last executing test programs: 2.98165035s ago: executing program 4 (id=2445): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) memfd_create(&(0x7f0000000180)='\xb3\xbf@\x9c\xfb\xb2Ml\xd2\x1aL\xab\xa1a>\x03\xf5\x04\xf4qT\x13\x1d\xc9\xd6\x13\x9f!\x97\x8d\x04\x9eA\x86-\x83B\xc4\':D\xdc\xab\xf0\xe6\xb7\xed\xcc\x85\x03\x1a1\x05m)\xf7\x87\x898\xa9\xc5\x91\xcfJ\vvj\xe0P\x8erAx\xf4\x9a1!6@\xe0G*[\x81Z\xe16\xe0H\xb1b\x13\xe7\f\xf5\xec\xa2\xbd\x05\xd5\xba\xdd\xf5\xc5ncl\xfe\x1em\xd0A\x89\xd6\x022\xd7\xf1=\xf6`\x8c\x90\x80\x9b\x91\xc3d(_f\x99\xe9\xb4\xd4X\x84G;x\xe8v\x8d\x01\xb9\xb6\x99\xa8j\xfb\xbc\x16\xfa\xefc\xad\xb8\xa0t\x90\x94_\xb1\x96\x05\xadB\x93\xea$|\xf1\xa9\x8c\xfa\xc9\xd7=([\xe5\x84D\xe8@.\x06\xf7O\x9f\xd4z\xb0\xa4\xacJ\xda', 0x4) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1848, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) 2.674725502s ago: executing program 3 (id=2465): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.612298276s ago: executing program 3 (id=2469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000040)}, 0x27) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x7af2, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001880)=[{&(0x7f0000002e00)=""/4096, 0x1000}], 0x1) 2.594781177s ago: executing program 3 (id=2471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 2.127209271s ago: executing program 4 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x9, 0x7, 0x38c3, 0xffffffffffff7fff, 0xffffffff, 0x493, 0x4, 0x7, 0x4}) socket$nl_route(0x10, 0x3, 0x0) 2.059819265s ago: executing program 4 (id=2506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 2.024936638s ago: executing program 4 (id=2508): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 2.000103789s ago: executing program 4 (id=2509): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xbc}}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) io_uring_enter(0xffffffffffffffff, 0x291c, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a004000000000000000000000000000300", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0ffffffff3fe100"}) 1.785326695s ago: executing program 4 (id=2516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) 1.102786643s ago: executing program 2 (id=2527): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@barrier}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x577, &(0x7f00000014c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setreuid(0x0, 0xee01) setfsuid(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(0x0, r2, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x6611, 0x0) 1.082788804s ago: executing program 2 (id=2528): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$eJzs3ctrXFUYAPDvTl5NGk0EQesqIGigdGJrbBUUKi5EsFDQtW1IpqFmkimZSWlCwRYR3AgqLgTddO2j7sSdj63+Fy6kpWpbrLqQkTuPdtLMTDOkM1PI7wc3c869d+ac7577OJNzuRPArjWV/slE7IuID5OIidr8JCKGKqnBiKPV9W5dPz+fTkmUy2/8kVTWuXn9/Hw0vCe1t5Z5PCJ+fC9if2ZrucX1jaW5fD63WsvPlJbPzBTXNw6cXp5bzC3mVg4fnJ09dOS5I4fvX6x//bIxfvWjV5/++ui/7z52+YOfkjga47VljXHcL1MxVdsmQ+km3OSV+11YnyVtlr3Uw3rQmfTQHKge5bEvJmKgkmphtJc1AwC65Z2IKAMAu0zi+g8Au0xETEZt/Ks+9ft/Er107eWI2FONvz6+WV0yWBuz21MZBx27mWwaGUnqG26HpiLi82/f+jKdokvjkADNXLgYEScnp7ae/5Mt9yx06pl2C8sjlZepu2Y7/0HvfJ/2f55v1v/L3O7/RJP+T3r0TpXb3fWzPfc+/jNXdlxIG2n/78WGe9tuNcRfMzlQyz1U6fMNJadO53Ppue3hiJiOoZE0f7CyavPtMX3jvxutym/s//358dtfpOVvvgMnc2VwZPN7FuZKczsKusG1ixFPDDaLP7nd/kmL/u/xbZbx2gvvf9ZqWRp/Gnd9SstPX3cUVAfKlyKeatr+d9oyaXt/4kxld5ip7xRNfPPrp2Otym9s/3RKy69/F+iFtP3H2sc/mTTer1nsvIyfL0380GrZveNvvv8PJ29W0sO1eefmSqXVgxHDyetb5x+68956vr5+Gv/0k82P/3b7f/qd8OQ24x+8+vtXtY9qGn/Fhf61/0JH7d8mUb8e3LXo8q2lgVblb6/9Zyup6dqc7Zz/7lHTHezNAAAAAAAAAAAAAAAAAAAAAAAAANC5TESMR5LJ3k5nMtls9Te8H42xTL5QLO0/VVhbWYjx76rPP83UH3U50fA81PJA9Xn49fyh2Jx/NiIeiYhPRkYr+ex8Ib/Q7+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGZvi9//T/020u/aAQBds6ffFQAAes71HwB2n86u/6NdqwcA0Dsdf/8vJ92pCADQM9u+/p/sbj0AgN4x/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXHT92LJ3Kf18/P5/mF86ury0Vzh5YyBWXsstr89n5wuqZ7GKhsJjPZecLyy0/6EL1JV8onJmNlbVzM6VcsTRTXN84sVxYWymdOL08t5g7kRvqWWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsH3F9Y2luXw+tyrRNjH6YFSjh4nkn3brDEb/a7gbEsN9K73xLDHavxMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPu/wAAAP//wJMmNg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 1.048477776s ago: executing program 2 (id=2531): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0xc, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001500000020000180140002006e"], 0x34}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 1.031933308s ago: executing program 0 (id=2532): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8005) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 994.107331ms ago: executing program 2 (id=2533): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0xfffb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) 781.706706ms ago: executing program 0 (id=2541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\x00\x00\x00\x00\x00\x00P\x00', "6b6aab000000440000000000000800", "00000200", "84738b2f785214b8"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close(0x3) 740.179608ms ago: executing program 0 (id=2543): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000040)) 639.316276ms ago: executing program 0 (id=2544): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 611.280358ms ago: executing program 0 (id=2545): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x14, 0xffffffff, 0x800085}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) 567.923001ms ago: executing program 1 (id=2546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 547.699022ms ago: executing program 1 (id=2547): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 545.812752ms ago: executing program 0 (id=2548): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x20005}, 0x48) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800e8", 0xf, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 518.096834ms ago: executing program 1 (id=2549): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_gettime(0xb00, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x420}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x48, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) add_key$keyring(&(0x7f0000004600), &(0x7f0000004640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 464.593428ms ago: executing program 1 (id=2550): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x28, 0x3a, 0xff, @private1, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private2}}}}}}, 0x0) 432.81468ms ago: executing program 1 (id=2551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 381.564154ms ago: executing program 1 (id=2552): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1fc}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(r1, 0xa3b, 0x400, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x624a, &(0x7f0000000280)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r5) 309.735199ms ago: executing program 3 (id=2553): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="8000000010000304000000000004000000000300", @ANYRES32=0x0, @ANYBLOB="032e000000000000500012800e0001006970366772657461700000003c000280060011004e22000014000700feffffff0000000000000000000000010400120008000c0003000000060018000000000008001500ece203", @ANYRES8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x80}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa0bf83d7d46f2cbb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffff00}) close_range(r3, 0xffffffffffffffff, 0x0) 130.647642ms ago: executing program 3 (id=2554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)={0x140, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x39, 0x1, "6163905c706e0100c7c6463bd28454512ce742ffc45e1832957d11382075b48b7c3f2d02d9ba32de055eddbe5dff060ecd21752eff"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "357e43689dab46a12f40b06233a77f30af93f1027cbbb34303021597d3bf5b2b24ab22caa57cee352ec67fafc9ccf96565e9454e0e5cc1d52b1d948bbd659f4582e724dc5474e4d1f235f7fdab0410507349d60f1c64b05867ab4870dd3083bf5185c2c41bc36f53d8e8c614a22a59e73e21bcf6ca3ad69f2c8e0b4852dd3df688859ecf991cc4d54a9603cc15c6b168e239c72b956ccf893955679d209c07a0a98ce874571655d91987fee8f351f5865240a8b8926ab0fae955e8ecf1442d51d08af833c535193c5797ef9d6d0f1e8a985fc10a183674f50ebdc1cb02d326175b33445df043f5e425"}]}, 0x140}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000002c0), 0x64) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000740)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x78) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) 120.936492ms ago: executing program 2 (id=2555): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x5, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) 75.362415ms ago: executing program 2 (id=2556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) close(r3) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 0s ago: executing program 3 (id=2557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="080000000000000000000000000000001811bb00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): deactivated: batadv_slave_0 [ 137.235566][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.245537][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.252982][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.261954][ T40] veth1_macvtap: left promiscuous mode [ 137.267467][ T40] veth0_macvtap: left promiscuous mode [ 137.273012][ T40] veth1_vlan: left promiscuous mode [ 137.278266][ T40] veth0_vlan: left promiscuous mode [ 137.350655][ T40] team0 (unregistering): Port device team_slave_1 removed [ 137.360315][ T40] team0 (unregistering): Port device team_slave_0 removed [ 137.398314][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.407612][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.414722][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.434600][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.441699][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.462387][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.472973][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.482829][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.493353][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.503187][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.513698][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.523549][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.534003][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.543868][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.554306][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.567309][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.576461][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1746'. [ 137.606894][ T9010] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.615752][ T9010] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.624601][ T9010] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.633454][ T9010] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 137.645402][ T9010] geneve2: entered allmulticast mode [ 137.660740][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.671206][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.681134][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.691635][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.701457][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.711877][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.721814][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.732248][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.742086][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.752523][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.776284][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.798797][ T9013] pim6reg1: entered promiscuous mode [ 137.804267][ T9013] pim6reg1: entered allmulticast mode [ 137.815334][ T8889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.824094][ T8889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.832849][ T8889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.841548][ T8889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.888855][ T40] IPVS: stop unused estimator thread 0... [ 137.943343][ T9024] netlink: 1304 bytes leftover after parsing attributes in process `syz.3.1751'. [ 137.954107][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 137.969135][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.011320][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1752'. [ 138.095510][ T8934] veth0_vlan: entered promiscuous mode [ 138.104718][ T8934] veth1_vlan: entered promiscuous mode [ 138.123671][ T8934] veth0_macvtap: entered promiscuous mode [ 138.136685][ T8934] veth1_macvtap: entered promiscuous mode [ 