][ T50] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 257.411695][ T50] batman_adv: batadv0: Removing interface: ipvlan4 [ 257.425942][ T50] veth1_macvtap: left promiscuous mode [ 257.431479][ T50] veth0_macvtap: left promiscuous mode [ 257.436982][ T50] veth1_vlan: left promiscuous mode [ 257.442271][ T50] veth0_vlan: left promiscuous mode [ 257.600219][ T50] team0 (unregistering): Port device team_slave_1 removed [ 257.615387][ T50] team0 (unregistering): Port device team_slave_0 removed [ 257.670386][T15017] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 257.688079][T14944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.712870][T14944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.743225][T14944] team0: Port device team_slave_0 added [ 257.759095][T15023] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.763848][T14944] team0: Port device team_slave_1 added [ 257.810614][T14944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.817661][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.843745][T14944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.867131][T14879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.883362][T14879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.896246][T14944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.903198][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.929179][T14944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.950233][T14879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.999613][T14944] hsr_slave_0: entered promiscuous mode [ 258.006935][T14944] hsr_slave_1: entered promiscuous mode [ 258.012981][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.025824][T14944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.034115][T14944] Cannot create hsr debugfs directory [ 258.039567][T14879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.062264][ T29] audit: type=1326 audit(243.823:35755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15030 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f123ccd1ea9 code=0x0 [ 258.186181][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.205867][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.214967][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.222044][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.248350][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.255436][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.321563][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.383975][T15051] gretap0: entered promiscuous mode [ 258.390116][T15051] bond0: entered promiscuous mode [ 258.395229][T15051] bond_slave_0: entered promiscuous mode [ 258.401135][T15051] bond_slave_1: entered promiscuous mode [ 258.425639][T14879] veth0_vlan: entered promiscuous mode [ 258.433871][T14879] veth1_vlan: entered promiscuous mode [ 258.478349][T14944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.495552][T14879] veth0_macvtap: entered promiscuous mode [ 258.509738][T14944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.519996][T14944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.530176][T14879] veth1_macvtap: entered promiscuous mode [ 258.547083][T14944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.574742][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.585238][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.595048][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.605467][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.615343][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.625845][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.635692][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.646228][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.656129][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.666565][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.678922][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.716075][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.726521][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.736372][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.746936][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.756757][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.767366][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.777179][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.787606][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.797422][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.807922][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.820273][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.832603][T14879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.841342][T14879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.850089][T14879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.858796][T14879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.914609][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.967445][T14944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.002237][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.034724][T14944] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.051333][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.067323][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.074474][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.086601][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.093676][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.109425][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.135982][T14944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.146622][T14944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.188288][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.279649][ T50] bridge_slave_1: left allmulticast mode [ 259.285382][ T50] bridge_slave_1: left promiscuous mode [ 259.291247][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.305358][ T50] bridge_slave_0: left allmulticast mode [ 259.311084][ T50] bridge_slave_0: left promiscuous mode [ 259.316780][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.382122][ T50] gretap0 (unregistering): left promiscuous mode [ 259.448712][T15099] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.563445][ T50] bond0 (unregistering): left promiscuous mode [ 259.569642][ T50] bond_slave_0: left promiscuous mode [ 259.575224][ T50] bond_slave_1: left promiscuous mode [ 259.587342][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.599811][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.610826][ T50] bond0 (unregistering): Released all slaves [ 