last executing test programs: 30.444410206s ago: executing program 0 (id=10910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10c}}, 0x0) 27.61667811s ago: executing program 0 (id=10914): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x16, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 27.516341735s ago: executing program 0 (id=10916): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0x8010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000040)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 27.330189906s ago: executing program 0 (id=10925): socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 26.380194951s ago: executing program 0 (id=10942): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) 26.214555161s ago: executing program 0 (id=10945): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 10.938838256s ago: executing program 32 (id=10945): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 5.16712483s ago: executing program 1 (id=11125): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) 4.968315152s ago: executing program 1 (id=11126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.948266793s ago: executing program 1 (id=11127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.837153709s ago: executing program 1 (id=11128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d4"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) 4.683623298s ago: executing program 1 (id=11129): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161bac", 0xf5) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 2.032299702s ago: executing program 3 (id=11151): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffefffffefffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r1, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000)=r5, 0x10) 2.011521923s ago: executing program 3 (id=11152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x38, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 1.939296077s ago: executing program 3 (id=11154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) 1.903492149s ago: executing program 2 (id=11155): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8000000000000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x4c, 0xb5, &(0x7f0000000180)="f698697c4e1ebe0c41c2b3e3710d95c35f0a76ee483dfd06f317c244360769cb72d4734b0fce092a38ec5865e3ad10af68395c2a1de01c68d1275fe4199461d9d61a53524e278fb0e879ae0d", &(0x7f0000000380)=""/181, 0xc, 0x0, 0xf0, 0x90, &(0x7f00000005c0)="176e609b0a6e31996178a70daf16ba62f36eeca9a03dde2edf4ec1c19d83f259a274924159a44cdff8f5391dc4aa659844e531a329f8a844ed7ab556a23c12eec8bb19b590544f0446f99f29f13ce6c7d13d0f6f79f53ed16913307e07f3d49a5efbfe4eee0328a149ea2122ab95f1933288b7584009726338b77d02d2e906d0f523af3a77078caa422ea5a756b1f065e349ffcba61240290ba46f6b67e1ea7098900885fc95ebf4dfa22231c3ac77e7ab6565315a134e1132574443e88d4ea385ee859b2fff35fb35833efa454efe8d0400"/240, &(0x7f0000000440)="a370ede7e9894fe0a6d9cb0273f93ca3c40cface887066805bfe6e8a5fe44e259ebe7d7f525560c18156504881c5abaf8b37dd797e283a4ced92d2157c385f248d5a1a7b044aa8d9ad984c8f5f4368df232e386f450706c83970cc773bb409c381ca2aa63009fe5328003d98a41f7c2dcfca99db7fa130cca68bf469e21ada76e91ea2a7068ace6f9aaa74d9813d3c2d", 0x5}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x8000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x7, 0x3, 0x5, 0x24, 0x0, 0x80000000, 0x30000, 0xb54e6ed7194afd26, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0xffff000, 0x0, 0x7, 0x100000000, 0x1, 0xb4, 0x0, 0x8, 0x0, 0x8}, r4, 0x2, r2, 0x5) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x42) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000600), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000640), 0x9) 1.791011066s ago: executing program 2 (id=11157): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_open_procfs$namespace(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x131000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@multicast2, @empty, 0xffffff00, 0xff000000, 'veth1_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x29, 0x2, 0x14}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@mcast2, [0xff, 0xff000000, 0xff000000], @ipv6=@loopback, [0x0, 0xff, 0x0, 0xffffffff], @ipv4=@empty, [0xff000000, 0xff000000, 0xff000000, 0xff], 0xfffffff7, 0x40, 0x21, 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x2208, 0x1ec}, 0xa0, 0x1402, 0x4e20, 0x4e24, 0x4e24, 0x4e21}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x4, 0x2, 0x1, 0x0, 0x4], 0x1, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x6, 0x2, 0x3, 0x4], 0x0, 0x5}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr=0x64010100, 0xff, 0xffffffff, 'veth0_to_batadv\x00', '\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x3, 0x9, 0x5, 'syz0\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 1.736149809s ago: executing program 3 (id=11158): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x400, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d26000d4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) 1.338183462s ago: executing program 2 (id=11161): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$netlink(0x10, 0x3, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x4845) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.313520433s ago: executing program 5 (id=11163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x36, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x8010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000040)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.256349497s ago: executing program 4 (id=11164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.247788527s ago: executing program 4 (id=11165): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) 1.226343348s ago: executing program 5 (id=11166): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x5, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000280)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290000003e0000007200000000000000140000000000000029000004430000000c00000000000000280000000000000029000000390000006702020600000000fe80000000000000000000000000002114000000000000002900000034000000dc78000000000000080200000000000029"], 0x278}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4080084) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0x18, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.223018689s ago: executing program 3 (id=11167): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYRES16], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYBLOB, @ANYRES32, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES64], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000100)="5a34a10a1a0092d9221cc435275ce4526b204bcbe6673dff8d7f17ae2b0f7ef4b5bc88a9e935b67c44718620ab7eb58879b2bdfa6aec170031d8", 0x3a, 0x0, &(0x7f0000000240)={0x2, 0xc, @rand_addr=0x64010102}, 0x10) listen(r4, 0xda90) accept(r4, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) creat(0x0, 0x0) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) 1.091549986s ago: executing program 2 (id=11168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x4000000) 515.581739ms ago: executing program 5 (id=11169): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a85821, 0x0) 512.94857ms ago: executing program 2 (id=11170): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x40085500, 0x100000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00", 0x1b) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 441.607164ms ago: executing program 5 (id=11171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc6c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001400000011000100000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 441.320884ms ago: executing program 4 (id=11172): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) shutdown(0xffffffffffffffff, 0x2) 348.21976ms ago: executing program 4 (id=11173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) 331.569161ms ago: executing program 5 (id=11174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 315.012671ms ago: executing program 3 (id=11175): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) syz_open_procfs$namespace(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x131000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@multicast2, @empty, 0xffffff00, 0xff000000, 'veth1_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x29, 0x2, 0x14}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast2, [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@mcast2, [0xff, 0xff000000, 0xff000000], @ipv6=@loopback, [0x0, 0xff, 0x0, 0xffffffff], @ipv4=@empty, [0xff000000, 0xff000000, 0xff000000, 0xff], 0xfffffff7, 0x40, 0x21, 0x4e20, 0x4e23, 0x4e20, 0x4e21, 0x2208, 0x1ec}, 0xa0, 0x1402, 0x4e20, 0x4e24, 0x4e24, 0x4e21}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x4, 0x2, 0x1, 0x0, 0x4], 0x1, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x6, 0x2, 0x3, 0x4], 0x0, 0x5}}}}, {{@ip={@rand_addr=0x64010100, @rand_addr=0x64010100, 0xff, 0xffffffff, 'veth0_to_batadv\x00', '\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x3, 0x9, 0x5, 'syz0\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 241.865586ms ago: executing program 4 (id=11176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x36, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x8010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000000040)="d2ff03cb4608008cb89e08d986dd", 0x0, 0xb22a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 189.272669ms ago: executing program 2 (id=11177): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x200c8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x3ffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = msgget$private(0x0, 0x286) msgrcv(r6, 0x0, 0x0, 0x3, 0x2000) msgsnd(r6, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x3, 0xff}, 0x0, 0x0, 0x5, 0x4, 0x3, 0x45, 0x0, 0x8000, 0x7, 0x6}) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000300)='./file0\x00', 0x800000ad) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) readv(r7, &(0x7f0000002600)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 164.16912ms ago: executing program 1 (id=11178): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000011, 0x28011, 0xffffffffffffffff, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) 157.64515ms ago: executing program 5 (id=11179): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = dup(r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r3, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2b, 'cpuset'}, {0x2b, 'blkio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}]}, 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r4, 0x5) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) write(r4, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161bac", 0xf5) acct(&(0x7f00000000c0)='./file1\x00') close(0x3) 0s ago: executing program 4 (id=11180): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x200c8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x3ffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = msgget$private(0x0, 0x286) msgrcv(r6, 0x0, 0x0, 0x3, 0x2000) msgsnd(r6, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x3, 0xff}, 0x0, 0x0, 0x5, 0x4, 0x3, 0x45, 0x0, 0x8000, 0x7, 0x6}) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000300)='./file0\x00', 0x800000ad) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) readv(r7, &(0x7f0000002600)=[{&(0x7f0000000080)=""/17, 0x11}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): rawip_socket permissive=1 [ 433.970346][ T10] lo speed is unknown, defaulting to 1000 [ 433.989663][ T10] infiniband syz2: ib_query_port failed (-19) [ 434.202020][T26989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.290065][T27119] siw: device registration error -23 [ 434.296331][T27119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27119 comm=syz.2.9021 [ 434.450767][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9024'. [ 434.885870][T26989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.984661][T26989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.028855][T26989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.039316][T27127] loop2: detected capacity change from 0 to 1024 [ 435.096242][T27127] EXT4-fs: inline encryption not supported [ 435.135634][T27127] EXT4-fs: Ignoring removed i_version option [ 435.158312][T26989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.180113][T27127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.196479][ T36] IPVS: stop unused estimator thread 0... [ 435.206108][T26989] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.235637][ T1778] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.242873][ T1778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.287259][ T1778] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.294401][ T1778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.312552][T26989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.371404][T26989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.919251][T27164] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9025: Allocating blocks 497-513 which overlap fs metadata [ 435.949066][T27164] EXT4-fs (loop2): pa ffff888107e533f0: logic 256, phys. 385, len 8 [ 435.957154][T27164] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 436.400898][T26989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.427379][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.656813][T27194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27194 comm=syz.3.9035 [ 436.785615][T27196] loop2: detected capacity change from 0 to 512 [ 437.023459][T27196] EXT4-fs: Ignoring removed orlov option [ 437.049482][T27196] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.061361][T27196] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.9039: corrupted in-inode xattr: e_value size too large [ 437.077866][T27196] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 437.078082][T27196] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9039: couldn't read orphan inode 15 (err -117) [ 437.099681][T27196] loop2: lost filesystem error report for type 5 error -117 [ 437.100233][T27196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.177295][T26989] veth0_vlan: entered promiscuous mode [ 437.188570][T26989] veth1_vlan: entered promiscuous mode [ 437.206642][T26989] veth0_macvtap: entered promiscuous mode [ 437.214777][T26989] veth1_macvtap: entered promiscuous mode [ 437.226518][T26989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.238698][T26989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.250460][ T1778] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.344449][ T1778] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.361831][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.378103][ T1778] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.392772][ T1778] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.403911][T27209] loop3: detected capacity change from 0 to 128 [ 