138.147433][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.158035][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.167950][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.178827][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.188749][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.199199][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.209068][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.219572][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.229414][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.239852][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.249733][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.260259][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.275211][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.283571][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.294111][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.303909][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.314393][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.324209][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.334703][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.344639][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.355065][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.365044][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.375511][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.385392][ T8934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.395816][ T8934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.407650][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.422534][ T8934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.431296][ T8934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.440057][ T8934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.448843][ T8934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.528291][ T9063] pim6reg1: entered promiscuous mode [ 138.533610][ T9063] pim6reg1: entered allmulticast mode [ 139.004128][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 139.034959][ T9083] bond1: entered promiscuous mode [ 139.072224][ T9083] veth3: entered promiscuous mode [ 139.079850][ T9086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9086 comm=syz.2.1782 [ 139.099775][ T9083] bond1: (slave veth3): Enslaving as an active interface with an up link [ 139.126143][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 139.147963][ T9083] bond1 (unregistering): (slave veth3): Releasing backup interface [ 139.167058][ T9083] veth3: left promiscuous mode [ 139.180201][ T9083] bond1 (unregistering): Released all slaves [ 139.269715][ T9095] netlink: 'syz.2.1773': attribute type 1 has an invalid length. [ 139.277551][ T9095] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1773'. [ 139.344024][ T9103] sd 0:0:1:0: device reset [ 139.348888][ T9106] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.1775'. [ 139.378708][ T9110] program syz.3.1780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.634167][ T9118] program syz.1.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.787343][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 139.800996][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.818074][ T9129] bridge_slave_1 (unregistering): left allmulticast mode [ 139.825151][ T9129] bridge_slave_1 (unregistering): left promiscuous mode [ 139.832139][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.034118][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 140.114449][ T9134] syz.4.1791[9134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.114505][ T9134] syz.4.1791[9134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.135073][ T9136] geneve0: entered allmulticast mode [ 140.177854][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 140.177867][ T29] audit: type=1400 audit(1725399124.387:2324): avc: denied { create } for pid=9139 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.209084][ T29] audit: type=1400 audit(1725399124.417:2325): avc: denied { connect } for pid=9139 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.228887][ T29] audit: type=1400 audit(1725399124.417:2326): avc: denied { getopt } for pid=9139 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.242229][ T9142] loop3: detected capacity change from 0 to 8192 [ 140.266108][ T29] audit: type=1400 audit(1725399124.477:2327): avc: denied { mount } for pid=9141 comm="syz.3.1794" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 140.288992][ T29] audit: type=1400 audit(1725399124.487:2328): avc: denied { unmount } for pid=7105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 140.311572][ T9144] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 925 (only 8 groups) [ 140.314144][ T29] audit: type=1400 audit(1725399124.517:2329): avc: denied { mounton } for pid=9143 comm="syz.2.1795" path="/proc/292/task" dev="proc" ino=31281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 140.406050][ T29] audit: type=1400 audit(1725399124.617:2330): avc: denied { getopt } for pid=9151 comm="syz.4.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.427214][ T29] audit: type=1400 audit(1725399124.617:2331): avc: denied { name_bind } for pid=9155 comm="syz.2.1802" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 140.429950][ T9154] loop3: detected capacity change from 0 to 2048 [ 140.456869][ T29] audit: type=1400 audit(1725399124.667:2332): avc: denied { getopt } for pid=9151 comm="syz.4.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.478757][ T29] audit: type=1400 audit(1725399124.687:2333): avc: denied { setopt } for pid=9151 comm="syz.4.1799" lport=50713 faddr=::ffff:172.30.1.5 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.482703][ T9154] EXT4-fs: Ignoring removed mblk_io_submit option [ 140.518008][ T9159] 9pnet_fd: Insufficient options for proto=fd [ 140.526935][ T9154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.584377][ T9154] loop3: detected capacity change from 2048 to 0 [ 140.591753][ T9154] EXT4-fs (loop3): shut down requested (0) [ 140.598108][ T9154] bio_check_eod: 19093 callbacks suppressed [ 140.598120][ T9154] syz.3.1800: attempt to access beyond end of device [ 140.598120][ T9154] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 140.617334][ T9154] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 140.626199][ T9154] EXT4-fs (loop3): I/O error while writing superblock [ 140.632943][ T9154] VFS:Filesystem freeze failed [ 140.644247][ T7105] syz-executor: attempt to access beyond end of device [ 140.644247][ T7105] loop3: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 140.667766][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.667766][ T8018] loop3: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 140.681170][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.681170][ T8018] loop3: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 140.694525][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.694525][ T8018] loop3: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 140.707952][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.707952][ T8018] loop3: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 140.721473][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.721473][ T8018] loop3: rw=12288, sector=16, nr_sectors = 4 limit=0 [ 140.735513][ T8018] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #2: block 4: comm syz.3.1374: unable to read itable block [ 140.748136][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.748136][ T8018] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 140.761521][ T8018] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 140.769851][ T8018] EXT4-fs (loop3): I/O error while writing superblock [ 140.776631][ T8018] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 140.785333][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.785333][ T8018] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 140.798565][ T8018] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 140.806886][ T8018] EXT4-fs (loop3): I/O error while writing superblock [ 140.813641][ T8018] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.1374: mark_inode_dirty error [ 140.824987][ T8018] syz.3.1374: attempt to access beyond end of device [ 140.824987][ T8018] loop3: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 140.838257][ T8018] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 140.847251][ T8018] EXT4-fs (loop3): I/O error while writing superblock [ 140.854814][ T11] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:0: unable to read itable block [ 140.869436][ T11] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 140.877816][ T11] EXT4-fs (loop3): I/O error while writing superblock [ 140.885955][ T8018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.895745][ T8018] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 140.904071][ T8018] EXT4-fs (loop3): I/O error while writing superblock [ 140.911042][ T9160] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 141.074183][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 141.146810][ T3346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.157134][ T3346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.208333][ T3346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.218784][ T3346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.322290][ T9180] loop4: detected capacity change from 0 to 2048 [ 141.322797][ T3346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.338996][ T3346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.358974][ T9180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.397750][ T3346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.408214][ T3346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 141.449931][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.505441][ T3346] bridge_slave_1: left allmulticast mode [ 141.511152][ T3346] bridge_slave_1: left promiscuous mode [ 141.516954][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.528793][ T3346] bridge_slave_0: left allmulticast mode [ 141.534487][ T3346] bridge_slave_0: left promiscuous mode [ 141.540088][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.666318][ T3346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.683745][ T3346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.695044][ T3346] bond0 (unregistering): Released all slaves [ 141.711284][ T9172] chnl_net:caif_netlink_parms(): no params data found [ 141.765661][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.772806][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.781898][ T9172] bridge_slave_0: entered allmulticast mode [ 141.789569][ T9172] bridge_slave_0: entered promiscuous mode [ 141.800189][ T3346] hsr_slave_0: left promiscuous mode [ 141.808094][ T3346] hsr_slave_1: left promiscuous mode [ 141.814347][ T3346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.821815][ T3346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.832495][ T3346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.840002][ T3346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.851969][ T3346] veth1_macvtap: left promiscuous mode [ 141.857505][ T3346] veth0_macvtap: left promiscuous mode [ 141.863012][ T3346] veth1_vlan: left promiscuous mode [ 141.868273][ T3346] veth0_vlan: left promiscuous mode [ 141.946056][ T3346] team0 (unregistering): Port device team_slave_1 removed [ 141.956855][ T3346] team0 (unregistering): Port device team_slave_0 removed [ 141.992167][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.999288][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.008756][ T9172] bridge_slave_1: entered allmulticast mode [ 142.015171][ T9172] bridge_slave_1: entered promiscuous mode [ 142.031735][ T9172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.041903][ T9172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.060772][ T9172] team0: Port device team_slave_0 added [ 142.068349][ T9172] team0: Port device team_slave_1 added [ 142.082806][ T9172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.089798][ T9172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.115807][ T9172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.116803][ T9172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.126449][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 142.133297][ T9172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.166178][ T9172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.191021][ T9172] hsr_slave_0: entered promiscuous mode [ 142.197200][ T9172] hsr_slave_1: entered promiscuous mode [ 142.203088][ T9172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.210694][ T9172] Cannot create hsr debugfs directory [ 142.294806][ T9217] syz.0.1818[9217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.294873][ T9217] syz.0.1818[9217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.313909][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1819'. [ 142.448980][ T9172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 142.457572][ T9172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.471903][ T9172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.480539][ T9172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 142.506842][ T9172] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.513900][ T9172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.521233][ T9172] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.528317][ T9172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.580193][ T9172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.599104][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.607448][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.632141][ T9172] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.645610][ T3376] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.652757][ T3376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.671117][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.678331][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.702024][ T9172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.712411][ T9172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.779237][ T9172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.805918][ T9247] netlink: 'syz.0.1828': attribute type 4 has an invalid length. [ 142.835086][ T9247] netlink: 'syz.0.1828': attribute type 17 has an invalid length. [ 142.911189][ T9172] veth0_vlan: entered promiscuous mode [ 142.927782][ T9172] veth1_vlan: entered promiscuous mode [ 142.944365][ T9172] veth0_macvtap: entered promiscuous mode [ 142.957733][ T9172] veth1_macvtap: entered promiscuous mode [ 142.969549][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.980037][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.990008][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.000615][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.010546][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.021057][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.030908][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.041402][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.051196][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.061598][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.071390][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.081819][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.093465][ T9172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.104919][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.115366][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.125172][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.135654][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.145459][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.156153][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.164086][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.166075][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.183291][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.193150][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.203603][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.213419][ T9172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.223829][ T9172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.235207][ T9172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.246769][ T9172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.255545][ T9172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.264250][ T9172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.272997][ T9172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.737268][ T9291] netlink: 'syz.4.1843': attribute type 4 has an invalid length. [ 143.776596][ T9291] netlink: 'syz.4.1843': attribute type 17 has an invalid length. [ 143.903842][ T9306] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.104333][ T9307] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 144.194108][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 144.310087][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1856'. [ 144.319107][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1856'. [ 144.364209][ T9331] loop3: detected capacity change from 0 to 512 [ 144.405278][ T9331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.418267][ T9331] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.436134][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.523408][ T9339] loop3: detected capacity change from 0 to 4096 [ 144.530569][ T9339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.539799][ T9339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.625280][ T9343] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.636166][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.824269][ T9346] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 145.234284][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 145.241127][ T9362] loop4: detected capacity change from 0 to 512 [ 145.265498][ T9362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.286925][ T9362] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.299822][ T9367] syz.1.1880[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.299931][ T9367] syz.1.1880[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.316357][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 145.316370][ T29] audit: type=1326 audit(1725399129.517:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.357306][ T29] audit: type=1326 audit(1725399129.517:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.380820][ T29] audit: type=1326 audit(1725399129.517:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.404279][ T29] audit: type=1326 audit(1725399129.517:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.427708][ T29] audit: type=1326 audit(1725399129.517:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.451107][ T29] audit: type=1326 audit(1725399129.517:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.474520][ T29] audit: type=1326 audit(1725399129.517:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.498092][ T29] audit: type=1326 audit(1725399129.517:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66d09aceb9 code=0x7ffc0000 [ 145.521703][ T29] audit: type=1400 audit(1725399129.517:2460): avc: denied { read } for pid=9365 comm="syz.3.1869" name="ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.544702][ T29] audit: type=1400 audit(1725399129.517:2461): avc: denied { open } for pid=9365 comm="syz.3.1869" path="/dev/ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.569892][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.598522][ T9374] loop4: detected capacity change from 0 to 512 [ 145.615181][ T9374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 145.626700][ T9374] EXT4-fs (loop4): 1 truncate cleaned up [ 145.632914][ T9374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.666368][ T9376] pim6reg1: entered promiscuous mode [ 145.671689][ T9376] pim6reg1: entered allmulticast mode [ 145.736431][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.784616][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 145.793603][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 145.913052][ T9392] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.990909][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1885'. [ 146.125059][ T9402] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 146.274590][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 146.877356][ T9427] syz.4.1892[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.877466][ T9427] syz.4.1892[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.058972][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1894'. [ 147.079329][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1894'. [ 147.129947][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 147.324118][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 148.354119][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 149.394474][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 149.723501][ T9489] syz.3.1910[9489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.723535][ T9489] syz.3.1910[9489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.888705][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1923'. [ 150.000254][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 150.089412][ T9528] syz.3.1934[9528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.089459][ T9528] syz.3.1934[9528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.115817][ T9530] No source specified [ 150.405057][ T9543] syz.3.1941[9543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.405113][ T9543] syz.3.1941[9543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.435598][ T9543] syz.3.1941[9543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.444125][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 150.448659][ T9543] syz.3.1941[9543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.496065][ T9543] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.545889][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 150.545903][ T29] audit: type=1326 audit(1725399134.757:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9550 comm="syz.3.1943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x0 [ 150.699757][ T29] audit: type=1326 audit(1725399134.907:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.726384][ T9554] syzkaller0: entered promiscuous mode [ 150.731903][ T9554] syzkaller0: entered allmulticast mode [ 150.734235][ T29] audit: type=1326 audit(1725399134.907:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.760993][ T29] audit: type=1326 audit(1725399134.907:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.784364][ T29] audit: type=1326 audit(1725399134.907:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.807836][ T29] audit: type=1326 audit(1725399134.907:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1bc38cabb code=0x7ffc0000 [ 150.831234][ T29] audit: type=1326 audit(1725399134.907:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.854727][ T29] audit: type=1326 audit(1725399134.907:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.856585][ T9563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 150.878191][ T29] audit: type=1326 audit(1725399134.907:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.908161][ T29] audit: type=1326 audit(1725399134.907:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9559 comm="syz.1.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1bc38ceb9 code=0x7ffc0000 [ 150.950022][ T9563] sch_fq: defrate 0 ignored. [ 151.033645][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 151.414313][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 151.474197][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 151.613232][ T9595] loop3: detected capacity change from 0 to 1024 [ 151.633695][ T9589] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.643484][ T9595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.713977][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.773920][ T9602] syzkaller0: entered promiscuous mode [ 151.779458][ T9602] syzkaller0: entered allmulticast mode [ 151.877969][ T9606] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.886221][ T9606] sch_fq: defrate 0 ignored. [ 151.994360][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1970'. [ 152.514102][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 152.804025][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.033530][ T9636] syzkaller0: entered promiscuous mode [ 153.039123][ T9636] syzkaller0: entered allmulticast mode [ 153.146288][ T9638] syzkaller0: entered promiscuous mode [ 153.151838][ T9638] syzkaller0: entered allmulticast mode [ 153.302116][ T9656] syzkaller0: entered promiscuous mode [ 153.307651][ T9656] syzkaller0: entered allmulticast mode [ 153.338582][ T9663] loop3: detected capacity change from 0 to 1024 [ 153.388258][ T9663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.471650][ T9670] loop4: detected capacity change from 0 to 512 [ 153.481265][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.494273][ T9670] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 153.502997][ T9670] EXT4-fs (loop4): invalid journal inode [ 153.521955][ T9670] EXT4-fs (loop4): can't get journal size [ 153.537719][ T9670] EXT4-fs (loop4): 1 truncate cleaned up [ 153.543865][ T9670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.555990][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 153.580803][ T9670] No source specified [ 153.689677][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.830971][ T9685] loop3: detected capacity change from 0 to 512 [ 153.853468][ T9685] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 153.863360][ T9685] EXT4-fs (loop3): invalid journal inode [ 153.869386][ T9685] EXT4-fs (loop3): can't get journal size [ 153.882910][ T9685] EXT4-fs (loop3): 1 truncate cleaned up [ 153.905061][ T9685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.920299][ T9685] No source specified [ 153.981852][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.052291][ T9693] syzkaller0: entered promiscuous mode [ 154.057895][ T9693] syzkaller0: entered allmulticast mode [ 154.594097][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 154.849030][ T9725] syz.0.2014[9725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.849087][ T9725] syz.0.2014[9725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.907885][ T9728] bond1: entered promiscuous mode [ 154.924384][ T9728] bond1: entered allmulticast mode [ 154.947710][ T9728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.980228][ T9728] bond1 (unregistering): Released all slaves [ 155.211866][ T9746] bridge0: port 3(gretap0) entered blocking state [ 155.218423][ T9746] bridge0: port 3(gretap0) entered disabled state [ 155.226833][ T9746] gretap0: entered allmulticast mode [ 155.232691][ T9746] gretap0: entered promiscuous mode [ 155.239404][ T9746] bridge0: port 3(gretap0) entered blocking state [ 155.245897][ T9746] bridge0: port 3(gretap0) entered forwarding state [ 155.255442][ T9746] gretap0: left allmulticast mode [ 155.260478][ T9746] gretap0: left promiscuous mode [ 155.265597][ T9746] bridge0: port 