259.637249][T14944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.644513][T15099] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 259.715597][T15059] chnl_net:caif_netlink_parms(): no params data found [ 259.744676][ T50] hsr_slave_0: left promiscuous mode [ 259.753503][ T50] hsr_slave_1: left promiscuous mode [ 259.765607][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.773141][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.784936][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.792512][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.803574][ T50] veth1_macvtap: left promiscuous mode [ 259.809151][ T50] veth0_macvtap: left promiscuous mode [ 259.814813][ T50] veth1_vlan: left promiscuous mode [ 259.820181][ T50] veth0_vlan: left promiscuous mode [ 259.961274][ T50] team0 (unregistering): Port device team_slave_1 removed [ 259.983978][ T50] team0 (unregistering): Port device team_slave_0 removed [ 260.086019][T15059] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.093387][T15059] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.116408][T15059] bridge_slave_0: entered allmulticast mode [ 260.127513][T15059] bridge_slave_0: entered promiscuous mode [ 260.140281][T15059] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.147510][T15059] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.154658][T15059] bridge_slave_1: entered allmulticast mode [ 260.161200][T15059] bridge_slave_1: entered promiscuous mode [ 260.167784][T14944] veth0_vlan: entered promiscuous mode [ 260.176331][T14944] veth1_vlan: entered promiscuous mode [ 260.214021][T15059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.238719][T15059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.252894][T14944] veth0_macvtap: entered promiscuous mode [ 260.270852][T14944] veth1_macvtap: entered promiscuous mode [ 260.282497][T15059] team0: Port device team_slave_0 added [ 260.292171][T15059] team0: Port device team_slave_1 added [ 260.303347][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.313901][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.323836][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.334465][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.344498][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.355098][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.365058][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.375505][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.385450][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.395903][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.400589][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.429358][T14944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.466767][T15059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.473810][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.499877][T15059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.500250][T15123] loop3: detected capacity change from 0 to 2048 [ 260.530018][T15123] EXT4-fs: Ignoring removed orlov option [ 260.536985][T15059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.543944][T15059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.569951][T15059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.598933][T15123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.621003][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.631512][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.641338][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.651898][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.661786][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.672250][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.682063][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.692481][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.702812][T14944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.713521][T14944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.724734][T14944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.737881][T15123] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 260.767962][T14944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.776938][T14944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.785713][T14944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.794416][T14944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.794895][T15123] EXT4-fs (loop3): Remounting filesystem read-only [ 260.811078][ T29] audit: type=1400 audit(246.343:35756): avc: denied { setattr } for pid=15121 comm="syz-executor.3" path="/root/syzkaller-testdir3723562869/syzkaller.oUKrhr/12/file0/blkio.bfq.io_service_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 260.844055][T15059] hsr_slave_0: entered promiscuous mode [ 260.861493][T15059] hsr_slave_1: entered promiscuous mode [ 260.873600][T15059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.886661][T15059] Cannot create hsr debugfs directory [ 260.904830][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.052619][ T29] audit: type=1326 audit(246.583:35757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.111467][ T29] audit: type=1326 audit(246.583:35758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.135290][ T29] audit: type=1326 audit(246.583:35759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.158890][ T29] audit: type=1326 audit(246.620:35760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.182367][ T29] audit: type=1326 audit(246.620:35761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.205918][ T29] audit: type=1400 audit(246.629:35762): avc: denied { mount } for pid=15148 comm="syz-executor.3" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 261.228502][ T29] audit: type=1326 audit(246.629:35763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.252125][ T29] audit: type=1326 audit(246.629:35764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f123ccd1ea9 code=0x7ffc0000 [ 261.276010][ T29] audit: type=1326 audit(246.629:35765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f123cccf627 code=0x7ffc0000 [ 261.299537][ T29] audit: type=1326 audit(246.629:35766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f123cc95309 code=0x7ffc0000 [ 261.322948][ T29] audit: type=1326 audit(246.629:35767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f123cccf627 code=0x7ffc0000 [ 261.346484][ T29] audit: type=1326 audit(246.629:35768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f123cc95309 code=0x7ffc0000 [ 261.370008][ T29] audit: type=1326 audit(246.629:35769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f123cccf627 code=0x7ffc0000 [ 261.393431][ T29] audit: type=1326 