437.446135][T27209] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.458899][T27209] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.500430][T19171] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 437.512213][T27216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9043'. [ 437.618043][T27229] loop2: detected capacity change from 0 to 128 [ 437.627462][T27229] ext4: Unknown parameter 'hash' [ 437.727179][T27233] lo speed is unknown, defaulting to 1000 [ 438.578361][T27242] netlink: 'syz.0.9048': attribute type 29 has an invalid length. [ 438.613134][T27245] loop4: detected capacity change from 0 to 128 [ 438.634849][T27242] netlink: 'syz.0.9048': attribute type 29 has an invalid length. [ 438.876057][T27219] lo speed is unknown, defaulting to 1000 [ 438.891435][T27255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9053'. [ 438.938802][T27256] siw: device registration error -23 [ 438.945667][T27256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27256 comm=syz.1.9051 [ 439.438491][T27219] chnl_net:caif_netlink_parms(): no params data found [ 439.733622][T27219] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.740918][T27219] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.750873][T27219] bridge_slave_0: entered allmulticast mode [ 439.758769][T27219] bridge_slave_0: entered promiscuous mode [ 439.767682][T27219] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.775075][T27219] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.782671][T27219] bridge_slave_1: entered allmulticast mode [ 439.790630][T27219] bridge_slave_1: entered promiscuous mode [ 439.903423][T27219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.921973][T27219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.938945][T27278] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 439.945680][T27278] syzkaller1: linktype set to 768 [ 439.951287][T27280] netlink: 'syz.0.9061': attribute type 29 has an invalid length. [ 439.984088][T27282] netlink: 'syz.0.9061': attribute type 29 has an invalid length. [ 440.010500][T27278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9059'. [ 440.035008][T27219] team0: Port device team_slave_0 added [ 440.051142][T27219] team0: Port device team_slave_1 added [ 440.086976][T27219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.116990][T27219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.162025][T27297] loop4: detected capacity change from 0 to 128 [ 440.180438][T27219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.202785][T27219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.212133][T27219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.214247][T27297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.262278][T27302] loop0: detected capacity change from 0 to 4096 [ 440.263396][T27297] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.282925][T27219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.303969][T27299] loop1: detected capacity change from 0 to 4096 [ 440.322307][T27219] hsr_slave_0: entered promiscuous mode [ 440.340518][T27219] hsr_slave_1: entered promiscuous mode [ 440.344740][T27302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.346992][T27219] debugfs: 'hsr0' already exists in 'hsr' [ 440.362346][T27299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.364499][T27219] Cannot create hsr debugfs directory [ 440.391702][T26989] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.451913][T20134] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.469048][T27311] netlink: 'syz.2.9073': attribute type 29 has an invalid length. [ 440.500044][T27311] netlink: 'syz.2.9073': attribute type 29 has an invalid length. [ 440.533893][T27219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.623434][T27219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.661002][T19828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.706787][T27329] loop2: detected capacity change from 0 to 128 [ 440.749345][T27329] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.789911][T27219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.830426][T27329] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.840923][T27338] syzkaller0: entered promiscuous mode [ 440.847038][T27338] syzkaller0: entered allmulticast mode [ 440.854331][T27336] netlink: 'syz.0.9084': attribute type 29 has an invalid length. [ 440.900828][T27343] netlink: 'syz.0.9084': attribute type 29 has an invalid length. [ 440.903485][T26648] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.939034][T27219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.985517][T27347] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 440.991761][T27347] syzkaller1: linktype set to 768 [ 441.016801][T27347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9089'. [ 441.077854][T27219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 441.095472][T27219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.105228][T27361] loop2: detected capacity change from 0 to 512 [ 441.117257][T27361] EXT4-fs: Ignoring removed orlov option [ 441.128100][T27219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.135817][T27361] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.144689][T27219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.178713][T27361] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.9095: corrupted in-inode xattr: e_value size too large [ 441.224245][T27361] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.224473][T27361] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9095: couldn't read orphan inode 15 (err -117) [ 441.270706][T27361] loop2: lost filesystem error report for type 5 error -117 [ 441.283516][T27219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.298474][T27376] loop4: detected capacity change from 0 to 128 [ 441.317492][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9099'. [ 441.327561][T27361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.341720][T27376] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.354992][T27219] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.368438][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.375577][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.398107][T27376] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.417766][T27381] syzkaller0: entered promiscuous mode [ 441.432008][T27381] syzkaller0: entered allmulticast mode [ 441.439190][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.450535][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.457658][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.480686][T26989] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.528723][T27219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.539383][T27219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.635344][T27394] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 441.664335][T27394] syzkaller1: linktype set to 768 [ 441.754152][T27405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9105'. [ 441.830388][T27410] loop2: detected capacity change from 0 to 128 [ 441.847617][T27407] loop1: detected capacity change from 0 to 512 [ 441.870489][T27407] EXT4-fs: Ignoring removed orlov option [ 441.928844][T27219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.942881][T27407] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.974996][T27407] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.9110: corrupted in-inode xattr: e_value size too large [ 441.986254][T27413] loop0: detected capacity change from 0 to 128 [ 441.997329][T27407] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.014614][T27407] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9110: couldn't read orphan inode 15 (err -117) [ 442.036129][T27407] loop1: lost filesystem error report for type 5 error -117 [ 442.038863][T27407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.039113][T27413] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.071146][T27413] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.127721][T20134] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.144279][T19828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.209688][T27219] veth0_vlan: entered promiscuous mode [ 442.221884][T27219] veth1_vlan: entered promiscuous mode [ 442.263720][T27219] veth0_macvtap: entered promiscuous mode [ 442.303306][T27219] veth1_macvtap: entered promiscuous mode [ 442.315173][T27219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.324117][T27219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.380958][T15086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.392491][T27428] kernel profiling enabled (shift: 0) [ 442.427872][ T1778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.470957][ T1778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.509515][ T1778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.239036][T27444] vxcan1: entered promiscuous mode [ 443.342447][T27446] FAT-fs (loop1): Directory bread(block 64) failed [ 443.351868][T27450] EXT4-fs: Ignoring removed orlov option [ 443.358294][T27446] FAT-fs (loop1): Directory bread(block 65) failed [ 443.367476][T27448] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.370997][T27450] EXT4-fs: Ignoring removed mblk_io_submit option [ 443.392893][T27446] FAT-fs (loop1): Directory bread(block 66) failed [ 443.399540][T27446] FAT-fs (loop1): Directory bread(block 67) failed [ 443.413382][T27446] FAT-fs (loop1): Directory bread(block 68) failed [ 443.416838][T27448] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.420034][T27446] FAT-fs (loop1): Directory bread(block 69) failed [ 443.437060][T27446] FAT-fs (loop1): Directory bread(block 70) failed [ 443.443917][T27446] FAT-fs (loop1): Directory bread(block 71) failed [ 443.448286][T27450] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.9122: corrupted in-inode xattr: e_value size too large [ 443.450549][T27446] FAT-fs (loop1): Directory bread(block 72) failed [ 443.474048][T27446] FAT-fs (loop1): Directory bread(block 73) failed [ 443.558783][T20134] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.596956][T27450] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.597190][T27450] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.9122: couldn't read orphan inode 15 (err -117) [ 443.680982][T27450] loop4: lost filesystem error report for type 5 error -117 [ 443.681723][T27450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.804656][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.025298][T27468] set_capacity_and_notify: 3 callbacks suppressed [ 444.025320][T27468] loop4: detected capacity change from 0 to 128 [ 444.255853][T27457] lo speed is unknown, defaulting to 1000 [ 444.425691][T27457] chnl_net:caif_netlink_parms(): no params data found [ 444.854983][T27507] loop2: detected capacity change from 0 to 128 [ 445.164228][T27457] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.171571][T27519] loop3: detected capacity change from 0 to 128 [ 445.171622][T27457] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.172139][T27457] bridge_slave_0: entered allmulticast mode [ 445.198759][T27457] bridge_slave_0: entered promiscuous mode [ 445.217428][T27457] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.225026][T27457] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.233937][T27457] bridge_slave_1: entered allmulticast mode [ 445.246011][T27457] bridge_slave_1: entered promiscuous mode [ 445.388942][T27457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.400991][T27457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.494507][T27457] team0: Port device team_slave_0 added [ 445.502299][T27457] team0: Port device team_slave_1 added [ 445.517635][T27526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9144'. [ 445.529838][T27457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.548189][T27528] loop2: detected capacity change from 0 to 1024 [ 445.554649][T27457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.583559][T27528] EXT4-fs: inline encryption not supported [ 445.590522][T27528] EXT4-fs: Ignoring removed i_version option [ 445.600207][T27457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.622866][T27457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.630062][T27457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.659787][T27528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.669137][T27457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.769460][T27534] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9146'. [ 445.806601][T27457] hsr_slave_0: entered promiscuous mode [ 445.813146][T27457] hsr_slave_1: entered promiscuous mode [ 445.819226][T27457] debugfs: 'hsr0' already exists in 'hsr' [ 445.825312][T27457] Cannot create hsr debugfs directory [ 446.167054][T27539] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9145: Allocating blocks 497-513 which overlap fs metadata [ 446.184371][T27539] EXT4-fs (loop2): pa ffff888107e53230: logic 256, phys. 385, len 8 [ 446.192419][T27539] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 446.585953][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9150'. [ 446.616747][T27544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9150'. [ 446.667631][T27457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.698092][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.726993][T27544] bridge0: entered promiscuous mode [ 446.754226][T27544] syz_tun: entered promiscuous mode [ 446.779257][T27457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.915611][T27548] syzkaller0: entered promiscuous mode [ 446.923093][T27548] syzkaller0: entered allmulticast mode [ 446.979647][T27457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.060054][T27457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.433545][T27457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.512180][T27457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.561205][T27457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.573231][T27457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.687860][T27579] lo speed is unknown, defaulting to 1000 [ 447.997611][T27457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.118737][T27457] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.199639][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.206841][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.252708][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.260055][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.290279][T27588] loop0: detected capacity change from 0 to 1024 [ 448.305057][T27588] EXT4-fs: inline encryption not supported [ 448.318398][T27588] EXT4-fs: Ignoring removed i_version option [ 448.352662][T27591] loop3: detected capacity change from 0 to 128 [ 448.378135][T27588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.435380][T27598] loop2: detected capacity change from 0 to 512 [ 448.477487][T27598] EXT4-fs: Ignoring removed orlov option [ 448.512727][T27598] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.573743][T27598] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.9161: corrupted in-inode xattr: e_value size too large [ 448.588726][T27598] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.965856][T27457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.181800][T27598] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9161: couldn't read orphan inode 15 (err -117) [ 449.203338][T27598] loop2: lost filesystem error report for type 5 error -117 [ 449.223157][T27598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.260272][T20134] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.321861][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.372787][T27633] loop2: detected capacity change from 0 to 128 [ 449.386190][T27457] veth0_vlan: entered promiscuous mode [ 449.396729][T27457] veth1_vlan: entered promiscuous mode [ 449.417776][T27633] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 449.443692][T27457] veth0_macvtap: entered promiscuous mode [ 449.450708][T27633] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.466158][T27457] veth1_macvtap: entered promiscuous mode [ 449.478528][T27457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.489438][T27457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.547225][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.560258][T26648] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 449.579537][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.621012][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.640340][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.745330][T27647] loop3: detected capacity change from 0 to 128 [ 449.959243][T27655] loop1: detected capacity change from 0 to 128 [ 450.104875][T27658] netlink: 'syz.3.9176': attribute type 29 has an invalid length. [ 450.113487][T27658] netlink: 'syz.3.9176': attribute type 29 has an invalid length. [ 450.122081][T27658] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9176'. [ 450.634576][T27665] syzkaller0: entered promiscuous mode [ 450.640224][T27665] syzkaller0: entered allmulticast mode [ 450.770774][T27678] loop3: detected capacity change from 0 to 256 [ 450.839167][T27682] loop1: detected capacity change from 0 to 1024 [ 450.848322][T27682] EXT4-fs: Ignoring removed nobh option [ 450.853989][T27682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 450.906038][T27678] FAT-fs (loop3): IO charset koi8-ru not found [ 450.917290][T27682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.055246][T27697] loop2: detected capacity change from 0 to 128 [ 451.068783][T27457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.123441][T27697] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.138930][T27675] lo speed is unknown, defaulting to 1000 [ 451.172467][T27697] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.400063][T26648] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.666846][T27675] chnl_net:caif_netlink_parms(): no params data found [ 452.000719][T27738] loop4: detected capacity change from 0 to 512 [ 452.786449][T27675] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.803005][T27675] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.704019][T27675] bridge_slave_0: entered allmulticast mode [ 453.710782][T27675] bridge_slave_0: entered promiscuous mode [ 453.728975][T27675] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.743905][T27675] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.758807][T27675] bridge_slave_1: entered allmulticast mode [ 453.786003][T27675] bridge_slave_1: entered promiscuous mode [ 453.813573][T27766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.865908][T27675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.883078][T27766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.893723][T27675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.935910][T27675] team0: Port device team_slave_0 added [ 453.941562][T27768] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9202'. [ 453.961417][T27772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9204'. [ 453.961997][T27675] team0: Port device team_slave_1 added [ 454.021357][T27675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.035743][ T28] audit: type=1400 audit(1770867564.369:400): avc: denied { read } for pid=27769 comm="syz.1.9203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.057844][T27675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.133678][T27675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.617796][T27675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.630551][T27675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.666690][T27675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.987903][T27675] hsr_slave_0: entered promiscuous mode [ 455.034934][ T1038] IPVS: starting estimator thread 0... [ 455.060253][T27675] hsr_slave_1: entered promiscuous mode [ 455.103205][T27675] debugfs: 'hsr0' already exists in 'hsr' [ 455.109140][T27675] Cannot create hsr debugfs directory [ 455.414220][T27802] loop2: detected capacity change from 0 to 128 [ 455.505764][T27802] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.582600][T27802] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.628722][T27675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.660129][T27813] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9217'. [ 455.671700][T26648] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.682193][T27811] lo speed is unknown, defaulting to 1000 [ 455.701020][T27811] lo speed is unknown, defaulting to 1000 [ 455.725434][T27675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.761045][T27811] lo speed is unknown, defaulting to 1000 [ 455.783707][T27811] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 455.833541][T27675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.872699][T27825] netlink: 'syz.4.9220': attribute type 29 has an invalid length. [ 455.880957][T27811] lo speed is unknown, defaulting to 1000 [ 455.884675][T27825] netlink: 'syz.4.9220': attribute type 29 has an invalid length. [ 455.895127][T27811] lo speed is unknown, defaulting to 1000 [ 455.896026][T27825] netlink: 828 bytes leftover after parsing attributes in process `syz.4.9220'. [ 455.914113][T27675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.993264][T27788] IPVS: using max 2256 ests per chain, 112800 per kthread [ 456.014027][T27811] lo speed is unknown, defaulting to 1000 [ 456.116425][T27811] lo speed is unknown, defaulting to 1000 [ 456.335972][T27811] lo speed is unknown, defaulting to 1000 [ 456.394485][T27675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 456.448461][T27811] lo speed is unknown, defaulting to 1000 [ 456.457013][T27675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 456.517181][T27811] lo speed is unknown, defaulting to 1000 [ 456.532446][T27675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 456.553314][T27675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 456.565436][T27811] lo speed is unknown, defaulting to 1000 [ 456.658426][T27675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.672376][T27675] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.687960][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.695166][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.751140][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.758269][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.787878][T27853] loop2: detected capacity change from 0 to 512 [ 456.841021][T27853] ext4: block size(65536) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 456.859791][T27853] EXT4-fs (loop2): bad block size 65536 [ 456.908207][T27675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.922020][T27675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.933211][T27853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.943412][T27853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.996246][T27858] loop3: detected capacity change from 0 to 1024 [ 457.004518][T27859] siw: device registration error -23 [ 457.011402][T27859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27859 comm=syz.1.9227 [ 457.084930][T27858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 457.109428][T27858] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.438911][T27675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.621216][T27876] netlink: 'syz.4.9232': attribute type 29 has an invalid length. [ 457.637336][T27876] netlink: 'syz.4.9232': attribute type 29 has an invalid length. [ 457.646062][T27876] netlink: 828 bytes leftover after parsing attributes in process `syz.4.9232'. [ 457.656129][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 457.991461][ T28] audit: type=1400 audit(1770867568.319:401): avc: denied { mount } for pid=27877 comm="syz.1.9236" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 458.041789][ T28] audit: type=1400 audit(1770867568.319:402): avc: denied { remount } for pid=27877 comm="syz.1.9236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 458.353991][T27893] loop4: detected capacity change from 0 to 512 [ 458.380484][T27893] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 458.393743][T27893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 458.412459][T27893] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.9235: bad orphan inode 16 [ 458.422549][T27893] loop4: lost filesystem error report for type 5 error -117 [ 458.426072][T27893] ext4_test_bit(bit=15, block=4) = 0 [ 458.438782][T27893] EXT4-fs (loop4): 1 orphan inode deleted [ 458.445640][T27893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.626604][ T28] audit: type=1400 audit(1770867568.949:403): avc: denied { unmount } for pid=27457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 459.200198][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.285918][ T3456] bond_slave_0: left promiscuous mode [ 459.296948][ T3456] bond_slave_1: left promiscuous mode [ 459.360967][T27910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.380176][T27910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.406696][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.418556][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.431534][ T3456] bond0 (unregistering): Released all slaves [ 459.453584][T27675] veth0_vlan: entered promiscuous mode [ 459.461912][T27675] veth1_vlan: entered promiscuous mode [ 459.481244][T27675] veth0_macvtap: entered promiscuous mode [ 459.488596][ T3456] tipc: Left network mode [ 459.497618][ T3456] hsr_slave_0: left promiscuous mode [ 459.514041][ T3456] hsr_slave_1: left promiscuous mode [ 459.535369][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.542799][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.554359][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.561886][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.571979][ T3456] veth1_macvtap: left promiscuous mode [ 459.577878][ T3456] veth0_macvtap: left promiscuous mode [ 459.583778][ T3456] veth1_vlan: left promiscuous mode [ 459.589129][ T3456] veth0_vlan: left promiscuous mode [ 459.648254][T27914] netlink: 828 bytes leftover after parsing attributes in process `syz.2.9245'. [ 459.677061][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 459.687460][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 459.723639][T27675] veth1_macvtap: entered promiscuous mode [ 459.730380][T27912] netlink: 'syz.2.9245': attribute type 29 has an invalid length. [ 459.745570][T27675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.753166][T27913] netlink: 'syz.2.9245': attribute type 29 has an invalid length. [ 459.772604][T27675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.787341][ T1691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.802967][ T1691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.842031][ T1691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.879889][ T1691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.001724][T27922] loop3: detected capacity change from 0 to 128 [ 460.064741][T27926] siw: device registration error -23 [ 460.071507][T27926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27926 comm=syz.2.9246 [ 460.268279][ T3456] IPVS: stop unused estimator thread 0... [ 460.315377][ T28] audit: type=1400 audit(1770867570.629:404): avc: denied { unmount } for pid=27457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 463.051927][T27941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9251'. [ 463.061567][T27941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9251'. [ 463.762054][ T28] audit: type=1400 audit(1770867574.069:405): avc: denied { create } for pid=27966 comm="syz.4.9261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 463.864201][T27971] siw: device registration error -23 [ 463.870086][T27971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27971 comm=syz.1.9259 [ 463.910120][T27972] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9261'. [ 464.363506][T27977] 9p: Bad value for 'wfdno' [ 464.395975][T27976] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9261'. [ 464.447194][ T3789] bridge_slave_1: left allmulticast mode [ 464.925359][ T28] audit: type=1400 audit(1770867574.809:406): avc: denied { bind } for pid=27966 comm="syz.4.9261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 464.960079][ T3789] bridge_slave_1: left promiscuous mode [ 465.011228][ T3789] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.031873][ T3789] bridge_slave_0: left allmulticast mode [ 465.050860][ T3789] bridge_slave_0: left promiscuous mode [ 465.075366][ T3789] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.165653][ T3789] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 465.191804][T28001] loop1: detected capacity change from 0 to 128 [ 465.235792][ T3789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.246417][ T3789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.256832][ T3789] bond0 (unregistering): Released all slaves [ 465.304805][ T3789] tipc: Left network mode [ 465.316865][ T3789] hsr_slave_0: left promiscuous mode [ 465.379592][T28017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9273'. [ 465.389712][ T3789] hsr_slave_1: left promiscuous mode [ 465.396821][ T3789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.433207][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.479171][ T3789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.492866][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.515665][ T3789] veth1_macvtap: left promiscuous mode [ 465.521255][ T3789] veth0_macvtap: left promiscuous mode [ 465.558314][ T3789] veth1_vlan: left promiscuous mode [ 465.590938][ T3789] veth0_vlan: left promiscuous mode [ 466.902936][ T28] audit: type=1400 audit(1770867576.559:407): avc: denied { mounton } for pid=28032 comm="syz.3.9276" path="/50/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 467.076925][T28042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9278'. [ 467.140347][T28046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9278'. [ 467.165228][ T3789] team0 (unregistering): Port device