3(gretap0) entered disabled state [ 155.634084][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 155.688694][ T9759] loop4: detected capacity change from 0 to 512 [ 155.697091][ T9759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.709022][ T9759] EXT4-fs (loop4): 1 truncate cleaned up [ 155.715268][ T9759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.745034][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 155.745051][ T29] audit: type=1400 audit(1725399139.957:2871): avc: denied { read } for pid=9763 comm="syz.2.2027" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.756158][ T9764] ALSA: seq fatal error: cannot create timer (-22) [ 155.774268][ T29] audit: type=1400 audit(1725399139.957:2872): avc: denied { open } for pid=9763 comm="syz.2.2027" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.808621][ T29] audit: type=1400 audit(1725399139.957:2873): avc: denied { ioctl } for pid=9763 comm="syz.2.2027" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.842645][ T9767] syz.2.2028[9767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.842683][ T9767] syz.2.2028[9767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.844274][ T9759] loop4: detected capacity change from 512 to 64 [ 155.877613][ T29] audit: type=1400 audit(1725399140.087:2874): avc: denied { read write } for pid=9758 comm="syz.4.2026" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.900525][ T29] audit: type=1400 audit(1725399140.087:2875): avc: denied { open } for pid=9758 comm="syz.4.2026" path="/113/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.932267][ T29] audit: type=1400 audit(1725399140.137:2876): avc: denied { unmount } for pid=8159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 155.957528][ T29] audit: type=1400 audit(1725399140.167:2877): avc: denied { remove_name } for pid=8159 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.962740][ T8159] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 155.980163][ T29] audit: type=1400 audit(1725399140.167:2878): avc: denied { unlink } for pid=8159 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 155.980273][ T29] audit: type=1400 audit(1725399140.167:2879): avc: denied { rmdir } for pid=8159 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.987724][ T8159] inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 156.009602][ T29] audit: type=1400 audit(1725399140.167:2880): avc: denied { unlink } for pid=8159 comm="syz-executor" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.072756][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.128668][ T9778] xt_connbytes: Forcing CT accounting to be enabled [ 156.135375][ T9778] Cannot find add_set index 0 as target [ 156.502226][ T9790] No source specified [ 156.577135][ T9796] syzkaller0: entered promiscuous mode [ 156.582653][ T9796] syzkaller0: entered allmulticast mode [ 156.674108][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 156.683529][ T9806] process 'syz.1.2041' launched './file0' with NULL argv: empty string added [ 156.720315][ T9811] syz.1.2044[9811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.720437][ T9811] syz.1.2044[9811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.783047][ T9817] loop4: detected capacity change from 0 to 1024 [ 156.817233][ T9817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.848444][ T9817] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 156.863495][ T9817] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 156.876093][ T9817] EXT4-fs (loop4): This should not happen!! Data will be lost [ 156.876093][ T9817] [ 156.885775][ T9817] EXT4-fs (loop4): Total free blocks count 0 [ 156.891802][ T9817] EXT4-fs (loop4): Free/Dirty block details [ 156.897796][ T9817] EXT4-fs (loop4): free_blocks=68451041280 [ 156.903593][ T9817] EXT4-fs (loop4): dirty_blocks=16 [ 156.908718][ T9817] EXT4-fs (loop4): Block reservation details [ 156.914751][ T9817] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 156.955573][ T9828] loop3: detected capacity change from 0 to 2048 [ 156.965776][ T3346] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 156.996397][ T9828] EXT4-fs (loop3): can't mount with commit=116, fs mounted w/o journal [ 157.012661][ T9826] loop3: detected capacity change from 0 to 128 [ 157.022634][ T9826] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.053583][ T9837] tmpfs: Unknown parameter 'nolazytime;Âú' [ 157.070784][ T9826] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.135026][ T9172] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.255923][ T9883] 9pnet_fd: p9_fd_create_tcp (9883): problem connecting socket to 127.0.0.1 [ 157.284244][ T9886] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 157.294650][ T3410] kernel read not supported for file /vga_arbiter (pid: 3410 comm: kworker/1:7) [ 157.435424][ T9906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9906 comm=syz.1.2085 [ 157.484818][ T9906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2085'. [ 157.519864][ T9906] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 157.714165][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 157.808565][ T9913] tipc: Started in network mode [ 157.813530][ T9913] tipc: Node identity 101, cluster identity 4711 [ 157.819932][ T9913] tipc: Node number set to 257 [ 157.854806][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 157.866270][ T9915] dummy0: entered promiscuous mode [ 158.228310][ T9978] syz.4.2107[9978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.228421][ T9978] syz.4.2107[9978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.444643][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2116'. [ 158.486518][T10022] loop4: detected capacity change from 0 to 1024 [ 158.520179][T10022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.535775][T10022] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.567943][T10022] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 158.580250][T10022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.580250][T10022] [ 158.589969][T10022] EXT4-fs (loop4): Total free blocks count 0 [ 158.595975][T10022] EXT4-fs (loop4): Free/Dirty block details [ 158.601840][T10022] EXT4-fs (loop4): free_blocks=0 [ 158.606806][T10022] EXT4-fs (loop4): dirty_blocks=0 [ 158.611816][T10022] EXT4-fs (loop4): Block reservation details [ 158.617990][T10022] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 158.652256][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.703139][T10059] tipc: Started in network mode [ 158.708147][T10059] tipc: Node identity 52fb2fb022db, cluster identity 4711 [ 158.715376][T10059] tipc: Enabled bearer , priority 21 [ 158.724103][T10059] €Â: renamed from syzkaller0 [ 158.736340][T10059] tipc: Disabling bearer [ 158.754104][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 158.813141][T10071] loop4: detected capacity change from 0 to 512 [ 158.820141][T10071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.834708][T10071] EXT4-fs (loop4): 1 truncate cleaned up [ 158.840684][T10071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.873777][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.016338][T10126] batadv0: entered promiscuous mode [ 159.207807][T10125] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.804087][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 159.893737][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.904230][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 159.958061][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.968460][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.052531][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.062906][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.099283][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.109700][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.228607][ T28] batadv1: left allmulticast mode [ 160.233673][ T28] batadv1: left promiscuous mode [ 160.238790][ T28] bridge0: port 3(batadv1) entered disabled state [ 160.247336][ T28] bridge_slave_1: left allmulticast mode [ 160.252992][ T28] bridge_slave_1: left promiscuous mode [ 160.258797][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.267944][ T28] bridge_slave_0: left allmulticast mode [ 160.273588][ T28] bridge_slave_0: left promiscuous mode [ 160.279503][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.377002][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.388581][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.402553][ T28] bond0 (unregistering): Released all slaves [ 160.420964][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2154'. [ 160.455742][ T28] tipc: Disabling bearer [ 160.460897][ T28] tipc: Left network mode [ 160.462605][T10180] chnl_net:caif_netlink_parms(): no params data found [ 160.520136][ T28] hsr_slave_0: left promiscuous mode [ 160.527456][ T28] hsr_slave_1: left promiscuous mode [ 160.537416][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.544879][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.565390][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.572811][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.585160][ T28] veth1_macvtap: left promiscuous mode [ 160.590734][ T28] veth0_macvtap: left promiscuous mode [ 160.596247][ T28] veth1_vlan: left promiscuous mode [ 160.601511][ T28] veth0_vlan: left promiscuous mode [ 160.686204][T10225] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 160.734115][ T28] team0 (unregistering): Port device team_slave_1 removed [ 160.745695][ T28] team0 (unregistering): Port device team_slave_0 removed [ 160.802768][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.809922][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.820853][T10180] bridge_slave_0: entered allmulticast mode [ 160.839546][T10180] bridge_slave_0: entered promiscuous mode [ 160.845438][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 160.865306][T10221] veth0_vlan: entered allmulticast mode [ 160.875734][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 160.875780][ T29] audit: type=1400 audit(1725399145.087:3032): avc: denied { nlmsg_write } for pid=10231 comm="syz.0.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.902982][T10232] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2161'. [ 160.918324][T10224] veth0_vlan: left promiscuous mode [ 160.931794][T10224] veth0_vlan: entered promiscuous mode [ 160.959835][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.966961][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.981157][T10180] bridge_slave_1: entered allmulticast mode [ 160.987561][T10180] bridge_slave_1: entered promiscuous mode [ 161.014622][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.037790][T10240] syzkaller0: entered promiscuous mode [ 161.043410][T10240] syzkaller0: entered allmulticast mode [ 161.053572][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.088006][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2166'. [ 161.106781][T10180] team0: Port device team_slave_0 added [ 161.113076][T10180] team0: Port device team_slave_1 added [ 161.136721][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.143663][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.169604][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.181183][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.188139][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.214078][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.243311][T10180] hsr_slave_0: entered promiscuous mode [ 161.252093][T10180] hsr_slave_1: entered promiscuous mode [ 161.258156][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.267061][T10253] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 161.274594][T10180] Cannot create hsr debugfs directory [ 161.331375][ T29] audit: type=1400 audit(1725399145.537:3033): avc: denied { bind } for pid=10251 comm="syz.0.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.452192][T10269] loop4: detected capacity change from 0 to 2048 [ 161.508215][ T29] audit: type=1400 audit(1725399145.717:3034): avc: denied { override_creds } for pid=10278 comm="syz.4.