audit(246.629:35770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f123cc95309 code=0x7ffc0000 [ 261.416924][ T29] audit: type=1326 audit(246.629:35771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15145 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f123cccf627 code=0x7ffc0000 [ 261.498779][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.592620][T15059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.610022][T15059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.618658][T15059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.627477][T15059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.662799][T15172] loop1: detected capacity change from 0 to 512 [ 261.681293][T15172] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 261.709179][T15059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.730864][T15059] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.742831][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.749987][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.774550][T15059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.784944][T15059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.800225][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.807509][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.904108][T15059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.024729][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.089188][T15219] loop1: detected capacity change from 0 to 764 [ 262.103184][T15059] veth0_vlan: entered promiscuous mode [ 262.123873][T15219] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 262.125488][T15203] loop3: detected capacity change from 0 to 512 [ 262.140061][T15059] veth1_vlan: entered promiscuous mode [ 262.160638][T15059] veth0_macvtap: entered promiscuous mode [ 262.167444][T15203] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 262.179178][T15203] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 262.189266][T15203] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 262.204217][T15059] veth1_macvtap: entered promiscuous mode [ 262.215184][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.225641][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.235477][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.246210][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.256180][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.266740][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.276657][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.287156][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.297017][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.307431][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.317260][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.327796][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.340452][T15059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.366498][T15203] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 262.375040][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.378070][T15203] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 262.385629][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.409095][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.419565][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.429403][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.433461][T15203] EXT4-fs (loop3): Remounting filesystem read-only [ 262.439989][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.448279][T15203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.456233][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.479070][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.481779][T15203] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 262.488972][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.496960][T15203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.505827][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.524746][T15059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.535177][T15059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.552417][T15059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.565413][T15059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.574139][T15059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.582878][T15059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.591848][T15059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.615484][T15203] dccp_invalid_packet: P.Data Offset(4) too small [ 262.642028][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.881470][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.071539][T15258] dccp_invalid_packet: P.Data Offset(4) too small [ 264.195211][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.435365][T15311] loop3: detected capacity change from 0 to 764 [ 264.444423][T15311] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 265.629630][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.649530][T15362] bond0: (slave bond_slave_0): Releasing backup interface [ 265.910583][T15392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.933847][T15392] bond1: entered promiscuous mode [ 265.953459][T15392] bond0: (slave bond_slave_0): Releasing backup interface [ 265.969109][T15392] bond_slave_0: entered promiscuous mode [ 265.986493][T15392] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.063815][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.321371][T15431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.336397][T15431] bond1: entered promiscuous mode [ 266.347944][T15431] bond_slave_0: entered promiscuous mode [ 266.353839][T15431] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.495409][T15448] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.663502][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 266.663517][ T29] audit: type=1400 audit(251.761:36191): avc: denied { getopt } for pid=15454 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.076907][T15479] loop1: detected capacity change from 0 to 8192 [ 267.136908][ T29] audit: type=1400 audit(252.195:36192): avc: denied { create } for pid=15478 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 267.531669][ T29] audit: type=1400 audit(252.555:36193): avc: denied { mount } for pid=15492 comm="syz-executor.