team_slave_1 removed [ 467.223170][ T3789] team0 (unregistering): Port device team_slave_0 removed [ 467.818527][ T3789] IPVS: stop unused estimator thread 0... [ 467.961959][T28068] siw: device registration error -23 [ 468.036997][ T28] audit: type=1400 audit(1770867578.369:408): avc: denied { mount } for pid=28072 comm="syz.2.9290" name="/" dev="ramfs" ino=101834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 468.452475][T28082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.531312][T28082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.544526][T28102] tipc: Started in network mode [ 469.585004][T28102] tipc: Node identity 4, cluster identity 4711 [ 469.643328][T28102] tipc: Node number set to 4 [ 469.984909][T28112] loop1: detected capacity change from 0 to 512 [ 470.087428][T28112] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.9303: inode has both inline data and extents flags [ 470.111254][T28112] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 470.113316][T28112] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9303: couldn't read orphan inode 15 (err -117) [ 470.133062][T28120] loop2: detected capacity change from 0 to 512 [ 470.152874][T28112] loop1: lost filesystem error report for type 5 error -117 [ 470.155186][T28120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 470.172315][T28120] System zones: 1-12 [ 470.177250][T28112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.191869][T28120] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.9304: missing EA_INODE flag [ 470.203939][T28120] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 470.205378][T28120] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.9304: error while reading EA inode 12 err=-117 [ 470.227823][T28120] loop2: lost filesystem error report for type 5 error -117 [ 470.304644][T28120] EXT4-fs (loop2): 1 orphan inode deleted [ 470.385292][T28120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.428326][T27457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.675021][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.553269][T28172] loop3: detected capacity change from 0 to 128 [ 472.640545][T28172] ext4: Unknown parameter 'hash' [ 472.712092][T28178] loop2: detected capacity change from 0 to 128 [ 474.547679][T28230] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 474.560322][T28230] syzkaller1: linktype set to 768 [ 474.612323][T28230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9337'. [ 474.669794][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a76e800: rx timeout, send abort [ 474.748589][ T28] audit: type=1400 audit(1770867585.059:409): avc: denied { read } for pid=2979 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 474.771329][ T28] audit: type=1400 audit(1770867585.059:410): avc: denied { search } for pid=2979 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.799111][ T28] audit: type=1400 audit(1770867585.059:411): avc: denied { search } for pid=2979 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.821522][ T28] audit: type=1400 audit(1770867585.059:412): avc: denied { add_name } for pid=2979 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.842919][ T28] audit: type=1400 audit(1770867585.059:413): avc: denied { create } for pid=2979 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 474.928881][ T28] audit: type=1400 audit(1770867585.059:414): avc: denied { append open } for pid=2979 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 475.169840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810cfcdc00: rx timeout, send abort [ 475.178201][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a76e800: abort rx timeout. Force session deactivation [ 475.214489][ T28] audit: type=1400 audit(1770867585.059:415): avc: denied { getattr } for pid=2979 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 475.678162][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810cfcdc00: abort rx timeout. Force session deactivation [ 476.252386][T28264] siw: device registration error -23 [ 476.258651][T28264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28264 comm=syz.1.9347 [ 476.377874][ T28] audit: type=1400 audit(1770867586.579:416): avc: denied { create } for pid=28258 comm="syz.1.9347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 476.590591][T28229] Set syz1 is full, maxelem 65536 reached [ 477.158231][ T28] audit: type=1400 audit(1770867586.579:417): avc: denied { write } for pid=28258 comm="syz.1.9347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 477.219919][T28277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9353'. [ 477.389446][ T28] audit: type=1400 audit(1770867587.719:418): avc: denied { append } for pid=28282 comm="syz.2.9355" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 477.418722][T28283] loop2: detected capacity change from 0 to 128 [ 477.425345][T28287] loop3: detected capacity change from 0 to 128 [ 477.482279][T28287] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.533759][T28287] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.608332][T27219] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 477.858870][T28308] siw: device registration error -23 [ 477.864792][T28308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28308 comm=syz.1.9363 [ 477.906319][T28319] loop4: detected capacity change from 0 to 128 [ 477.913247][T28321] loop3: detected capacity change from 0 to 128 [ 477.920528][T28319] ext4: Unknown parameter 'hash' [ 477.935325][T28321] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.953535][T28324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9371'. [ 478.100665][T28321] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.173134][T27219] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.891922][T28346] netlink: 292 bytes leftover after parsing attributes in process `syz.1.9380'. [ 478.945502][T28352] loop1: detected capacity change from 0 to 128 [ 478.964024][T28352] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.978803][T28352] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.007528][T27457] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.240327][T28373] syzkaller0: entered promiscuous mode [ 479.248758][T28373] syzkaller0: entered allmulticast mode [ 479.405665][T28381] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9393'. [ 479.561958][T28385] syzkaller0: entered promiscuous mode [ 479.577403][T28385] syzkaller0: entered allmulticast mode [ 479.633703][T28392] loop2: detected capacity change from 0 to 128 [ 479.647898][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9398'. [ 479.660482][T28392] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.696658][T28392] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.738277][T26648] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.874405][T28411] loop4: detected capacity change from 0 to 128 [ 479.898234][T28410] syzkaller0: entered promiscuous mode [ 479.907469][T28410] syzkaller0: entered allmulticast mode [ 480.046602][T28421] syzkaller0: entered promiscuous mode [ 480.063289][T28421] syzkaller0: entered allmulticast mode [ 480.114670][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9412'. [ 480.160286][T28428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9413'. [ 480.485451][T28446] loop2: detected capacity change from 0 to 128 [ 480.547271][T28448] netlink: 284 bytes leftover after parsing attributes in process `syz.4.9419'. [ 480.706426][T28454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1792 sclass=netlink_audit_socket pid=28454 comm=syz.2.9422 [ 480.753813][T28451] syzkaller0: entered promiscuous mode [ 480.759656][T28451] syzkaller0: entered allmulticast mode [ 480.800647][T28457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9424'. [ 480.873298][T28461] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9425'. [ 480.915935][T28464] syzkaller0: entered promiscuous mode [ 480.934957][T28464] syzkaller0: entered allmulticast mode [ 481.072328][T28475] loop1: detected capacity change from 0 to 128 [ 481.656712][T28486] siw: device registration error -23 [ 481.692241][T28488] loop4: detected capacity change from 0 to 1024 [ 481.703327][T28488] EXT4-fs: inline encryption not supported [ 481.713337][T28488] EXT4-fs: Ignoring removed i_version option [ 481.745818][T28488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.768352][T28494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9440'. [ 481.953217][T28502] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.9437: Allocating blocks 497-513 which overlap fs metadata [ 481.973882][T28502] EXT4-fs (loop4): pa ffff888107e1d5b0: logic 256, phys. 385, len 8 [ 481.982093][T28502] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 483.118244][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.163967][T28513] loop2: detected capacity change from 0 to 128 [ 483.260003][T28516] syzkaller0: entered promiscuous mode [ 483.275741][T28516] syzkaller0: entered allmulticast mode [ 483.663434][T28536] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 483.669479][T28536] syzkaller1: linktype set to 768 [ 483.727434][T28536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9453'. [ 483.774050][T28543] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9454'. [ 483.818840][T28547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9455'. [ 484.142277][T28555] siw: device registration error -23 [ 485.652240][T28596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9471'. [ 486.431838][ T28] audit: type=1400 audit(1770867596.759:419): avc: denied { execute } for pid=28611 comm="syz.1.9478" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 487.052850][ T28] audit: type=1400 audit(1770867596.759:420): avc: denied { execute_no_trans } for pid=28611 comm="syz.1.9478" path="/63/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 487.178648][T28640] netlink: 'syz.3.9488': attribute type 1 has an invalid length. [ 487.215176][T28640] netlink: 'syz.3.9488': attribute type 4 has an invalid length. [ 487.235179][T28640] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9488'. [ 487.521318][T28653] syzkaller0: entered promiscuous mode [ 487.538092][T28653] syzkaller0: entered allmulticast mode [ 487.881578][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9500'. [ 487.995606][T28677] netlink: 292 bytes leftover after parsing attributes in process `syz.0.9502'. [ 488.242071][T28683] siw: device registration error -23 [ 488.248818][T28683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28683 comm=syz.1.9504 [ 488.341440][T28690] syzkaller0: entered promiscuous mode [ 488.359611][T28690] syzkaller0: entered allmulticast mode [ 488.629075][T28714] loop2: detected capacity change from 0 to 1024 [ 488.643196][T28714] EXT4-fs: inline encryption not supported [ 488.655395][T28714] EXT4-fs: Ignoring removed i_version option [ 488.679702][T28714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.881365][T28727] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9518: Allocating blocks 497-513 which overlap fs metadata [ 488.896403][T28727] EXT4-fs (loop2): pa ffff888107e1d5b0: logic 256, phys. 385, len 8 [ 488.904449][T28727] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 489.006938][T28730] syzkaller0: entered promiscuous mode [ 489.025029][T28730] syzkaller0: entered allmulticast mode [ 489.292753][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.328058][T28747] bridge0: port 3(ip6gretap0) entered blocking state [ 489.337710][T28747] bridge0: port 3(ip6gretap0) entered disabled state [ 489.370040][T28747] ip6gretap0: entered allmulticast mode [ 489.404529][T28747] ip6gretap0: entered promiscuous mode [ 489.426799][T28747] bridge0: port 3(ip6gretap0) entered blocking state [ 489.434675][T28747] bridge0: port 3(ip6gretap0) entered forwarding state [ 491.221260][T28790] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 491.227530][T28790] syzkaller0: owner set to 0 [ 491.948949][T28815] siw: device registration error -23 [ 491.955864][T28815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28815 comm=syz.1.9558 [ 492.457623][T28837] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9566'. [ 492.544708][ T28] audit: type=1400 audit(1770867602.879:421): avc: denied { read } for pid=28849 comm="syz.1.9572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 492.652373][T28857] loop0: detected capacity change from 0 to 1024 [ 492.660918][T28857] EXT4-fs: inline encryption not supported [ 492.673603][T28857] EXT4-fs: Ignoring removed i_version option [ 492.800510][T28860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28860 comm=syz.3.9571 [ 492.823743][T28857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.248376][T28857] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 493.334281][T27675] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.667606][T28890] loop1: detected capacity change from 0 to 1024 [ 493.697937][T28890] EXT4-fs: inline encryption not supported [ 493.711006][T28887] siw: device registration error -23 [ 493.722402][T28893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=28893 comm=syz.4.9589 [ 493.725543][T28890] EXT4-fs: Ignoring removed i_version option [ 493.768596][T28893] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 493.778684][T28890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.800017][T28890] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 493.818005][ T1506] IPVS: starting estimator thread 0... [ 493.845555][T27457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.952908][T28903] IPVS: using max 1920 ests per chain, 96000 per kthread [ 494.093434][T28922] ªªªªª»: renamed from hsr0 (while UP) [ 495.041907][T28979] netlink: 308 bytes leftover after parsing attributes in process `syz.4.9622'. [ 495.112983][T28981] siw: device registration error -23 [ 495.230237][T28985] siw: device registration error -23 [ 495.236294][T28985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28985 comm=syz.0.9625 [ 496.519329][T29033] syzkaller0: entered promiscuous mode [ 496.556467][T29033] syzkaller0: entered allmulticast mode [ 497.408194][T29077] siw: device registration error -23 [ 497.415642][T29077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29077 comm=syz.0.9660 [ 498.018418][T29079] syzkaller0: entered promiscuous mode [ 498.066688][T29079] syzkaller0: entered allmulticast mode [ 498.999174][T29115] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 499.018653][T29115] syzkaller1: linktype set to 768 [ 499.130780][T29121] siw: device registration error -23 [ 499.137454][T29121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29121 comm=syz.4.9675 [ 499.267439][T29122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9676'. [ 500.857660][T29145] bridge0: port 3(ip6gretap0) entered blocking state [ 500.873096][T29145] bridge0: port 3(ip6gretap0) entered disabled state [ 500.885152][T29145] ip6gretap0: entered allmulticast mode [ 500.891525][T29145] ip6gretap0: entered promiscuous mode [ 500.903380][T29145] bridge0: port 3(ip6gretap0) entered blocking