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 161.626572][T10180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.635756][T10180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.644215][T10180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.652481][T10180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.707229][T10285] syzkaller0: entered promiscuous mode [ 161.712691][T10285] syzkaller0: entered allmulticast mode [ 161.735609][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.750501][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.760152][T10108] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.767210][T10108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.778405][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.785474][T10104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.817970][ T29] audit: type=1326 audit(1725399146.027:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 161.818926][T10180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.842508][ T29] audit: type=1326 audit(1725399146.027:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 161.875304][ T29] audit: type=1326 audit(1725399146.047:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 161.884108][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.898675][ T29] audit: type=1326 audit(1725399146.047:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 161.926695][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.929049][ T29] audit: type=1326 audit(1725399146.047:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10286 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 161.965773][T10296] loop4: detected capacity change from 0 to 512 [ 161.987197][T10296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.000075][T10296] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.001763][T10180] veth0_vlan: entered promiscuous mode [ 162.018863][T10180] veth1_vlan: entered promiscuous mode [ 162.032774][T10180] veth0_macvtap: entered promiscuous mode [ 162.040430][T10180] veth1_macvtap: entered promiscuous mode [ 162.051069][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.061576][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.071382][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.081806][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.091618][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.102030][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.111819][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.122230][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.132015][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.142408][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.152192][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.162614][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.173524][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.173867][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.181743][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.201390][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.211487][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.221902][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.231702][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.242107][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.252012][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.262429][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.272305][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.282736][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.292627][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.303052][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.330504][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.351298][T10180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.360071][T10180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.368785][T10180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.377676][T10180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.378907][ T29] audit: type=1400 audit(1725399146.587:3040): avc: denied { unmount } for pid=9172 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 162.433250][ T29] audit: type=1400 audit(1725399146.637:3041): avc: denied { read } for pid=10313 comm="syz.3.2190" path="socket:[35276]" dev="sockfs" ino=35276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 162.506210][T10321] loop4: detected capacity change from 0 to 2048 [ 162.537043][T10321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.564284][T10321] EXT4-fs (loop4): shut down requested (0) [ 162.599763][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.848453][T10344] syzkaller0: entered promiscuous mode [ 162.853977][T10344] syzkaller0: entered allmulticast mode [ 162.924105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 163.387413][T10351] netlink: 'syz.0.2203': attribute type 10 has an invalid length. [ 163.395346][T10351] batadv0: left promiscuous mode [ 163.401772][T10351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.411626][T10351] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.532347][T10357] pim6reg1: entered promiscuous mode [ 163.537696][T10357] pim6reg1: entered allmulticast mode [ 163.726989][T10370] syz.0.2211[10370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.727169][T10370] syz.0.2211[10370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.739999][T10370] syz.0.2211[10370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.751839][T10370] syz.0.2211[10370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.766176][T10370] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 163.954116][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 164.994147][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 165.297420][T10385] batadv0: entered promiscuous mode [ 165.663035][T10395] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.034176][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 166.038735][T10408] syz.2.2223[10408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.041245][T10408] syz.2.2223[10408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.059166][T10408] syz.2.2223[10408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.059318][T10408] syz.2.2223[10408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.094607][T10408] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.136661][T10415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2229'. [ 166.152976][T10413] syzkaller0: entered promiscuous mode [ 166.158517][T10413] syzkaller0: entered allmulticast mode [ 166.231295][T10421] syzkaller0: entered promiscuous mode [ 166.236824][T10421] syzkaller0: entered allmulticast mode [ 166.372426][T10433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10433 comm=syz.3.2238 [ 166.385926][T10433] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2238'. [ 166.395148][T10433] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 166.467972][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 166.486225][T10441] dummy0: entered promiscuous mode [ 167.067455][T10451] loop4: detected capacity change from 0 to 1024 [ 167.084153][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 167.093452][T10451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.121606][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.158714][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 167.158726][ T29] audit: type=1326 audit(1725399151.367:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10445 comm="syz.0.2254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc04cf6ceb9 code=0x0 [ 167.313524][T10461] tipc: Started in network mode [ 167.319079][T10461] tipc: Node identity f2535bb1ca53, cluster identity 4711 [ 167.326567][T10461] tipc: Enabled bearer , priority 21 [ 167.334252][T10461] €Â: renamed from syzkaller0 [ 167.340005][T10461] tipc: Disabling bearer [ 167.410862][T10466] loop3: detected capacity change from 0 to 512 [ 167.417733][T10466] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.430012][T10466] EXT4-fs (loop3): 1 truncate cleaned up [ 167.435964][T10466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.465839][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.114089][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.638378][T10601] syzkaller0: entered promiscuous mode [ 168.643867][T10601] syzkaller0: entered allmulticast mode [ 168.674872][ T29] audit: type=1326 audit(1725399152.887:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.0.2267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc04cf6ceb9 code=0x0 [ 168.828931][T10627] tipc: Started in network mode [ 168.833887][T10627] tipc: Node identity fe5f906ad0be, cluster identity 4711 [ 168.841038][T10627] tipc: Enabled bearer , priority 21 [ 168.848421][T10627] €Â: renamed from syzkaller0 [ 168.853973][T10627] tipc: Disabling bearer [ 169.164107][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 169.182040][T10635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.194105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 170.416195][T10647] chnl_net:caif_netlink_parms(): no params data found [ 170.427993][T10680] xt_connbytes: Forcing CT accounting to be enabled [ 170.437896][T10680] Cannot find add_set index 0 as target [ 170.463897][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.470975][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.478159][T10647] bridge_slave_0: entered allmulticast mode [ 170.484798][T10647] bridge_slave_0: entered promiscuous mode [ 170.492369][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.499539][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.507032][T10647] bridge_slave_1: entered allmulticast mode [ 170.513473][T10647] bridge_slave_1: entered promiscuous mode [ 170.534401][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.545030][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.566512][T10647] team0: Port device team_slave_0 added [ 170.572884][T10647] team0: Port device team_slave_1 added [ 170.590167][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.597183][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.623156][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.633704][ T29] audit: type=1326 audit(1725399154.807:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10688 comm="syz.3.2293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66d09aceb9 code=0x0 [ 170.660738][T10575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.676555][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.683556][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.709605][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.737229][T10575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.750153][T10647] hsr_slave_0: entered promiscuous mode [ 170.757290][T10647] hsr_slave_1: entered promiscuous mode [ 170.763196][T10647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.770787][T10647] Cannot create hsr debugfs directory [ 170.799744][T10575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.837936][T10575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.887609][T10575] bridge_slave_0: left allmulticast mode [ 170.893269][T10575] bridge_slave_0: left promiscuous mode [ 170.898970][T10575] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.067538][T10575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.077659][T10575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.087462][T10575] bond0 (unregistering): Released all slaves [ 171.125660][T10575] tipc: Left network mode [ 171.196534][T10575] hsr_slave_0: left promiscuous mode [ 171.202196][T10575] hsr_slave_1: left promiscuous mode [ 171.207981][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.215380][T10575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.223091][T10575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.230550][T10575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.234119][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 171.247560][T10575] dummy0: left promiscuous mode [ 171.252456][T10575] veth1_macvtap: left promiscuous mode [ 171.257949][T10575] veth0_macvtap: left promiscuous mode [ 171.263424][T10575] veth1_vlan: left promiscuous mode [ 171.268673][T10575] veth0_vlan: left promiscuous mode [ 171.341238][T10575] team0 (unregistering): Port device team_slave_1 removed [ 171.354747][T10575] team0 (unregistering): Port device team_slave_0 removed [ 171.566360][T10647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.575022][T10647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.583288][T10647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.591543][T10647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.624008][T10647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.639403][T10647] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.651910][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.659039][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.684129][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.691254][T10564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.758264][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.816819][ T29] audit: type=1326 audit(1725399156.027:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.2.2299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f695c09ceb9 code=0x0 [ 171.871281][T10647] veth0_vlan: entered promiscuous mode [ 171.880536][T10647] veth1_vlan: entered promiscuous mode [ 171.895584][T10647] veth0_macvtap: entered promiscuous mode [ 171.902848][T10647] veth1_macvtap: entered promiscuous mode [ 171.912655][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.923138][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.932960][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.943404][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.953211][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.963629][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.973516][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.983944][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.993762][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.004171][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.013959][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.024432][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.036280][T10647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.044695][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.055288][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.065100][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.075517][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.085385][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.095790][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.105615][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.116025][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.125890][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.136329][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.146146][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.156611][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.168063][T10647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.179926][T10647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.188826][T10647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.197496][T10647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.206268][T10647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.274088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.318555][ T29] audit: type=1326 audit(1725399156.527:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.342079][ T29] audit: type=1326 audit(1725399156.527:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.371890][ T29] audit: type=1326 audit(1725399156.577:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.373889][T10753] loop3: detected capacity change from 0 to 1024 [ 172.395434][ T29] audit: type=1326 audit(1725399156.577:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.395510][ T29] audit: type=1326 audit(1725399156.577:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.449035][ T29] audit: type=1326 audit(1725399156.577:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.472643][ T29] audit: type=1326 audit(1725399156.577:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.496141][ T29] audit: type=1326 audit(1725399156.577:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.519634][ T29] audit: type=1326 audit(1725399156.577:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.543116][ T29] audit: type=1326 audit(1725399156.577:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10750 comm="syz.4.2300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 172.544547][T10753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.602959][T10753] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 172.620112][T10753] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 172.632718][T10753] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.632718][T10753] [ 172.642394][T10753] EXT4-fs (loop3): Total free blocks count 0 [ 172.648365][T10753] EXT4-fs (loop3): Free/Dirty block details [ 172.654335][T10753] EXT4-fs (loop3): free_blocks=68451041280 [ 172.660191][T10753] EXT4-fs (loop3): dirty_blocks=16 [ 172.665315][T10753] EXT4-fs (loop3): Block reservation details [ 172.671313][T10753] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 172.700589][T10767] bond1: entered promiscuous mode [ 172.705753][T10767] bond1: entered allmulticast mode [ 172.713293][T10589] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 172.713431][T10767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.763446][T10767] bond1 (unregistering): Released all slaves [ 172.780959][T10775] loop3: detected capacity change from 0 to 1024 [ 172.806735][T10775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.818964][T10775] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.837966][T10775] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 172.850323][T10775] EXT4-fs (loop3): This should not happen!! Data will be lost [ 172.850323][T10775] [ 172.859992][T10775] EXT4-fs (loop3): Total free blocks count 0 [ 172.865977][T10775] EXT4-fs (loop3): Free/Dirty block details [ 172.871847][T10775] EXT4-fs (loop3): free_blocks=0 [ 172.876789][T10775] EXT4-fs (loop3): dirty_blocks=0 [ 172.881801][T10775] EXT4-fs (loop3): Block reservation details [ 172.887768][T10775] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 172.907818][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.314107][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.552385][T10787] loop3: detected capacity change from 0 to 4096 [ 173.561239][T10787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.665368][ T9172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.885988][T10791] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 174.354350][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.450835][T10801] tipc: Started in network mode [ 174.455759][T10801] tipc: Node identity f2937210f104, cluster identity 4711 [ 174.463041][T10801] tipc: Enabled bearer , priority 21 [ 174.467650][T10798] loop4: detected capacity change from 0 to 4096 [ 174.471308][T10801] €Â: renamed from syzkaller0 [ 174.483555][T10798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.483637][T10801] tipc: Disabling bearer [ 174.503372][T10796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2313'. [ 174.595262][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.404125][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.434129][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 177.484129][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.514148][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.554122][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.588798][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 180.588811][ T29] audit: type=1400 audit(1725399164.787:3123): avc: denied { create } for pid=10815 comm="syz.4.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.594121][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.844825][T10841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 180.981543][T10827] chnl_net:caif_netlink_parms(): no params data found [ 180.995761][T10853] syz.4.2338[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.995889][T10853] syz.4.2338[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.012758][T10853] syz.4.2338[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.020738][ T29] audit: type=1400 audit(1725399165.217:3124): avc: denied { setopt } for pid=10850 comm="syz.1.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.025634][T10853] syz.4.2338[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.086453][T10827] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.097960][T10860] loop4: detected capacity change from 0 to 1024 [ 181.111547][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.115601][T10860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.118996][T10827] bridge_slave_0: entered allmulticast mode [ 181.137105][T10827] bridge_slave_0: entered promiscuous mode [ 181.143731][ T29] audit: type=1326 audit(1725399165.347:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.148490][T10827] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.174343][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.187712][ T29] audit: type=1326 audit(1725399165.347:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.194171][T10827] bridge_slave_1: entered allmulticast mode [ 181.211280][ T29] audit: type=1326 audit(1725399165.357:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.217816][T10827] bridge_slave_1: entered promiscuous mode [ 181.240618][ T29] audit: type=1326 audit(1725399165.357:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.269995][ T29] audit: type=1326 audit(1725399165.387:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.288267][T10860] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 181.293473][ T29] audit: type=1326 audit(1725399165.387:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.308312][T10860] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 181.331774][ T29] audit: type=1326 audit(1725399165.387:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.343978][T10860] EXT4-fs (loop4): This should not happen!! Data will be lost [ 181.343978][T10860] [ 181.367392][ T29] audit: type=1326 audit(1725399165.387:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10859 comm="syz.4.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3e082ceb9 code=0x7ffc0000 [ 181.377022][T10860] EXT4-fs (loop4): Total free blocks count 0 [ 181.406738][T10860] EXT4-fs (loop4): Free/Dirty block details [ 181.412611][T10860] EXT4-fs (loop4): free_blocks=68451041280 [ 181.418434][T10860] EXT4-fs (loop4): dirty_blocks=16 [ 181.423580][T10860] EXT4-fs (loop4): Block reservation details [ 181.429617][T10860] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 181.453875][T10564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.506866][ T8159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.518596][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.535594][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.551041][T10871] syz.4.2342[10871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.551134][T10871] syz.4.2342[10871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.568908][T10564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.627879][T10827] team0: Port device team_slave_0 added [ 181.634110][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.642619][T10827] team0: Port device team_slave_1 added [ 181.671234][T10564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.729112][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.736132][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.762077][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.810752][T10564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.826913][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.833860][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.859763][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.018099][T10827] hsr_slave_0: entered promiscuous mode [ 182.030704][T10827] hsr_slave_1: entered promiscuous mode [ 182.050971][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.059639][T10827] Cannot create hsr debugfs directory [ 182.085771][T10564] bridge_slave_1: left allmulticast mode [ 182.091423][T10564] bridge_slave_1: left promiscuous mode [ 182.097159][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.117001][T10564] bridge_slave_0: left allmulticast mode [ 182.122675][T10564] bridge_slave_0: left promiscuous mode [ 182.128408][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.296793][T10564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.308205][T10564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.318426][T10564] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 182.330156][T10564] bond0 (unregistering): Released all slaves [ 182.566551][T10564] hsr_slave_0: left promiscuous mode [ 182.596874][T10564] hsr_slave_1: left promiscuous mode [ 182.624288][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.631725][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.674248][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.688851][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.696295][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.747769][T10564] veth1_macvtap: left promiscuous mode [ 182.753305][T10564] veth0_macvtap: left promiscuous mode [ 182.758996][T10564] veth1_vlan: left promiscuous mode [ 182.764371][T10564] veth0_vlan: left promiscuous mode [ 182.892985][T10564] team0 (unregistering): Port device team_slave_1 removed [ 182.904013][T10564] team0 (unregistering): Port device team_slave_0 removed [ 183.027561][T10906] chnl_net:caif_netlink_parms(): no params data found [ 183.082997][T10906] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.090140][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.099983][T10906] bridge_slave_0: entered allmulticast mode [ 183.107344][T10906] bridge_slave_0: entered promiscuous mode [ 183.126868][T10906] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.133952][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.142423][T10906] bridge_slave_1: entered allmulticast mode [ 183.149297][T10906] bridge_slave_1: entered promiscuous mode [ 183.173722][T10906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.186910][T10906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.221442][T10906] team0: Port device team_slave_0 added [ 183.232172][T10906] team0: Port device team_slave_1 added [ 183.249735][T10906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.256725][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.282613][T10906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.298081][T11066] chnl_net:caif_netlink_parms(): no params data found [ 183.317010][T10906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.323934][T10906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.349868][T10906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.385161][T10906] hsr_slave_0: entered promiscuous mode [ 183.391263][T10906] hsr_slave_1: entered promiscuous mode [ 183.438267][T10827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.459666][T10827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.477155][T10564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.496542][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.503603][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.512876][T11066] bridge_slave_0: entered allmulticast mode [ 183.519342][T11066] bridge_slave_0: entered promiscuous mode [ 