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.554004][ T29] audit: type=1400 audit(252.555:36194): avc: denied { remount } for pid=15492 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.575801][ T29] audit: type=1400 audit(252.555:36195): avc: denied { unmount } for pid=14811 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 268.130731][T15506] loop3: detected capacity change from 0 to 8192 [ 268.375127][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.693260][T15527] loop3: detected capacity change from 0 to 512 [ 268.736843][T15527] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 268.759170][T15527] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 268.780720][T15527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.811682][ T29] audit: type=1400 audit(253.736:36196): avc: denied { link } for pid=15526 comm="syz-executor.3" name="file0" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 268.844617][T15527] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz-executor.3: Siphash requires key [ 268.877572][T15527] EXT4-fs warning (device loop3): dx_probe:844: inode #2: comm syz-executor.3: Hash code is SIPHASH, but hash not in dirent [ 268.890574][T15527] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 268.924018][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.024257][T15544] loop3: detected capacity change from 0 to 512 [ 269.110120][T15544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.142310][T15544] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 269.168234][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.177384][T15544] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 269.196826][T15549] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 269.205036][T15549] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.215827][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.224968][ T29] audit: type=1400 audit(254.114:36197): avc: denied { execute } for pid=15542 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.224971][T15544] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 269.225109][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.277129][T15549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.294670][T15544] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 269.311576][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.322048][ T29] audit: type=1400 audit(254.207:36198): avc: denied { execute_no_trans } for pid=15542 comm="syz-executor.3" path="/root/syzkaller-testdir3723562869/syzkaller.oUKrhr/58/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.329282][T15544] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 269.369782][T15544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.404118][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.821939][T15579] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 269.830200][T15579] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.840692][T15579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.910070][T15584] loop3: detected capacity change from 0 to 512 [ 269.941607][T15584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.957567][T15584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 269.975793][T15584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 269.985009][T15584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 270.003507][T15584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 270.012853][T15584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 270.039893][T15584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 270.051535][T15584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 270.071572][T15584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 270.080719][T15584] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz-executor.3: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 270.099383][T15584] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 270.118605][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.237997][T15598] loop3: detected capacity change from 0 to 8192 [ 271.015410][T15610] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 271.024378][T15610] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.034529][T15610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.408893][T15636] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.507452][T15640] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.516803][T15640] netlink: 41 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.576528][T15658] loop1: detected capacity change from 0 to 256 [ 271.613848][T15658] FAT-fs (loop1): Directory bread(block 64) failed [ 271.621178][T15658] FAT-fs (loop1): Directory bread(block 65) failed [ 271.635718][T15658] FAT-fs (loop1): Directory bread(block 66) failed [ 271.643144][T15658] FAT-fs (loop1): Directory bread(block 67) failed [ 271.649758][T15658] FAT-fs (loop1): Directory bread(block 68) failed [ 271.657389][T15658] FAT-fs (loop1): Directory bread(block 69) failed [ 271.667504][T15658] FAT-fs (loop1): Directory bread(block 70) failed [ 271.680301][T15658] FAT-fs (loop1): Directory bread(block 71) failed [ 271.687241][T15658] FAT-fs (loop1): Directory bread(block 72) failed [ 271.693777][T15658] FAT-fs (loop1): Directory bread(block 73) failed [ 271.721912][T15658] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 271.730140][T15658] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.742216][T15658] bridge0: port 3(dummy0) entered blocking state [ 271.748586][T15658] bridge0: port 3(dummy0) entered disabled state [ 271.755243][T15658] dummy0: entered allmulticast mode [ 271.762727][T15658] dummy0: entered promiscuous mode [ 271.768084][T15658] bridge0: port 3(dummy0) entered blocking state [ 271.774546][T15658] bridge0: port 3(dummy0) entered forwarding state [ 271.869714][T15685] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 271.877993][T15685] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.917691][T15685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.078271][ T29] audit: type=1400 audit(256.763:36199): avc: denied { mount } for pid=15716 comm="syz-executor.1" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.112930][ T29] audit: type=1400 audit(256.791:36200): avc: denied { unmount } for pid=14811 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.420745][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.471763][T15797] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 272.481183][T15797] bridge0: port 3(dummy0) entered blocking state [ 272.487607][T15797] bridge0: port 3(dummy0) entered disabled state [ 272.495431][T15797] dummy0: entered allmulticast mode [ 272.501418][T15797] dummy0: entered promiscuous mode [ 272.506836][T15797] bridge0: port 3(dummy0) entered blocking state [ 272.513210][T15797] bridge0: port 3(dummy0) entered forwarding state [ 