state [ 500.910245][T29145] bridge0: port 3(ip6gretap0) entered forwarding state [ 501.840561][T29202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29202 comm=syz.3.9697 [ 501.929698][T29210] syzkaller0: entered promiscuous mode [ 501.952654][T29210] syzkaller0: entered allmulticast mode [ 501.968041][T29212] loop1: detected capacity change from 0 to 1024 [ 501.987234][T29215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9711'. [ 502.001913][T29212] EXT4-fs: inline encryption not supported [ 502.028767][T29212] EXT4-fs: Ignoring removed i_version option [ 502.083610][T29212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.485960][T29229] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.9710: Allocating blocks 497-513 which overlap fs metadata [ 502.533254][T29229] EXT4-fs (loop1): pa ffff888107e1d5b0: logic 256, phys. 385, len 8 [ 502.541456][T29229] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 502.580896][T29239] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9720'. [ 502.639644][T29237] bridge0: port 3(ip6gretap0) entered blocking state [ 502.674811][T29237] bridge0: port 3(ip6gretap0) entered disabled state [ 502.722111][T29237] ip6gretap0: entered allmulticast mode [ 502.811143][T29237] ip6gretap0: entered promiscuous mode [ 502.836770][T29237] bridge0: port 3(ip6gretap0) entered blocking state [ 502.845191][T29237] bridge0: port 3(ip6gretap0) entered forwarding state [ 502.935054][T29250] syzkaller0: entered promiscuous mode [ 502.941121][T29250] syzkaller0: entered allmulticast mode [ 503.118524][T29270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9728'. [ 503.931323][T29290] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 503.948978][T29290] syzkaller1: linktype set to 768 [ 504.012988][T29290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9732'. [ 504.933769][T27457] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.683427][T29362] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9763'. [ 506.814715][T29282] Set syz1 is full, maxelem 65536 reached [ 507.052494][T29384] siw: device registration error -23 [ 507.823658][T29420] siw: device registration error -23 [ 508.296245][T29443] loop3: detected capacity change from 0 to 1024 [ 508.345885][T29443] EXT4-fs: inline encryption not supported [ 508.377824][T29443] EXT4-fs: Ignoring removed i_version option [ 508.413853][T29443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.690473][T29459] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9797: Allocating blocks 497-513 which overlap fs metadata [ 508.705429][T29459] EXT4-fs (loop3): pa ffff888107e1d4d0: logic 256, phys. 385, len 8 [ 508.713522][T29459] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 509.219323][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.483665][T29487] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 509.520638][T29487] syzkaller1: linktype set to 768 [ 509.569099][T29487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9817'. [ 509.913287][T29511] delete_channel: no stack [ 509.923340][T29511] delete_channel: no stack [ 510.200565][T29518] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9824'. [ 510.330343][T29523] bridge0: port 3(ip6gretap0) entered blocking state [ 510.349411][T29523] bridge0: port 3(ip6gretap0) entered disabled state [ 510.381698][T29523] ip6gretap0: entered allmulticast mode [ 510.417725][T29523] ip6gretap0: entered promiscuous mode [ 510.446310][T29523] bridge0: port 3(ip6gretap0) entered blocking state [ 510.453969][T29523] bridge0: port 3(ip6gretap0) entered forwarding state [ 510.682026][T29553] netlink: 'syz.1.9835': attribute type 4 has an invalid length. [ 510.706263][T29553] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9835'. [ 510.992668][T29588] loop2: detected capacity change from 0 to 128 [ 511.010599][T29588] ext4: Unknown parameter 'hash' [ 511.170802][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9854'. [ 511.192888][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9854'. [ 512.194227][T29653] loop2: detected capacity change from 0 to 128 [ 512.213427][T29653] ext4: Unknown parameter 'hash' [ 512.849777][T29723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9899'. [ 513.635194][T29766] loop3: detected capacity change from 0 to 128 [ 513.707809][T29766] ext4: Unknown parameter 'hash' [ 513.811094][T29771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9917'. [ 514.537406][T29800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9929'. [ 514.703664][T29819] netlink: 'syz.0.9938': attribute type 4 has an invalid length. [ 514.711554][T29819] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9938'. [ 514.860565][T29833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9945'. [ 514.871437][T29833] netlink: 'syz.2.9945': attribute type 10 has an invalid length. [ 514.916230][T29833] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 515.004387][T29845] ip6gretap0: left allmulticast mode [ 515.015576][T29845] ip6gretap0: left promiscuous mode [ 515.027676][T29845] bridge0: port 3(ip6gretap0) entered disabled state [ 515.045390][T29845] bridge_slave_1: left allmulticast mode [ 515.052284][T29845] bridge_slave_1: left promiscuous mode [ 515.062641][T29845] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.071412][T29845] bridge_slave_0: left allmulticast mode [ 515.081309][T29845] bridge_slave_0: left promiscuous mode [ 515.093564][T29845] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.111492][T29859] netlink: 596 bytes leftover after parsing attributes in process `syz.2.9954'. [ 515.753688][T29895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29895 comm=syz.3.9964 [ 516.344673][ T28] audit: type=1400 audit(2000000008.300:422): avc: denied { unmount } for pid=27457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 516.482097][ T28] audit: type=1400 audit(2000000008.430:423): avc: denied { nlmsg_read } for pid=29919 comm="syz.0.9985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 516.532523][T29924] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 516.542903][T29924] syzkaller1: linktype set to 768 [ 516.602170][T29924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9983'. [ 516.659669][ T1778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.757189][ T1778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.990439][ T1778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.101681][ T1778] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.189696][T29962] siw: device registration error -23 [ 517.207249][T29950] lo speed is unknown, defaulting to 1000 [ 517.231202][T29950] lo speed is unknown, defaulting to 1000 [ 517.294792][T29962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29962 comm=syz.0.9994 [ 517.490678][ T1778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.511755][ T1778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.534126][T29918] Set syz1 is full, maxelem 65536 reached [ 517.537579][ T1778] bond0 (unregistering): Released all slaves [ 517.674844][T29950] chnl_net:caif_netlink_parms(): no params data found [ 517.709913][ T1778] hsr_slave_0: left promiscuous mode [ 517.728304][ T1778] hsr_slave_1: left promiscuous mode [ 517.764488][ T1778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.778147][ T1778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.794104][ T1778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.807710][ T1778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.829092][ T1778] veth1_macvtap: left promiscuous mode [ 517.842747][ T1778] veth0_macvtap: left promiscuous mode [ 517.855834][ T1778] veth1_vlan: left promiscuous mode [ 517.867702][ T1778] veth0_vlan: left promiscuous mode [ 518.019374][ T1778] team0 (unregistering): Port device team_slave_1 removed [ 518.036086][ T1778] team0 (unregistering): Port device team_slave_0 removed [ 518.173694][T29950] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.180857][T29950] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.201890][T29950] bridge_slave_0: entered allmulticast mode [ 518.222072][T29950] bridge_slave_0: entered promiscuous mode [ 518.269185][T29950] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.283144][T29950] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.310883][T29950] bridge_slave_1: entered allmulticast mode [ 518.323491][T29950] bridge_slave_1: entered promiscuous mode [ 518.349139][T29950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.359935][T29950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.381537][T29950] team0: Port device team_slave_0 added [ 518.388567][T29950] team0: Port device team_slave_1 added [ 518.507849][T29950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.551839][T29950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.649863][T29950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.724297][T29950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.731320][T29950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.792828][T29950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.868355][T29950] hsr_slave_0: entered promiscuous mode [ 518.885449][T29950] hsr_slave_1: entered promiscuous mode [ 519.348344][T30052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10013'. [ 519.680797][T30065] syzkaller0: entered promiscuous mode [ 519.686586][T30065] syzkaller0: entered allmulticast mode [ 519.726282][T30076] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10018'. [ 519.780062][T29950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 519.819200][T30080] syzkaller0: entered promiscuous mode [ 519.830385][T30080] syzkaller0: entered allmulticast mode [ 519.837654][T29950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 519.892486][T29950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 519.931007][T29950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.001424][T30104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10025'. [ 520.074485][T29950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.087912][T29950] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.098720][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.105821][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.241050][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.248288][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.336345][T30131] netlink: 596 bytes leftover after parsing attributes in process `syz.4.10029'. [ 520.354901][T29950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.620606][T29950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.814699][T29950] veth0_vlan: entered promiscuous mode [ 520.843753][T29950] veth1_vlan: entered promiscuous mode [ 520.894522][T29950] veth0_macvtap: entered promiscuous mode [ 520.914007][T29950] veth1_macvtap: entered promiscuous mode [ 520.956210][T29950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.977331][T29950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.995466][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.020286][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.039723][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.059496][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.085935][T30166] syzkaller0: entered promiscuous mode [ 521.091495][T30166] syzkaller0: entered allmulticast mode [ 521.118385][ T28] audit: type=1400 audit(2000000002.630:424): avc: denied { mounton } for pid=29950 comm="syz-executor" path="/root/syzkaller.mBG35Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=109835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 521.280041][T30184] syzkaller0: entered promiscuous mode [ 521.299067][T30184] syzkaller0: entered allmulticast mode [ 521.550437][T30189] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.10036'. [ 521.560704][T30189] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.10036'. [ 521.671303][T30198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10042'. [ 521.717484][T30205] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10043'. [ 521.745053][T30207] syzkaller0: entered promiscuous mode [ 521.759806][T30207] syzkaller0: entered allmulticast mode [ 521.817294][ T28] audit: type=1400 audit(2000000000.340:425): avc: denied { read } for pid=30210 comm="syz.1.10046" path="socket:[108969]" dev="sockfs" ino=108969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 521.925270][ T28] audit: type=1400 audit(2000000000.450:426): avc: denied { remount } for pid=30212 comm="syz.4.10047" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 521.925487][T30222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10051'. [ 522.195240][T30234] macsec0: entered promiscuous mode [ 522.224554][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10056'. [ 522.236213][T30234] macsec0: entered allmulticast mode [ 522.261971][T30234] veth1_macvtap: entered allmulticast mode [ 522.473140][T30242] bridge0: port 3(ip6gretap0) entered blocking state [ 522.494819][T30242] bridge0: port 3(ip6gretap0) entered disabled state [ 522.515725][T30242] ip6gretap0: entered allmulticast mode [ 522.555250][T30242] ip6gretap0: entered promiscuous mode [ 522.564593][T30242] bridge0: port 3(ip6gretap0) entered blocking state [ 522.572442][T30242] bridge0: port 3(ip6gretap0) entered forwarding state [ 522.619720][T30248] syzkaller0: entered promiscuous mode [ 522.633691][T30248] syzkaller0: entered allmulticast mode [ 524.104276][T30359] netlink: 'syz.2.10107': attribute type 3 has an invalid length. [ 524.306789][T30370] netlink: 'syz.0.10111': attribute type 1 has an invalid length. [ 524.314952][T30370] netlink: 'syz.0.10111': attribute type 2 has an invalid length. [ 525.172627][T30415] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 525.191139][T30415] syzkaller1: linktype set to 768 [ 525.383275][T30431] __nla_validate_parse: 5 callbacks suppressed [ 525.383298][T30431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10126'. [ 525.454345][ T35] IPVS: starting estimator thread 0... [ 525.552904][T30436] IPVS: using max 2160 ests per chain, 108000 per kthread [ 526.047483][T30406] Set syz1 is full, maxelem 65536 reached [ 526.320826][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10152'. [ 526.500216][T30486] netlink: 596 bytes leftover after parsing attributes in process `syz.2.10157'. [ 527.107764][ T35] IPVS: starting estimator thread 0... [ 527.202933][T30512] IPVS: using max 2256 ests per chain, 112800 per kthread [ 527.517004][T30529] siw: device registration error -23 [ 527.528257][T30529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30529 comm=syz.1.10163 [ 527.717558][T30532] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.10176'. [ 527.746392][T30532] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.10176'. [ 528.504381][T30563] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.10188'. [ 528.523069][T30563] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.10188'. [ 528.775748][T30569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10190'. [ 529.014335][T30590] netlink: 596 bytes leftover after