183.527462][T10827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.541818][T10564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.554085][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.561130][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.569125][T11066] bridge_slave_1: entered allmulticast mode [ 183.575395][T11066] bridge_slave_1: entered promiscuous mode [ 183.581696][T10827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.622867][T10564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.641804][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.657020][T11111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2368'. [ 183.672659][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.687946][T10906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.706373][T10564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.716698][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.754658][T11066] team0: Port device team_slave_0 added [ 183.771247][T11066] team0: Port device team_slave_1 added [ 183.829270][T10906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.862410][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.869394][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.895350][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.937477][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.944443][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.970525][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.000778][T10906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.046490][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.066195][T10906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.091037][T11066] hsr_slave_0: entered promiscuous mode [ 184.097805][T11066] hsr_slave_1: entered promiscuous mode [ 184.103709][T11066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.112949][T11066] Cannot create hsr debugfs directory [ 184.143232][T10827] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.155994][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.163057][T10104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.173179][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.180232][T10104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.190796][T11127] pim6reg1: entered promiscuous mode [ 184.196311][T11127] pim6reg1: entered allmulticast mode [ 184.208676][T10564] bridge_slave_1: left allmulticast mode [ 184.214351][T10564] bridge_slave_1: left promiscuous mode [ 184.219957][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.228653][T10564] bridge_slave_0: left allmulticast mode [ 184.234348][T10564] bridge_slave_0: left promiscuous mode [ 184.239990][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.248590][T10564] bridge_slave_1: left allmulticast mode [ 184.254432][T10564] bridge_slave_1: left promiscuous mode [ 184.260191][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.268023][T10564] bridge_slave_0: left allmulticast mode [ 184.273658][T10564] bridge_slave_0: left promiscuous mode [ 184.279326][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.516568][T10564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.527341][T10564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.537505][T10564] bond0 (unregistering): Released all slaves [ 184.546231][T10564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.556468][T10564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.566771][T10564] bond0 (unregistering): Released all slaves [ 184.617749][T10906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.629401][T10564] tipc: Left network mode [ 184.634851][T10906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.646783][T10564] tipc: Left network mode [ 184.651370][T10906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.670446][T10906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.687221][T10827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.754124][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.761916][T10564] hsr_slave_0: left promiscuous mode [ 184.769932][T10564] hsr_slave_1: left promiscuous mode [ 184.785883][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.793643][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.814319][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.823465][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.842556][T10564] hsr_slave_0: left promiscuous mode [ 184.848530][T10564] hsr_slave_1: left promiscuous mode [ 184.854861][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.862254][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.869810][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.877330][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.893352][T10564] dummy0: left promiscuous mode [ 184.898369][T10564] veth1_macvtap: left promiscuous mode [ 184.903833][T10564] veth0_macvtap: left promiscuous mode [ 184.916368][T10564] veth1_macvtap: left promiscuous mode [ 184.921923][T10564] veth0_macvtap: left promiscuous mode [ 184.927470][T10564] veth1_vlan: left promiscuous mode [ 184.932679][T10564] veth0_vlan: left promiscuous mode [ 185.049677][T10564] team0 (unregistering): Port device team_slave_1 removed [ 185.060287][T10564] team0 (unregistering): Port device team_slave_0 removed [ 185.120742][T10564] team0 (unregistering): Port device team_slave_1 removed [ 185.132960][T10564] team0 (unregistering): Port device team_slave_0 removed [ 185.193449][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.209375][T11173] pim6reg1: entered promiscuous mode [ 185.214725][T11173] pim6reg1: entered allmulticast mode [ 185.263625][T10906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.285917][T10906] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.303804][T11181] pim6reg1: entered promiscuous mode [ 185.309216][T11181] pim6reg1: entered allmulticast mode [ 185.319254][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.326343][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.366129][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.373171][T10106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.401257][T10827] veth0_vlan: entered promiscuous mode [ 185.416243][T10827] veth1_vlan: entered promiscuous mode [ 185.433552][T10827] veth0_macvtap: entered promiscuous mode [ 185.450698][T10827] veth1_macvtap: entered promiscuous mode [ 185.472225][T11066] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.485186][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.495702][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.505531][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.516026][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.525859][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.536360][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.546188][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.556696][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.570888][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.579361][T11066] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.595671][T11066] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.606103][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 185.606115][ T29] audit: type=1326 audit(1725399169.817:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.641732][T11066] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.654064][ T29] audit: type=1326 audit(1725399169.817:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.677487][ T29] audit: type=1326 audit(1725399169.817:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.700973][ T29] audit: type=1326 audit(1725399169.817:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.724501][ T29] audit: type=1326 audit(1725399169.817:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.748026][ T29] audit: type=1326 audit(1725399169.817:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.771489][ T29] audit: type=1326 audit(1725399169.817:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.794943][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.801902][ T29] audit: type=1326 audit(1725399169.817:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.825500][ T29] audit: type=1326 audit(1725399169.817:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.848954][ T29] audit: type=1326 audit(1725399169.817:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11202 comm="syz.1.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb7e9ceb9 code=0x7ffc0000 [ 185.879775][T11207] batadv0: entered promiscuous mode [ 185.890270][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.900780][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.910745][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.921240][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.926009][T11210] syz.1.2405[11210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.931038][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.931114][T11210] syz.1.2405[11210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.942403][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.942418][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.942431][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.943293][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.003838][T10827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.012607][T10827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.021351][T10827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.030058][T10827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.080801][T10906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.129138][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.153540][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.168611][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.175731][T10106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.184946][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.192080][T10106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.244290][T11066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 186.254671][T11066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.281315][T10906] veth0_vlan: entered promiscuous mode [ 186.311883][T10906] veth1_vlan: entered promiscuous mode [ 186.350506][T10906] veth0_macvtap: entered promiscuous mode [ 186.367197][T10906] veth1_macvtap: entered promiscuous mode [ 186.382013][T11240] veth0_vlan: entered allmulticast mode [ 186.431501][T11238] pim6reg1: entered promiscuous mode [ 186.436868][T11238] pim6reg1: entered allmulticast mode [ 186.456123][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.466581][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.476409][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.486823][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.496640][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.507103][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.517176][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.527782][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.537658][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.548079][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.559826][T10906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.567410][T11240] ÿÿÿÿÿÿ: renamed from vlan0 [ 186.589357][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.599870][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.609755][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.620167][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.629989][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.640552][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.650374][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.660781][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.670623][T10906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.681094][T10906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.693243][T10906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.702146][T10906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.710905][T10906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.719720][T10906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.728417][T10906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.746353][T11066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.834112][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.906485][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 187.061621][T11066] veth0_vlan: entered promiscuous mode [ 187.070763][T11066] veth1_vlan: entered promiscuous mode [ 187.099749][T11066] veth0_macvtap: entered promiscuous mode [ 187.107833][T11066] veth1_macvtap: entered promiscuous mode [ 187.121190][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.131719][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.141566][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.141588][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.141602][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.141614][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.141628][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.141640][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.141654][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.141666][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.141700][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.141764][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.159846][T11066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.270061][T11305] netlink: 