272.528888][T15798] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.537628][T15798] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.546423][T15798] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.555184][T15798] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.573997][T15798] vxlan0: entered promiscuous mode [ 272.632370][T15806] syzkaller0: entered allmulticast mode [ 273.711748][ T29] audit: type=1400 audit(258.259:36201): avc: denied { getopt } for pid=15969 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 274.049855][T16014] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 274.087041][T16018] loop1: detected capacity change from 0 to 1024 [ 274.094670][T16018] EXT4-fs: Invalid gid value -1 [ 274.227199][T15773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.335500][T15773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.398094][T15773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.440422][T15773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.526527][T16055] __nla_validate_parse: 4 callbacks suppressed [ 274.526540][T16055] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.578817][ T29] audit: type=1400 audit(259.071:36202): avc: denied { bind } for pid=16061 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.619847][T15773] bridge_slave_1: left allmulticast mode [ 274.625564][T15773] bridge_slave_1: left promiscuous mode [ 274.631421][T15773] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.649497][T15773] bridge_slave_0: left allmulticast mode [ 274.655320][T15773] bridge_slave_0: left promiscuous mode [ 274.661080][T15773] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.775196][T15773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.786784][T15773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.797136][T15773] bond0 (unregistering): Released all slaves [ 274.822874][T16037] chnl_net:caif_netlink_parms(): no params data found [ 274.887487][T16091] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.896991][T16037] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.904058][T16037] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.915541][T16037] bridge_slave_0: entered allmulticast mode [ 274.926399][T16037] bridge_slave_0: entered promiscuous mode [ 274.936482][T15773] hsr_slave_0: left promiscuous mode [ 274.947150][T15773] hsr_slave_1: left promiscuous mode [ 274.959451][T15773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.966954][T15773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.975730][T15773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.983235][T15773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.000167][T16101] qrtr: Invalid version 0 [ 275.006596][T15773] veth1_macvtap: left promiscuous mode [ 275.012179][T15773] veth0_macvtap: left promiscuous mode [ 275.017880][T15773] veth1_vlan: left promiscuous mode [ 275.023158][T15773] veth0_vlan: left promiscuous mode [ 275.044311][ T29] audit: type=1400 audit(259.495:36203): avc: denied { mounton } for pid=16105 comm="syz-executor.0" path="/root/syzkaller-testdir860608179/syzkaller.YqedYp/90/file0/file0" dev="cgroup2" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 275.165931][T15773] team0 (unregistering): Port device team_slave_1 removed [ 275.176628][T15773] team0 (unregistering): Port device team_slave_0 removed [ 275.220395][T16037] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.227545][T16037] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.235834][T16037] bridge_slave_1: entered allmulticast mode [ 275.242453][T16037] bridge_slave_1: entered promiscuous mode [ 275.263161][T16037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.274226][T16037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.303410][T16037] team0: Port device team_slave_0 added [ 275.310004][T16037] team0: Port device team_slave_1 added [ 275.328754][T16037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.335809][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.361725][T16037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.384234][T16037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.391237][T16037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.417207][T16037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.451876][T16037] hsr_slave_0: entered promiscuous mode [ 275.457855][T16037] hsr_slave_1: entered promiscuous mode [ 275.465707][T16037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.473244][T16037] Cannot create hsr debugfs directory [ 275.779067][ T29] audit: type=1400 audit(260.169:36204): avc: denied { accept } for pid=16127 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 275.825716][T16037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 275.841305][T16037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 275.864574][T16037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 275.873500][T16037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 275.948610][T16037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.976738][T16037] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.990065][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.997161][ T3169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.029707][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.036850][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.054220][T16037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.064611][T16037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.187454][T16037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.316032][T16037] veth0_vlan: entered promiscuous mode [ 276.333439][T16037] veth1_vlan: entered promiscuous mode [ 276.353058][T16037] veth0_macvtap: entered promiscuous mode [ 276.371234][T16037] veth1_macvtap: entered promiscuous mode [ 