parsing attributes in process `syz.2.10197'. [ 529.110308][T30596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10202'. [ 530.233535][T30645] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 530.266152][T30645] syzkaller1: linktype set to 768 [ 531.327267][T30664] __nla_validate_parse: 1 callbacks suppressed [ 531.327337][T30664] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.10229'. [ 531.343428][T30664] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.10229'. [ 531.369271][T30644] Set syz1 is full, maxelem 65536 reached [ 532.056517][T30706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10248'. [ 532.081390][T30702] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.10247'. [ 532.115900][T30702] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.10247'. [ 532.404646][T30720] netlink: 'syz.3.10254': attribute type 10 has an invalid length. [ 532.513731][T30720] team0: Device vxcan1 is of different type [ 533.223299][T30790] netlink: 'syz.1.10280': attribute type 10 has an invalid length. [ 533.244314][T30790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.274674][T30790] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 533.323013][T30793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.330477][T30793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.364882][T30793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.372448][T30793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.513599][T30793] bond0: (slave batadv0): Releasing backup interface [ 535.030380][T30859] loop0: detected capacity change from 0 to 1024 [ 535.053239][T30859] EXT4-fs: inline encryption not supported [ 535.072978][T30859] EXT4-fs: Ignoring removed i_version option [ 535.123309][T30859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.184066][T30868] loop1: detected capacity change from 0 to 128 [ 535.213596][T30868] ext4: Unknown parameter 'hash' [ 535.491384][T30872] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10310: Allocating blocks 497-513 which overlap fs metadata [ 535.654675][T30872] EXT4-fs (loop0): pa ffff888107e53310: logic 256, phys. 385, len 8 [ 535.662873][T30872] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 536.829465][T30904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10328'. [ 536.859720][T27675] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.940631][T30914] bridge0: port 3(ip6gretap0) entered blocking state [ 536.986155][T30914] bridge0: port 3(ip6gretap0) entered disabled state [ 537.039855][T30914] ip6gretap0: entered allmulticast mode [ 537.083654][T30914] ip6gretap0: entered promiscuous mode [ 537.131160][T30914] bridge0: port 3(ip6gretap0) entered blocking state [ 537.138151][T30914] bridge0: port 3(ip6gretap0) entered forwarding state [ 537.485559][T30932] loop1: detected capacity change from 0 to 1024 [ 537.513871][T30934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10339'. [ 537.525795][T30932] EXT4-fs: inline encryption not supported [ 537.531719][T30932] EXT4-fs: Ignoring removed i_version option [ 537.655577][T30938] loop0: detected capacity change from 0 to 128 [ 537.699186][T30938] ext4: Unknown parameter 'hash' [ 537.705790][T30932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.581279][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.877111][T30978] netlink: 'syz.1.10355': attribute type 5 has an invalid length. [ 538.968016][ T28] audit: type=1400 audit(2000000004.790:427): avc: denied { create } for pid=30974 comm="syz.3.10356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 539.681475][T31001] syz.1.10363: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 539.703075][T31001] CPU: 0 UID: 0 PID: 31001 Comm: syz.1.10363 Not tainted syzkaller #0 PREEMPT(full) [ 539.703101][T31001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 539.703193][T31001] Call Trace: [ 539.703203][T31001] [ 539.703213][T31001] __dump_stack+0x1d/0x30 [ 539.703242][T31001] dump_stack_lvl+0x95/0xd0 [ 539.703269][T31001] dump_stack+0x15/0x1b [ 539.703290][T31001] warn_alloc+0x145/0x1c0 [ 539.703447][T31001] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 539.703508][T31001] ? __tsan_memcpy+0xd7/0x3c0 [ 539.703534][T31001] ? __rcu_read_unlock+0x4e/0x70 [ 539.703572][T31001] ? avc_has_perm_noaudit+0xab/0x130 [ 539.703670][T31001] ? should_fail_ex+0x30/0x280 [ 539.703703][T31001] ? xskq_create+0x36/0xe0 [ 539.703737][T31001] vmalloc_user_noprof+0x7d/0xb0 [ 539.703804][T31001] ? xskq_create+0x80/0xe0 [ 539.703836][T31001] xskq_create+0x80/0xe0 [ 539.703872][T31001] xsk_init_queue+0x91/0xe0 [ 539.703985][T31001] xsk_setsockopt+0x477/0x640 [ 539.704021][T31001] ? __pfx_xsk_setsockopt+0x10/0x10 [ 539.704062][T31001] __sys_setsockopt+0x184/0x200 [ 539.704112][T31001] __x64_sys_setsockopt+0x64/0x80 [ 539.704221][T31001] x64_sys_call+0x2327/0x3020 [ 539.704261][T31001] do_syscall_64+0x12c/0x370 [ 539.704299][T31001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.704394][T31001] RIP: 0033:0x7fafe6d5bf79 [ 539.704412][T31001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.704437][T31001] RSP: 002b:00007fafe57af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 539.704465][T31001] RAX: ffffffffffffffda RBX: 00007fafe6fd5fa0 RCX: 00007fafe6d5bf79 [ 539.704483][T31001] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 539.704496][T31001] RBP: 00007fafe6df27e0 R08: 0000000000000004 R09: 0000000000000000 [ 539.704544][T31001] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 539.704623][T31001] R13: 00007fafe6fd6038 R14: 00007fafe6fd5fa0 R15: 00007fff39da9ab8 [ 539.704659][T31001] [ 539.704886][T31001] Mem-Info: [ 539.914453][T31001] active_anon:17507 inactive_anon:0 isolated_anon:0 [ 539.914453][T31001] active_file:15973 inactive_file:13296 isolated_file:0 [ 539.914453][T31001] unevictable:0 dirty:223 writeback:0 [ 539.914453][T31001] slab_reclaimable:3593 slab_unreclaimable:23004 [ 539.914453][T31001] mapped:32310 shmem:10229 pagetables:1323 [ 539.914453][T31001] sec_pagetables:0 bounce:0 [ 539.914453][T31001] kernel_misc_reclaimable:0 [ 539.914453][T31001] free:1759429 free_pcp:36263 free_cma:0 [ 539.960126][T31001] Node 0 active_anon:68404kB inactive_anon:0kB active_file:63892kB inactive_file:53184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129588kB dirty:892kB writeback:0kB shmem:39292kB kernel_stack:3872kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 540.078743][T31001] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 540.115380][T31001] lowmem_reserve[]: 0 2880 7858 7858 [ 540.121083][T31001] Node 0 DMA32 free:2945812kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949340kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 540.163552][T31001] lowmem_reserve[]: 0 0 4978 4978 [ 540.172173][T31001] Node 0 Normal free:4096264kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54252kB inactive_anon:0kB active_file:63892kB inactive_file:53184kB unevictable:0kB writepending:892kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:137640kB local_pcp:85692kB free_cma:0kB [ 540.209985][T31001] lowmem_reserve[]: 0 0 0 0 [ 540.214988][T31001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 540.228263][T31001] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 1*32kB (M) 4*64kB (M) 1*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2945812kB [ 540.256517][T31001] Node 0 Normal: 4935*4kB (UME) 3207*8kB (UM) 1297*16kB (UM) 909*32kB (UME) 452*64kB (UME) 224*128kB (UM) 100*256kB (UME) 56*512kB (UM) 64*1024kB (UME) 29*2048kB (UME) 923*4096kB (UM) = 4112644kB [ 540.284603][T31001] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 540.321405][T31001] 32329 total pagecache pages [ 540.333687][T31001] 0 pages in swap cache [ 540.338169][T31001] Free swap = 124996kB [ 540.342500][T31001] Total swap = 124996kB [ 540.348783][T31001] 2097051 pages RAM [ 540.355327][T31001] 0 pages HighMem/MovableOnly [ 540.371968][T31001] 81316 pages reserved [ 540.673502][T31025] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10373'. [ 540.978777][T31053] siw: device registration error -23 [ 540.988020][T31053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31053 comm=syz.0.10372 [ 541.355166][T31064] syzkaller0: entered promiscuous mode [ 541.524388][T31064] syzkaller0: entered allmulticast mode [ 541.927547][T31096] loop0: detected capacity change from 0 to 128 [ 542.153443][T31096] ext4: Unknown parameter 'hash' [ 542.436214][T31111] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 542.480328][T31111] syzkaller1: linktype set to 768 [ 543.178860][T31136] siw: device registration error -23 [ 543.185616][T31136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31136 comm=syz.4.10411 [ 543.734924][T31103] Set syz1 is full, maxelem 65536 reached [ 544.658896][T31184] loop0: detected capacity change from 0 to 128 [ 544.713107][T31184] ext4: Unknown parameter 'hash' [ 545.192007][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10448'. [ 545.826982][T31241] lo speed is unknown, defaulting to 1000 [ 545.843179][T31241] lo speed is unknown, defaulting to 1000 [ 546.448613][T31271] siw: device registration error -23 [ 547.808867][T31310] siw: device registration error -23 [ 548.413639][T31328] loop4: detected capacity change from 0 to 128 [ 548.435642][T31328] ext4: Unknown parameter 'hash' [ 549.051085][T31343] siw: device registration error -23 [ 549.804725][T31373] siw: device registration error -23 [ 550.300037][T31400] nr0: port 1(hsr0) entered blocking state [ 550.317539][T31400] nr0: port 1(hsr0) entered disabled state [ 550.332834][T31400] hsr0: entered allmulticast mode [ 550.344656][T31400] hsr_slave_0: entered allmulticast mode [ 550.359383][T31400] hsr_slave_1: entered allmulticast mode [ 550.379947][T31400] hsr0: entered promiscuous mode [ 551.432063][T31429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10535'. [ 551.643536][T31441] nr0: port 1(hsr0) entered blocking state [ 551.670996][T31441] nr0: port 1(hsr0) entered disabled state [ 551.697294][T31441] hsr0: entered allmulticast mode [ 551.722836][T31441] hsr_slave_0: entered allmulticast mode [ 551.738064][T31441] hsr_slave_1: entered allmulticast mode [ 551.763432][T31441] hsr0: entered promiscuous mode [ 551.930713][T31463] netlink: 'syz.0.10551': attribute type 29 has an invalid length. [ 551.963387][T31463] netlink: 'syz.0.10551': attribute type 29 has an invalid length. [ 551.996209][T31463] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10551'. [ 552.030925][T31463] unsupported nla_type 58 [ 554.143126][T31549] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 554.149214][T31549] syzkaller1: linktype set to 768 [ 554.302299][T31555] loop2: detected capacity change from 0 to 1024 [ 554.340868][T31555] EXT4-fs: inline encryption not supported [ 554.375822][T31555] EXT4-fs: Ignoring removed i_version option [ 554.523695][T31555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.046252][T31540] Set syz1 is full, maxelem 65536 reached [ 555.155426][T31582] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.10593: Allocating blocks 497-513 which overlap fs metadata [ 555.372250][T31582] EXT4-fs (loop2): pa ffff888107e53230: logic 256, phys. 385, len 8 [ 555.380553][T31582] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 555.719581][T31607] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 555.739181][T31607] syzkaller1: linktype set to 768 [ 555.909314][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.002679][T31624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10618'. [ 556.607615][T31640] loop1: detected capacity change from 0 to 1024 [ 556.629882][T31606] Set syz1 is full, maxelem 65536 reached [ 556.655797][T31640] EXT4-fs: inline encryption not supported [ 556.662455][T31640] EXT4-fs: Ignoring removed i_version option [ 556.746748][T31640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.893832][T31667] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10638'. [ 556.924575][T31667] netlink: 'syz.3.10638': attribute type 4 has an invalid length. [ 556.932502][T31667] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10638'. [ 556.966777][T31667] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 556.990897][T31662] siw: device registration error -23 [ 557.179033][T31685] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10626: Allocating blocks 497-513 which overlap fs metadata [ 557.193340][T31685] EXT4-fs (loop1): pa ffff888107e533f0: logic 256, phys. 385, len 8 [ 557.201390][T31685] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 557.339917][T31697] siw: device registration error -23 [ 558.013748][T31758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10680'. [ 558.023432][T31758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10680'. [ 558.800452][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.877902][T31814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10705'. [ 559.974208][T31819] netlink: 'syz.1.10703': attribute type 10 has an invalid length. [ 559.982161][T31819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10703'. [ 560.707041][T31822] nr0: port 1(hsr0) entered blocking state [ 560.713215][T31822] nr0: port 1(hsr0) entered disabled state [ 560.719290][T31822] hsr0: entered allmulticast mode [ 560.730343][T31822] hsr_slave_0: entered allmulticast mode [ 560.736780][T31822] hsr_slave_1: entered allmulticast mode [ 560.743269][T31822] hsr0: entered promiscuous mode [ 560.954985][T31841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10718'. [ 561.115142][T31856] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 561.148602][T31856] syzkaller1: linktype set to 768 [ 561.390897][T31871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10728'. [ 561.530178][T31847] Set syz1 is full, maxelem 65536 reached [ 561.679913][T31880] siw: device registration error -23 [ 561.688196][T31880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31880 comm=syz.0.10732 [ 561.794827][T31887] netlink: 'syz.0.10735': attribute type 29 has an invalid length. [ 561.823336][T31887] netlink: 'syz.0.10735': attribute type 29 has an invalid length. [ 561.845785][T31891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10736'. [ 561.855456][T31887] netlink: 596 bytes leftover after parsing attributes in process `syz.0.10735'. [ 561.977103][T31903] __nla_validate_parse: 1 callbacks suppressed [ 561.977119][T31903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10742'. [ 562.193898][T31920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10750'. [ 562.203881][T31920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10750'. [ 562.390143][T31927] lo speed is unknown, defaulting to 1000 [ 562.396650][T31927] lo speed is unknown, defaulting to 1000 [ 562.493396][T31935] netlink: 'syz.3.10756': attribute type 29 has an invalid length. [ 562.502267][T31935] netlink: 'syz.3.10756': attribute type 29 has an invalid length. [ 562.510930][T31935] netlink: 596 bytes leftover after parsing attributes in process `syz.3.10756'. [ 562.834171][T31958] netlink: 'syz.2.10767': attribute type 29 has an invalid