276.388886][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.399409][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.409266][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.419732][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.429540][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.439993][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.449819][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.460274][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.470160][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.480929][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.491054][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.501591][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.514572][T16037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.526744][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.537285][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.547201][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.557638][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.567497][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.577911][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.587790][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.598278][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.608229][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.618685][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.628514][T16037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.638942][T16037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.653651][T16037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.664217][T16037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.673024][T16037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.681788][T16037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.690546][T16037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.849839][ T29] audit: type=1400 audit(261.157:36205): avc: denied { setopt } for pid=16181 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.901380][T16185] qrtr: Invalid version 0 [ 276.921146][T16187] smc: adding net device pimreg with user defined pnetid SYZ1 [ 276.930598][T16187] pimreg: entered allmulticast mode [ 276.952503][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.967393][T16189] vlan2: entered promiscuous mode [ 277.400341][T16192] netlink: 'syz-executor.1': attribute type 37 has an invalid length. [ 277.415924][T16192] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.427470][T16192] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16192 comm=syz-executor.1 [ 277.462307][T16194] skb len=10633 headroom=136 headlen=10633 tailroom=5295 [ 277.462307][T16194] mac=(136,0) mac_len=0 net=(136,20) trans=156 [ 277.462307][T16194] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 277.462307][T16194] csum(0x350e00a0 start=160 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 277.462307][T16194] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 277.462307][T16194] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 277.462307][T16194] encapsulation=1 inner(proto=0x0008, mac=160, net=160, trans=212) [ 277.511811][T16194] dev name=veth0 feat=0x000061164fdd19e9 [ 277.518497][T16194] skb linear: 00000000: 45 02 29 89 6f 5a 00 00 0f 2f 72 ba ac 14 14 18 [ 277.527041][T16194] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 71 10 82 0c 52 [ 277.535554][T16194] skb linear: 00000020: 0f 06 ea a4 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 277.544045][T16194] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 277.552632][T16194] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 277.561210][T16194] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 80 00 00 [ 277.569772][T16194] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.578289][T16194] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.586780][T16194] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.595342][T16194] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.603873][T16194] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.612463][T16194] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.620960][T16194] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.629461][T16194] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.638159][T16194] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.646679][T16194] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.655250][T16194] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 277.663749][T16194] ------------[ cut here ]------------ [ 277.669210][T16194] offset+2 (13608) > skb_headlen() (10633) [ 277.675498][T16194] WARNING: CPU: 0 PID: 16194 at net/core/dev.c:3334 skb_checksum_help+0x43b/0x450 [ 277.684766][T16194] Modules linked in: [ 277.688686][T16194] CPU: 0 PID: 16194 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00132-gc286c21ff942 #0 [ 277.699288][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 277.709390][T16194] RIP: 0010:skb_checksum_help+0x43b/0x450 [ 277.715204][T16194] Code: 90 4c 89 ff e8 e6 01 60 fd 41 8b 1f 4c 89 e7 e8 db 01 60 fd 41 2b 1c 24 48 c7 c7 4a 6e e1 85 48 89 ee 89 da e8 06 ac 2a fd 90 <0f> 0b 90 90 bb ea ff ff ff e9 45 fe ff ff 0f 1f 80 00 00 00 00 90 [ 277.734878][T16194] RSP: 0018:ffffc900012ff410 EFLAGS: 00010246 [ 277.740959][T16194] RAX: 37c021fcfe2f3b00 RBX: 0000000000002989 RCX: 0000000000040000 [ 277.748934][T16194] RDX: ffffc90006550000 RSI: 0000000000019cab RDI: 0000000000019cac [ 277.756989][T16194] RBP: 0000000000003528 R08: ffffffff81110bd7 R09: 0000000000000000 [ 277.764987][T16194] R10: 0001ffffffffffff R11: ffff88811ac61080 R12: ffff8881140bdd74 [ 277.772964][T16194] R13: 0000000065254b22 R14: ffff8881140bdd00 R15: ffff8881140bdd70 [ 277.781030][T16194] FS: 00007f123c04c6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 277.789980][T16194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.796570][T16194] CR2: 000000002000e000 CR3: 000000011734a000 CR4: 00000000003506f0 [ 277.804599][T16194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.812674][T16194] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 277.820673][T16194] Call Trace: [ 277.823942][T16194] [ 277.826984][T16194] ? __warn+0x13c/0x350 [ 277.831165][T16194] ? report_bug+0x315/0x420 [ 277.835748][T16194] ? skb_checksum_help+0x43b/0x450 [ 277.840884][T16194] ? handle_bug+0x3e/0x70 [ 277.845212][T16194] ? exc_invalid_op+0x1a/0x50 [ 277.849963][T16194] ? asm_exc_invalid_op+0x1a/0x20 [ 277.855001][T16194] ? __warn_printk+0x167/0x1b0 [ 277.859910][T16194] ? skb_checksum_help+0x43b/0x450 [ 277.865050][T16194] ip_do_fragment+0xdb/0xd00 [ 277.869677][T16194] ? perf_trace_run_bpf_submit+0xb0/0x100 [ 277.875491][T16194] ? __slab_free+0x67/0x2b0 [ 277.880001][T16194] ? __pfx_ip_finish_output2+0x10/0x10 [ 277.885507][T16194] ip_fragment+0xd2/0x140 [ 277.889855][T16194] ip_finish_output+0x1c4/0x2a0 [ 277.894757][T16194] ip_output+0xab/0x170 [ 277.898986][T16194] ? __pfx_ip_finish_output+0x10/0x10 [ 277.904456][T16194] ? __pfx_ip_output+0x10/0x10 [ 277.909222][T16194] ip_local_out+0xab/0xd0 [ 277.913555][T16194] iptunnel_xmit+0x33f/0x460 [ 277.918318][T16194] ip_tunnel_xmit+0x1685/0x1740 [ 277.923199][T16194] ipgre_xmit+0x5f4/0x6d0 [ 277.927632][T16194] dev_hard_start_xmit+0x119/0x3f0 [ 277.932750][T16194] __dev_queue_xmit+0xf83/0x1e50 [ 277.937772][T16194] ? __dev_queue_xmit+0x161/0x1e50 [ 277.942888][T16194] packet_xmit+0x4b/0x1e0 [ 277.947232][T16194] packet_sendmsg+0x2ae1/0x3320 [ 277.952129][T16194] ? selinux_socket_sendmsg+0x182/0x1b0 [ 