length. [ 562.853241][T31958] netlink: 'syz.2.10767': attribute type 29 has an invalid length. [ 562.876637][T31958] netlink: 596 bytes leftover after parsing attributes in process `syz.2.10767'. [ 562.898291][T31962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10770'. [ 562.923854][T31964] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10768'. [ 563.013834][T31975] netlink: 400 bytes leftover after parsing attributes in process `syz.4.10775'. [ 563.946264][T32016] netlink: 4556 bytes leftover after parsing attributes in process `syz.2.10791'. [ 564.121701][T32034] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10800'. [ 565.274493][T32110] sch_tbf: burst 43 is lower than device veth0_to_bridge mtu (1514) ! [ 565.507723][T32132] loop1: detected capacity change from 0 to 1024 [ 565.544530][T32132] EXT4-fs: inline encryption not supported [ 565.604163][T32132] EXT4-fs: Ignoring removed i_version option [ 565.643808][T32132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.754590][T32146] netlink: 'syz.0.10851': attribute type 29 has an invalid length. [ 565.775992][T32146] netlink: 'syz.0.10851': attribute type 29 has an invalid length. [ 566.038660][T32164] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.10847: Allocating blocks 497-513 which overlap fs metadata [ 566.213035][T32164] EXT4-fs (loop1): pa ffff888107e533f0: logic 256, phys. 385, len 8 [ 566.221160][T32164] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 568.511665][T32252] __nla_validate_parse: 7 callbacks suppressed [ 568.511692][T32252] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.10899'. [ 569.144911][T32272] netlink: 'syz.2.10908': attribute type 13 has an invalid length. [ 572.227223][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.404541][T32298] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 572.418921][T32298] syzkaller1: linktype set to 768 [ 572.481474][T32298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10919'. [ 572.608318][T32316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10926'. [ 572.993248][ T28] audit: type=1400 audit(2000000038.780:428): avc: denied { create } for pid=32324 comm="syz.2.10930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 573.427193][ T28] audit: type=1400 audit(2000000039.250:429): avc: denied { remount } for pid=32352 comm="syz.0.10942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 573.471950][T32353] netlink: 488 bytes leftover after parsing attributes in process `syz.2.10941'. [ 573.482724][T32349] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 573.488706][T32349] syzkaller1: linktype set to 768 [ 573.630924][ T28] audit: type=1400 audit(2000000039.420:430): avc: denied { unmount } for pid=27675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 573.670471][T32360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10937'. [ 574.154343][ T28] audit: type=1400 audit(2000000039.630:431): avc: denied { unmount } for pid=27675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 574.240483][ T28] audit: type=1400 audit(2000000040.060:432): avc: denied { unmount } for pid=27675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 574.263614][ T28] audit: type=1400 audit(2000000040.090:433): avc: denied { unmount } for pid=27675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 574.425620][T32378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10951'. [ 574.489976][T32383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10952'. [ 574.646269][T32342] Set syz1 is full, maxelem 65536 reached [ 575.064368][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10964'. [ 575.369052][T32434] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10977'. [ 575.604607][T32452] netlink: 'syz.4.10984': attribute type 29 has an invalid length. [ 575.614282][T32451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10985'. [ 575.651003][T32452] netlink: 'syz.4.10984': attribute type 29 has an invalid length. [ 575.660391][T32448] netlink: 1160 bytes leftover after parsing attributes in process `syz.2.10983'. [ 575.690585][T32452] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10984'. [ 575.827768][T32462] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10988'. [ 576.007470][T32471] loop2: detected capacity change from 0 to 512 [ 576.064129][T32471] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 576.105079][T32471] EXT4-fs (loop2): 1 truncate cleaned up [ 576.117762][T32471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.603764][T32494] siw: device registration error -23 [ 576.993716][ T28] audit: type=1400 audit(2000000042.810:434): avc: denied { setopt } for pid=32508 comm="syz.1.11009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 577.295945][ T28] audit: type=1400 audit(2000000042.940:435): avc: denied { read } for pid=32505 comm="syz.4.11008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 577.410777][ T28] audit: type=1400 audit(2000000043.170:436): avc: denied { write } for pid=32505 comm="syz.4.11008" name="file0" dev="tmpfs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 577.450921][T32512] infiniband !yz!: set active [ 577.455816][T32512] infiniband !yz!: added team_slave_0 [ 577.488793][T32512] RDS/IB: !yz!: added [ 577.492961][T32512] smc: adding ib device !yz! with port count 1 [ 577.506730][T32512] smc: ib device !yz! port 1 has no pnetid [ 577.544965][ T28] audit: type=1400 audit(2000000043.180:437): avc: denied { ioctl } for pid=32505 comm="syz.4.11008" path="/390/file0" dev="tmpfs" ino=2026 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 577.675551][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.717383][T32524] loop3: detected capacity change from 0 to 512 [ 577.754143][T32524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 577.883144][T32524] EXT4-fs (loop3): 1 truncate cleaned up [ 577.889291][T32524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.052341][T32549] netlink: 'syz.2.11014': attribute type 10 has an invalid length. [ 578.072639][T32549] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 578.091982][T32543] loop4: detected capacity change from 0 to 512 [ 578.111147][T32543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 578.141437][T32550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.172344][T32549] bond_slave_0: entered promiscuous mode [ 578.178095][T32549] bond_slave_1: entered promiscuous mode [ 578.183793][T32549] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 578.191128][T32549] syz_tun: entered promiscuous mode [ 578.202684][T32549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 578.203225][T32543] EXT4-fs (loop4): 1 truncate cleaned up [ 578.216193][T32543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.233631][T32549] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 578.243385][T32549] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 578.264514][T32549] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 578.543867][T32560] netlink: 'syz.1.11016': attribute type 10 has an invalid length. [ 578.606340][T32560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 578.691464][T32565] loop2: detected capacity change from 0 to 512 [ 578.698802][T32565] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 578.722699][T32560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.744907][T32524] mmap: syz.3.11010 (32524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 578.784235][T32567] bond_slave_0: entered promiscuous mode [ 578.790028][T32567] bond_slave_1: entered promiscuous mode [ 578.795750][T32567] syz_tun: entered promiscuous mode [ 578.813361][T32565] EXT4-fs (loop2): 1 truncate cleaned up [ 578.813479][T32567] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 578.820039][T32565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.852894][T32567] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 578.877100][T32567] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 579.178086][T32573] lo speed is unknown, defaulting to 1000 [ 579.186225][T32573] lo speed is unknown, defaulting to 1000 [ 579.347804][ T28] audit: type=1400 audit(2000000045.160:438): avc: denied { append } for pid=32523 comm="syz.3.11010" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 579.373432][T32556] Process accounting resumed [ 579.401163][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.613943][T32583] loop1: detected capacity change from 0 to 512 [ 579.628610][T32581] loop3: detected capacity change from 0 to 1024 [ 579.637998][T32583] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 579.705466][T32581] EXT4-fs: inline encryption not supported [ 579.755483][T32581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.773082][T32583] EXT4-fs (loop1): 1 truncate cleaned up [ 579.779275][T32583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.878084][ T28] audit: type=1400 audit(2000000045.700:439): avc: denied { setattr } for pid=32577 comm="syz.3.11020" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 579.966308][T32541] Process accounting resumed [ 580.244720][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.321214][T32595] loop4: detected capacity change from 0 to 512 [ 580.366855][T32595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 580.423383][T32595] EXT4-fs (loop4): 1 truncate cleaned up [ 580.443407][T32595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.642856][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.792886][T32604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11024'. [ 580.875279][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.174401][T32582] Process accounting resumed [ 581.190808][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.589960][T32594] Process accounting resumed [ 581.623866][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.844615][T32627] netlink: 'syz.2.11032': attribute type 29 has an invalid length. [ 581.907734][T32627] netlink: 'syz.2.11032': attribute type 29 has an invalid length. [ 581.951354][T32627] netlink: 500 bytes leftover after parsing attributes in process `syz.2.11032'. [ 582.879312][T32646] lo speed is unknown, defaulting to 1000 [ 582.927745][T32646] lo speed is unknown, defaulting to 1000 [ 583.543635][T32659] lo speed is unknown, defaulting to 1000 [ 583.549841][T32659] lo speed is unknown, defaulting to 1000 [ 583.615398][T32665] loop2: detected capacity change from 0 to 512 [ 583.630652][T32665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 583.660000][T32665] EXT4-fs (loop2): 1 truncate cleaned up [ 583.687799][T32673] netlink: 'syz.1.11045': attribute type 29 has an invalid length. [ 583.713571][T32673] netlink: 'syz.1.11045': attribute type 29 has an invalid length. [ 583.722306][T32673] netlink: 500 bytes leftover after parsing attributes in process `syz.1.11045'. [ 583.732406][T32665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.336823][T32697] loop3: detected capacity change from 0 to 512 [ 584.401506][T32697] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 584.541510][T32697] EXT4-fs (loop3): 1 truncate cleaned up [ 584.561673][T32697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.255993][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.042865][T32732] loop4: detected capacity change from 0 to 512 [ 586.059643][T32732] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 586.108000][T32732] EXT4-fs (loop4): 1 truncate cleaned up [ 586.125695][T32736] loop1: detected capacity change from 0 to 512 [ 586.136242][T32732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.204438][T32743] netlink: 'syz.3.11068': attribute type 10 has an invalid length. [ 586.229924][T32736] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 586.253157][T32736] EXT4-fs (loop1): 1 truncate cleaned up [ 586.273251][T32736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.307364][T32743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.395347][T32743] bond1: (slave macvlan2): Error -22 calling dev_set_mtu [ 586.545301][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.581791][T32750] loop3: detected capacity change from 0 to 512 [ 586.592390][T32750] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 586.651409][T32750] EXT4-fs (loop3): 1 truncate cleaned up [ 586.657713][T32750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.862578][T32766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11069'. [ 587.829521][T32767] Process accounting resumed [ 587.862969][ T309] loop2: detected capacity change from 0 to 512 [ 587.870296][ T309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 587.882886][ T309] EXT4-fs (loop2): 1 truncate cleaned up [ 587.889196][ T309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.923996][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.221966][T32749] Process accounting resumed [ 588.359792][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.373019][ T326] loop4: detected capacity change from 0 to 1024 [ 588.380069][ T326] EXT4-fs: inline encryption not supported [ 588.392910][ T326] EXT4-fs: Ignoring removed i_version option [ 588.448623][ T326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.643444][ T335] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.11074: Allocating blocks 497-513 which overlap fs metadata [ 588.657788][ T335] EXT4-fs (loop4): pa ffff888107e53230: logic 256, phys. 385, len 8 [ 588.665856][ T335] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 588.732850][ T338] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 588.753826][ T338] syzkaller1: linktype set to 768 [ 588.822676][ T338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11078'. [ 588.832961][T32735] Process accounting resumed [ 588.907167][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.060716][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.083596][ T354] loop1: detected capacity change from 0 to 512 [ 589.099207][ T354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 589.115635][ T354] EXT4-fs (loop1): 1 truncate cleaned up [ 589.121871][ T354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.145591][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.238813][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.289267][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.290205][ T347] lo speed is unknown, defaulting to 1000 [ 589.323125][ T364] loop4: detected capacity change from 0 to 512 [ 589.331489][ T347] lo speed is unknown, defaulting to 1000 [ 589.361005][ T364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.393902][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.398713][ T364] ext4 filesystem being mounted at /406/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.470629][ T337] Set syz1 is full, maxelem 65536 reached [ 589.491464][ T364] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.11083: corrupted inode contents [ 589.513569][ T364] EXT4-fs (loop4): Remounting filesystem read-only [ 589.616030][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.633304][ T3789] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 