277.957844][T16194] ? __pfx_packet_sendmsg+0x10/0x10 [ 277.963068][T16194] __sock_sendmsg+0x140/0x180 [ 277.967752][T16194] ____sys_sendmsg+0x312/0x410 [ 277.972561][T16194] __sys_sendmsg+0x1e9/0x280 [ 277.977161][T16194] ? futex_wait+0x18e/0x1c0 [ 277.981702][T16194] __x64_sys_sendmsg+0x46/0x50 [ 277.986507][T16194] x64_sys_call+0xb25/0x2d70 [ 277.991194][T16194] do_syscall_64+0xc9/0x1c0 [ 277.995766][T16194] ? clear_bhb_loop+0x55/0xb0 [ 278.000524][T16194] ? clear_bhb_loop+0x55/0xb0 [ 278.005232][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.011133][T16194] RIP: 0033:0x7f123ccd1ea9 [ 278.015593][T16194] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 278.035437][T16194] RSP: 002b:00007f123c04c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.043967][T16194] RAX: ffffffffffffffda RBX: 00007f123ce08f80 RCX: 00007f123ccd1ea9 [ 278.051967][T16194] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000004 [ 278.059973][T16194] RBP: 00007f123cd40ff4 R08: 0000000000000000 R09: 0000000000000000 [ 278.068041][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.076016][T16194] R13: 000000000000000b R14: 00007f123ce08f80 R15: 00007ffe58bfb938 [ 278.084018][T16194] [ 278.087029][T16194] ---[ end trace 0000000000000000 ]--- [ 278.141289][T16196] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 278.204562][T16196] loop3: detected capacity change from 0 to 8192 [ 278.262317][T16196] loop3: p1 p2 p3 p4 < > [ 278.266780][T16196] loop3: p1 size 67108859 extends beyond EOD, truncated [ 278.278493][T16196] loop3: p2 start 65535 is beyond EOD, truncated [ 278.481557][ T29] audit: type=1400 audit(262.671:36206): avc: denied { create } for pid=16219 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.525858][ T29] audit: type=1400 audit(262.689:36207): avc: denied { write } for pid=16219 comm="syz-executor.3" name="file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.548064][ T29] audit: type=1400 audit(262.689:36208): avc: denied { open } for pid=16219 comm="syz-executor.3" path="/root/syzkaller-testdir3723562869/syzkaller.oUKrhr/106/file1/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.587938][T16220] loop3: detected capacity change from 0 to 512 [ 278.596011][ T29] audit: type=1400 audit(262.772:36209): avc: denied { mounton } for pid=16219 comm="syz-executor.3" path="/root/syzkaller-testdir3723562869/syzkaller.oUKrhr/106/file1/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 278.673651][T16220] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 256 (level 1) [ 278.696753][T16220] EXT4-fs (loop3): Remounting filesystem read-only [ 278.712301][T16220] EXT4-fs (loop3): 1 truncate cleaned up [ 278.724208][T16220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.749561][T16220] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 278.764232][T16220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.113932][ T29] audit: type=1326 audit(263.252:36210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6e0a7ea9 code=0x7ffc0000 [ 279.137614][ T29] audit: type=1326 audit(263.252:36211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6e0a7ea9 code=0x7ffc0000 [ 279.204905][ T29] audit: type=1326 audit(263.298:36212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6e0a7ea9 code=0x7ffc0000 [ 279.228591][ T29] audit: type=1326 audit(263.307:36213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6e0a7ea9 code=0x7ffc0000 [ 279.252312][ T29] audit: type=1326 audit(263.307:36214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6e0a7ea9 code=0x7ffc0000 [ 279.275849][ T29] audit: type=1326 audit(263.317:36215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe6e0a7ea9 code=0x7ffc0000 [ 279.355316][T16236] loop2: detected capacity change from 0 to 1024 [ 279.397237][T16236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0102] [ 279.409761][T16236] System zones: 0-1, 3-12 [ 279.414556][T16236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.449789][T16236] EXT4-fs error (device loop2): __ext4_remount:6503: comm syz-executor.2: Abort forced by user [ 279.475237][T16236] EXT4-fs (loop2): Remounting filesystem read-only [ 279.482325][T16236] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 279.524456][T16037] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.587072][T16209] syz-executor.1 (16209) used greatest stack depth: 7904 bytes left [ 279.600771][T16246] loop3: detected capacity change from 0 to 512 [ 279.616998][T16246] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 256 (level 1) [ 279.636289][T16246] EXT4-fs (loop3): Remounting filesystem read-only [ 279.644243][T16246] EXT4-fs (loop3): 1 truncate cleaned up [ 279.650393][T16246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.663642][T16246] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 279.670898][T16246] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.717582][T16256] syzkaller1: entered promiscuous mode [ 279.723066][T16256] syzkaller1: entered allmulticast mode [ 279.752450][T16259] loop3: detected capacity change from 0 to 512 [ 279.769258][T16259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.801455][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.107770][T16279] qrtr: Invalid version 0 [ 280.582721][T16287] loop1: detected capacity change from 0 to 512 [ 280.589900][T16287] ext4: Unknown parameter 'uid<00000000000000000000' [ 280.636552][T15751] bridge_slave_1: left allmulticast mode [ 280.642239][T15751] bridge_slave_1: left promiscuous mode [ 280.647924][T15751] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.660239][T15751] bridge_slave_0: left allmulticast mode [ 280.665957][T15751] bridge_slave_0: left promiscuous mode [ 280.671714][T15751] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.830454][T15751] bond0 (unregistering): Released all slaves [ 280.956505][T15751] hsr_slave_0: left promiscuous mode [ 280.967615][T15751] hsr_slave_1: left promiscuous mode [ 280.978593][T15751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.986109][T15751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.014404][T15751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.022028][T15751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.050484][T15751] veth1_macvtap: left promiscuous mode [ 281.056165][T15751] veth0_macvtap: left promiscuous mode [ 281.061747][T15751] veth1_vlan: left promiscuous mode [ 281.067027][T15751] veth0_vlan: left promiscuous mode [ 281.239032][T15751] team0 (unregistering): Port device team_slave_1 removed [ 281.261965][T15751] team0 (unregistering): Port device team_slave_0 removed [ 281.364378][T16322] loop3: detected capacity change from 0 to 512 [ 281.396317][T16322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.437284][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.476654][T16333] bridge0: port 3(team0) entered blocking state [ 281.483014][T16333] bridge0: port 3(team0) entered disabled state [ 281.489401][T16333] team0: entered allmulticast mode [ 281.494563][T16333] team_slave_0: entered allmulticast mode [ 281.500507][T16333] team_slave_1: entered allmulticast mode [ 281.507226][T16333] team0: entered promiscuous mode [ 281.512303][T16333] team_slave_0: entered promiscuous mode [ 281.517987][T16333] team_slave_1: entered promiscuous mode [ 281.524137][T16333] bridge0: port 3(team0) entered blocking state [ 281.530488][T16333] bridge0: port 3(team0) entered forwarding state [ 281.565224][T15751] IPVS: stop unused estimator thread 0... [ 281.934717][T16352] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 281.942937][T16352] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 281.951108][T16352] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.960499][T16352] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.969301][T16352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 281.976512][T16352] IPv6: NLM_F_CREATE should be set when creating new route [ 281.983750][T16352] IPv6: NLM_F_CREATE should be set when creating new route [ 281.990956][T16352] IPv6: NLM_F_CREATE should be set when creating new route [ 282.067016][T16358] loop3: detected capacity change from 0 to 2048 [ 282.088338][T16358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.147564][ T3208] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 282.165177][ T3208] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 282.177386][ T3208] EXT4-fs (loop3): This should not happen!! Data will be lost [ 282.177386][ T3208] [ 282.187036][ T3208] EXT4-fs (loop3): Total free blocks count 0 [ 282.193005][ T3208] EXT4-fs (loop3): Free/Dirty block details [ 282.199099][ T3208] EXT4-fs (loop3): free_blocks=2415919104 [ 282.204925][ T3208] EXT4-fs (loop3): dirty_blocks=16 [ 282.210098][ T3208] EXT4-fs (loop3): Block reservation details [ 282.216124][ T3208] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 282.222637][T14879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.285635][T16362] loop3: detected capacity change from 0 to 2048 [ 282.334845][T16362] loop3: p1 < > p4 [ 282.339132][T16362] loop3: p4 size 8388608 extends beyond EOD, truncated [ 282.423256][T16366] bridge0: port 4(team0) entered blocking state [ 282.429614][T16366] bridge0: port 4(team0) entered disabled state [ 282.436055][T16366] team0: entered allmulticast mode [ 282.441193][T16366] team_slave_0: entered allmulticast mode [ 282.446942][T16366] team_slave_1: entered allmulticast mode [ 282.454027][T16366] team0: entered promiscuous mode [ 282.459066][T16366] team_slave_0: entered promiscuous mode [ 282.465107][T16366] team_slave_1: entered promiscuous mode [ 282.474244][T16366] bridge0: port 4(team0) entered blocking state [ 282.480577][T16366] bridge0: port 4(team0) entered forwarding state [ 282.521049][T16371] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.624275][T16384] loop1: detected capacity change from 0 to 1024 [ 282.641337][T16384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.657266][T16384] VFS: Lookup of 'file0' in ext4 loop1 would have caused loop [ 282.673105][T14811] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.733185][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.029296][T16396] loop2: detected capacity change from 0 to 512 [ 283.040181][T16396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.113344][T16399] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 283.125822][T16399] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 283.137742][T16399] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 283.150152][T16399] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 283.486694][T16405] loop3: detected capacity change from 0 to 512 [ 283.494184][T16405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.506206][T16405] EXT4-fs (loop3): 1 truncate cleaned up [ 283.512265][T16405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.527871][T16405] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz-executor.3: Siphash requires key [ 283.705060][T16409] loop1: detected capacity change from 0 to 128 [ 283.941038][T16037] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.956285][T16037] ================================================================== [ 283.964376][T16037] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru_vma [ 283.972349][T16037] [ 283.974657][T16037] read-write to 0xffff888237c2ac08 of 1 bytes by task 16417 on cpu 0: [ 283.982789][T16037] folio_add_lru_vma+0x74/0x170 [ 283.987630][T16037] do_wp_page+0x1728/0x22b0 [ 283.992124][T16037] handle_mm_fault+0xb9b/0x2a80 [ 283.996975][T16037] exc_page_fault+0x3b9/0x650 [ 284.001640][T16037] asm_exc_page_fault+0x26/0x30 [ 284.006482][T16037] [ 284.008786][T16037] read to 0xffff888237c2ac08 of 1 bytes by task 16037 on cpu 1: [ 284.016407][T16037] __lru_add_drain_all+0x12c/0x410 [ 284.021513][T16037] lru_add_drain_all+0x10/0x20 [ 284.026272][T16037] invalidate_bdev+0x47/0x70 [ 284.030858][T16037] ext4_put_super+0x51b/0x7e0 [ 284.035535][T16037] generic_shutdown_super+0xde/0x210 [ 284.040810][T16037] kill_block_super+0x2a/0x70 [ 284.045476][T16037] ext4_kill_sb+0x44/0x80 [ 284.049798][T16037] deactivate_locked_super+0x7d/0x1c0 [ 284.055160][T16037] deactivate_super+0x9f/0xb0 [ 284.059820][T16037] cleanup_mnt+0x268/0x2e0 [ 284.064226][T16037] __cleanup_mnt+0x19/0x20 [ 284.068632][T16037] task_work_run+0x13a/0x1a0 [ 284.073214][T16037] syscall_exit_to_user_mode+0xbe/0x130 [ 284.078755][T16037] do_syscall_64+0xd6/0x1c0 [ 284.083245][T16037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.089136][T16037] [ 284.091443][T16037] value changed: 0x09 -> 0x0c [ 284.096106][T16037] [ 284.098421][T16037] Reported by Kernel Concurrency Sanitizer on: [ 284.104564][T16037] CPU: 1 PID: 16037 Comm: syz-executor.2 Tainted: G W 6.10.0-rc3-syzkaller-00132-gc286c21ff942 #0 [ 284.116533][T16037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 284.126573][T16037] ================================================================== 1970/01/01 00:04:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 284.149323][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 284.149337][ T29] audit: type=1400 audit(267.886:36335): avc: denied { write } for pid=3072 comm="syz-fuzzer" path="pipe:[1688]" dev="pipefs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1