589.633562][ T12] ip6gretap0: left allmulticast mode [ 589.663242][ T12] ip6gretap0: left promiscuous mode [ 589.674242][ T12] bridge0: port 3(ip6gretap0) entered disabled state [ 589.690306][ T379] loop4: detected capacity change from 0 to 128 [ 589.701174][ T382] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 589.732457][ T12] bridge_slave_1: left allmulticast mode [ 589.748431][ T12] bridge_slave_1: left promiscuous mode [ 589.758967][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.791525][ T12] bridge_slave_0: left allmulticast mode [ 589.797422][ T12] bridge_slave_0: left promiscuous mode [ 589.808707][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.831901][ T12] hsr0: left allmulticast mode [ 589.840174][ T12] hsr_slave_0: left allmulticast mode [ 589.848066][ T12] hsr_slave_1: left allmulticast mode [ 589.856907][ T28] audit: type=1400 audit(2000000055.680:440): avc: denied { watch watch_reads } for pid=378 comm="syz.4.11085" path="/407/file0/file0" dev="loop4" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 589.898150][ T12] hsr0: left promiscuous mode [ 589.903885][ T12] nr0: port 1(hsr0) entered disabled state [ 589.999107][ T307] Process accounting resumed [ 590.032277][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.055492][ T400] loop2: detected capacity change from 0 to 512 [ 590.088763][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.099505][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.101058][ T400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.121806][ T12] bond0 (unregistering): Released all slaves [ 590.131381][ T400] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.199750][ T400] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.11086: corrupted inode contents [ 590.213081][ T400] EXT4-fs (loop2): Remounting filesystem read-only [ 590.263279][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.342809][ T36] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 590.369837][ T379] bridge0: port 3(ip6gretap0) entered disabled state [ 590.378284][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.385709][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.749474][ T354] Process accounting resumed [ 590.898682][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.259584][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.269797][ T379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.327875][ T1778] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.337163][ T1778] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.346629][ T1778] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.371657][ T1778] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.393903][ T416] lo speed is unknown, defaulting to 1000 [ 591.438628][ T12] hsr_slave_0: left promiscuous mode [ 591.455880][ T12] hsr_slave_1: left promiscuous mode [ 591.469383][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.483920][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.501785][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.524321][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.566806][ T12] veth1_macvtap: left promiscuous mode [ 591.578909][ T12] veth0_macvtap: left promiscuous mode [ 591.592844][ T12] veth1_vlan: left promiscuous mode [ 591.604772][ T12] veth0_vlan: left promiscuous mode [ 591.699418][ T12] team0 (unregistering): Port device team_slave_1 removed [ 591.711807][ T12] team0 (unregistering): Port device team_slave_0 removed [ 591.758106][ T456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11093'. [ 591.773116][ T416] lo speed is unknown, defaulting to 1000 [ 591.782599][ T347] chnl_net:caif_netlink_parms(): no params data found [ 591.845431][ T453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.854255][ T455] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 591.860434][ T455] syzkaller1: linktype set to 768 [ 591.911501][ T446] Set syz1 is full, maxelem 65536 reached [ 591.976608][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.995225][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.010847][ T347] bridge_slave_0: entered allmulticast mode [ 592.019973][ T476] loop2: detected capacity change from 0 to 512 [ 592.027051][ T347] bridge_slave_0: entered promiscuous mode [ 592.053228][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.061364][ T476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 592.072193][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.080074][ T347] bridge_slave_1: entered allmulticast mode [ 592.094909][ T347] bridge_slave_1: entered promiscuous mode [ 592.101260][ T476] EXT4-fs (loop2): 1 truncate cleaned up [ 592.107616][ T476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.152145][ T489] loop4: detected capacity change from 0 to 512 [ 592.158809][ T347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.190709][ T489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.203541][ T489] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 592.224575][ T347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.236060][ T12] IPVS: stop unused estimator thread 0... [ 592.301023][ T489] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.11101: corrupted inode contents [ 592.318442][ T489] EXT4-fs (loop4): Remounting filesystem read-only [ 592.325313][ T347] team0: Port device team_slave_0 added [ 592.349378][ T347] team0: Port device team_slave_1 added [ 592.392317][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.403730][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 592.418971][ T347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.443687][ T517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11106'. [ 592.443714][ T347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.482232][ T347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.501683][ T521] loop4: detected capacity change from 0 to 128 [ 592.514131][ T521] ext4: Unknown parameter 'hash' [ 592.622880][ T529] loop1: detected capacity change from 0 to 512 [ 592.643240][ T347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.649109][ T529] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 592.660397][ T347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.701899][ T529] EXT4-fs (loop1): 1 truncate cleaned up [ 592.708251][ T529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.723927][ T347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.768957][ T347] hsr_slave_0: entered promiscuous mode [ 592.777680][ T347] hsr_slave_1: entered promiscuous mode [ 592.784010][ T347] debugfs: 'hsr0' already exists in 'hsr' [ 592.797850][ T347] Cannot create hsr debugfs directory [ 592.996295][ T347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.025740][ T347] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.073839][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.080987][ T1691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.109010][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.116144][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.159470][ T347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.270127][ T347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.415927][ T586] loop4: detected capacity change from 0 to 512 [ 593.460655][ T586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 593.516265][ T347] veth0_vlan: entered promiscuous mode [ 593.546897][ T586] EXT4-fs (loop4): 1 truncate cleaned up [ 593.553163][ T586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.572082][ T347] veth1_vlan: entered promiscuous mode [ 593.609630][ T347] veth0_macvtap: entered promiscuous mode [ 593.647272][ T347] veth1_macvtap: entered promiscuous mode [ 593.658457][ T347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.670363][ T347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.710491][ T603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11114'. [ 593.960627][ T562] Process accounting resumed [ 594.060058][ T620] netlink: 'syz.5.11120': attribute type 10 has an invalid length. [ 594.070852][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.083813][ T620] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 594.159976][ T620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.334396][ T629] loop2: detected capacity change from 0 to 512 [ 594.350918][ T631] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 594.383785][ T629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 594.404419][ T634] loop5: detected capacity change from 0 to 1024 [ 594.411239][ T634] EXT4-fs: inline encryption not supported [ 594.450709][ T631] syzkaller1: linktype set to 768 [ 594.467086][ T629] EXT4-fs (loop2): 1 truncate cleaned up [ 594.477128][ T629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.489480][ T634] EXT4-fs: Ignoring removed i_version option [ 594.513539][ T634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.563128][ T636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11122'. [ 594.672601][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.712600][ T642] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.11124: Allocating blocks 497-513 which overlap fs metadata [ 594.728758][ T642] EXT4-fs (loop5): pa ffff888107e1d460: logic 256, phys. 385, len 8 [ 594.736939][ T642] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 594.996959][ T627] Set syz1 is full, maxelem 65536 reached [ 595.350058][ T347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.371131][ T663] loop1: detected capacity change from 0 to 512 [ 595.638943][ T663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 595.866855][ T663] EXT4-fs (loop1): 1 truncate cleaned up [ 595.883294][ T663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.992506][ T668] Process accounting resumed [ 596.029653][T26989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.103587][ T675] netlink: 'syz.5.11135': attribute type 10 has an invalid length. [ 596.162482][ T679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11136'. [ 596.174475][ T675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.355280][ T683] loop3: detected capacity change from 0 to 512 [ 596.372594][ T683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 596.417771][ T683] EXT4-fs (loop3): 1 truncate cleaned up [ 596.448103][ T683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.649483][ T696] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 596.655593][ T696] syzkaller1: linktype set to 768 [ 596.705556][ T696] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11141'. [ 596.924093][ T628] Process accounting resumed [ 596.963142][T26648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.265571][ T713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11147'. [ 597.348312][T27219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.278507][ T695] Set syz1 is full, maxelem 65536 reached [ 598.337857][ T754] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.835476][ T770] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 599.349579][ T792] netlink: 'syz.2.11170': attribute type 10 has an invalid length. [ 599.471085][ T792] 8021q: adding VLAN 0 to HW filter on device bond3 [ 599.528818][ T800] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 599.602729][ T804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.661955][ T808] loop2: detected capacity change from 0 to 128 [ 599.694687][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.757450][ T812] loop5: detected capacity change from 0 to 512 [ 599.772221][ T817] loop1: detected capacity change from 0 to 1024 [ 599.801545][ T812] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 599.825466][ T817] EXT4-fs: inline encryption not supported [ 599.831992][T25098] ================================================================== [ 599.840138][T25098] BUG: KCSAN: data-race in set_nlink / set_nlink [ 599.846526][T25098] [ 599.848883][T25098] read to 0xffff88811b1ffd28 of 4 bytes by task 2997 on cpu 0: [ 599.856715][T25098] set_nlink+0x29/0xb0 [ 599.860839][T25098] kernfs_iop_permission+0x1e2/0x220 [ 599.866187][T25098] inode_permission+0x31f/0x3b0 [ 599.871083][T25098] link_path_walk+0x779/0xe30 [ 599.875798][T25098] path_lookupat+0x8c/0x500 [ 599.879424][ T817] EXT4-fs: Ignoring removed i_version option [ 599.880333][T25098] filename_lookup+0x190/0x390 [ 599.891113][T25098] vfs_statx+0x96/0x170 [ 599.891484][ T812] EXT4-fs (loop5): 1 truncate cleaned up [ 599.895329][T25098] vfs_fstatat+0x118/0x170 [ 599.895369][T25098] __se_sys_newfstatat+0x55/0x3e0 [ 599.910545][T25098] __x64_sys_newfstatat+0x55/0x70 [ 599.915714][T25098] x64_sys_call+0x2c64/0x3020 [ 599.920438][T25098] do_syscall_64+0x12c/0x370 [ 599.925071][T25098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.931008][T25098] [ 599.933371][T25098] write to 0xffff88811b1ffd28 of 4 bytes by task 25098 on cpu 1: [ 599.941124][T25098] set_nlink+0x99/0xb0 [ 599.945240][T25098] kernfs_iop_permission+0x1e2/0x220 [ 599.950578][T25098] inode_permission+0x31f/0x3b0 [ 599.955466][T25098] link_path_walk+0x779/0xe30 [ 599.960180][T25098] path_openat+0x1c6/0x2050 [ 599.964748][T25098] do_file_open+0x16c/0x290 [ 599.969382][T25098] do_sys_openat2+0x94/0x130 [ 599.974180][T25098] __x64_sys_openat+0xf2/0x120 [ 599.978976][T25098] x64_sys_call+0x1e39/0x3020 [ 599.983701][T25098] do_syscall_64+0x12c/0x370 [ 599.988344][T25098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.994276][T25098] [ 599.996626][T25098] value changed: 0x00000008 -> 0x00000009 [ 600.002378][T25098] [ 600.004730][T25098] Reported by Kernel Concurrency Sanitizer on: [ 600.010900][T25098] CPU: 1 UID: 0 PID: 25098 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 600.019870][T25098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 600.030035][T25098] ================================================================== [ 600.301657][ T812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.324049][ T820] loop4: detected capacity change from 0 to 128 [ 600.334364][ T817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.380047][ T808] bridge0: port 3(ip6gretap0) entered disabled state [ 600.423454][ T808] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.430708][ T808] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.007430][T29950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.047961][ T808] bond_slave_0: left promiscuous mode [ 601.060708][ T808] bond_slave_1: left promiscuous mode [ 601.066542][ T808] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 601.162083][ T808] vxcan1: left promiscuous mode [ 601.552074][ T808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.594648][ T808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.662384][ T1691] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.678786][ T1691] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.698470][ T1691] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.721212][ T1691] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.774849][ T810] Process accounting resumed [ 601.817813][ T347] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.