11386 bytes leftover after parsing attributes in process `syz.0.2434'. [ 187.279372][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2436'. [ 187.288402][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2436'. [ 187.299807][T11308] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 187.308167][T11308] syz_tun: entered promiscuous mode [ 187.325237][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.335787][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.335797][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.335809][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.335817][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.376532][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.376639][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.376652][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.376665][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.376677][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.376688][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.376700][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.415003][T11066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.468973][T11066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.469008][T11066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.469080][T11066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.469105][T11066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.670568][T11326] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.821417][T11329] Â: renamed from pim6reg1 [ 187.874179][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.146919][T11368] loop3: detected capacity change from 0 to 1024 [ 188.156730][T11368] ext4: Unknown parameter 'mask' [ 188.166506][T11370] syz.1.2462[11370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.166572][T11370] syz.1.2462[11370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.220320][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 188.311338][T11389] pim6reg1: entered promiscuous mode [ 188.316894][T11389] pim6reg1: entered allmulticast mode [ 188.545989][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2490'. [ 188.565852][T11430] pim6reg1: entered promiscuous mode [ 188.571168][T11430] pim6reg1: entered allmulticast mode [ 188.656269][T11440] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.663627][T11440] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 188.882971][T11468] loop4: detected capacity change from 0 to 512 [ 188.889621][T11468] EXT4-fs: Ignoring removed nobh option [ 188.896750][T11468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.908428][T11468] EXT4-fs (loop4): 1 truncate cleaned up [ 188.914103][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.924620][T11468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.010461][T11482] syz.1.2514[11482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.010537][T11482] syz.1.2514[11482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.014518][T11468] loop4: detected capacity change from 512 to 0 [ 189.042017][T11482] syz.1.2514[11482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.042077][T11482] syz.1.2514[11482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.089058][T11066] bio_check_eod: 8 callbacks suppressed [ 189.089071][T11066] syz-executor: attempt to access beyond end of device [ 189.089071][T11066] loop4: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 189.139753][T11066] syz-executor: attempt to access beyond end of device [ 189.139753][T11066] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 189.165680][T11066] syz-executor: attempt to access beyond end of device [ 189.165680][T11066] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 189.191341][T11066] syz-executor: attempt to access beyond end of device [ 189.191341][T11066] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 189.208216][T11492] Invalid ELF header type: 0 != 1 [ 189.219005][T11066] syz-executor: attempt to access beyond end of device [ 189.219005][T11066] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 189.245590][T11066] syz-executor: attempt to access beyond end of device [ 189.245590][T11066] loop4: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 189.264196][T11066] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #2: block 5: comm syz-executor: unable to read itable block [ 189.279311][T11066] syz-executor: attempt to access beyond end of device [ 189.279311][T11066] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 189.292713][T11066] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 189.302406][T11066] EXT4-fs (loop4): I/O error while writing superblock [ 189.309223][T11066] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 189.319668][T11066] syz-executor: attempt to access beyond end of device [ 189.319668][T11066] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 189.333117][T11066] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 189.342872][T11066] EXT4-fs (loop4): I/O error while writing superblock [ 189.349712][T11066] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 189.362200][T11066] syz-executor: attempt to access beyond end of device [ 189.362200][T11066] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 189.375651][T11066] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 189.385602][T11066] EXT4-fs (loop4): I/O error while writing superblock [ 189.392494][ T40] kworker/u8:2: attempt to access beyond end of device [ 189.392494][ T40] loop4: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 189.408527][ T40] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #18: block 9: comm kworker/u8:2: unable to read itable block [ 189.422401][ T40] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 189.430666][ T40] EXT4-fs (loop4): I/O error while writing superblock [ 189.437533][ T40] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #2: block 5: comm kworker/u8:2: unable to read itable block [ 189.451215][ T40] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 189.459454][ T40] EXT4-fs (loop4): I/O error while writing superblock [ 189.466579][T11066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.475925][T11066] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 189.484523][T11066] EXT4-fs (loop4): I/O error while writing superblock [ 189.856398][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 189.865457][T11518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.872846][T11518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.904573][T11518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.911991][T11518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.954121][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.339407][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 190.515764][T11561] io-wq is not configured for unbound workers [ 190.577699][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 190.630084][T11563] ip6gretap1: entered allmulticast mode [ 190.806436][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 190.806556][ T29] audit: type=1400 audit(1725399175.017:3441): avc: denied { create } for pid=11570 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.858165][ T29] audit: type=1400 audit(1725399175.037:3442): avc: denied { create } for pid=11570 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.878885][ T29] audit: type=1400 audit(1725399175.047:3443): avc: denied { setopt } for pid=11570 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.908954][ T29] audit: type=1400 audit(1725399175.117:3444): avc: denied { write } for pid=11570 comm="syz.2.2556" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 190.965837][ T29] audit: type=1400 audit(1725399175.177:3445): avc: denied { write } for pid=11570 comm="syz.2.2556" path="socket:[40286]" dev="sockfs" ino=40286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 190.990284][ T29] audit: type=1400 audit(1725399175.177:3446): avc: denied { nlmsg_read } for pid=11570 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 191.011273][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.032724][T11552] ================================================================== [ 191.040820][T11552] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 191.048187][T11552] [ 191.050502][T11552] read-write to 0xffff888115856e68 of 4 bytes by task 11551 on cpu 1: [ 191.058638][T11552] mem_cgroup_iter+0x28e/0x380 [ 191.061869][T11551] syz.0.2548 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 191.063381][T11552] shrink_node+0x74a/0x1d40 [ 191.074406][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.0.2548 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 191.078754][T11552] do_try_to_free_pages+0x3c6/0xc50 [ 191.089475][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.094637][T11552] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 191.104666][T11551] Call Trace: [ 191.104675][T11551] [ 191.110523][T11552] try_charge_memcg+0x2bc/0x810 [ 191.113779][T11551] dump_stack_lvl+0xf2/0x150 [ 191.116685][T11552] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 191.121507][T11551] dump_stack+0x15/0x20 [ 191.126060][T11552] __read_swap_cache_async+0x2b7/0x520 [ 191.132180][T11551] dump_header+0x83/0x2d0 [ 191.136300][T11552] swap_cluster_readahead+0x276/0x3f0 [ 191.141728][T11551] oom_kill_process+0x341/0x4c0 [ 191.146020][T11552] swapin_readahead+0xe4/0x760 [ 191.151363][T11551] out_of_memory+0x9af/0xbe0 [ 191.156176][T11552] do_swap_page+0x3da/0x1ef0 [ 191.160909][T11551] ? __rcu_read_unlock+0x4e/0x70 [ 191.165464][T11552] handle_mm_fault+0x8cb/0x2a30 [ 191.170021][T11551] mem_cgroup_out_of_memory+0x13e/0x190 [ 191.174919][T11552] exc_page_fault+0x3b9/0x650 [ 191.179748][T11551] try_charge_memcg+0x51b/0x810 [ 191.185253][T11552] asm_exc_page_fault+0x26/0x30 [ 191.189903][T11551] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 191.194718][T11552] [ 191.194724][T11552] read to 0xffff888115856e68 of 4 bytes by task 11552 on cpu 0: [ 191.199537][T11551] __read_swap_cache_async+0x2b7/0x520 [ 191.205565][T11552] mem_cgroup_iter+0xba/0x380 [ 191.207869][T11551] swap_cluster_readahead+0x276/0x3f0 [ 191.215457][T11552] shrink_node+0x458/0x1d40 [ 191.220936][T11551] swapin_readahead+0xe4/0x760 [ 191.225570][T11552] do_try_to_free_pages+0x3c6/0xc50 [ 191.230914][T11551] ? __filemap_get_folio+0x420/0x5b0 [ 191.235381][T11552] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 191.240113][T11551] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 191.245275][T11552] try_charge_memcg+0x2bc/0x810 [ 191.245295][T11552] obj_cgroup_charge_pages+0xbd/0x1a0 [ 191.250549][T11551] ? swap_cache_get_folio+0x77/0x210 [ 191.256403][T11552] __memcg_kmem_charge_page+0x9d/0x170 [ 191.261932][T11551] do_swap_page+0x3da/0x1ef0 [ 191.266745][T11552] __alloc_pages_noprof+0x1bc/0x360 [ 191.272085][T11551] ? cgroup_rstat_updated+0x99/0x550 [ 191.277330][T11552] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 191.282759][T11551] ? __rcu_read_lock+0x36/0x50 [ 191.287315][T11552] alloc_pages_noprof+0xe1/0x100 [ 191.292480][T11551] ? pte_offset_map_nolock+0x124/0x1d0 [ 191.297728][T11552] __vmalloc_node_range_noprof+0x736/0xec0 [ 191.303071][T11551] handle_mm_fault+0x8cb/0x2a30 [ 191.307796][T11552] bpf_map_area_alloc+0xd8/0x110 [ 191.312709][T11551] exc_page_fault+0x3b9/0x650 [ 191.318120][T11552] prealloc_init+0xd6/0x470 [ 191.323895][T11551] asm_exc_page_fault+0x26/0x30 [ 191.328707][T11552] htab_map_alloc+0x630/0x8e0 [ 191.333612][T11551] RIP: 0033:0x7efcfa1509ac [ 191.338250][T11552] map_create+0x83c/0xb90 [ 191.342722][T11551] Code: 72 64 0f 1f 40 00 69 3d 06 4d e1 00 e8 03 00 00 48 8d 1d e7 55 2e 00 e8 72 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 191.347535][T11552] __sys_bpf+0x667/0x7a0 [ 191.352176][T11551] RSP: 002b:00007fff2ed56600 EFLAGS: 00010202 [ 191.356556][T11552] __x64_sys_bpf+0x43/0x50 [ 191.360852][T11551] [ 191.360857][T11551] RAX: 0000000000000000 RBX: 00007efcfa435f80 RCX: 0000000000000000 [ 191.380428][T11552] x64_sys_call+0x2625/0x2d60 [ 191.384636][T11551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555a2cf808 [ 191.390667][T11552] do_syscall_64+0xc9/0x1c0 [ 191.395058][T11551] RBP: 00007efcfa437a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 191.397357][T11552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.405298][T11551] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002eabc [ 191.409941][T11552] [ 191.409945][T11552] value changed: 0x000001b7 -> 0x000001b8 [ 191.417880][T11551] R13: 00007fff2ed56700 R14: 0000000000000032 R15: ffffffffffffffff [ 191.422347][T11552] [ 191.422351][T11552] Reported by Kernel Concurrency Sanitizer on: [ 191.430292][T11551] [ 191.436144][T11552] CPU: 0 UID: 0 PID: 11552 Comm: syz.0.2548 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 191.444982][T11551] memory: usage 307200kB, limit 307200kB, failcnt 10683 [ 191.446380][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.452065][T11551] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 191.460004][T11552] ================================================================== [ 191.517094][T11551] kmem: usage 307092kB, limit 9007199254740988kB, failcnt 0 [ 191.524416][T11551] Memory cgroup stats for /syz0: [ 191.536026][T11551] cache 86016 [ 191.544294][T11551] rss 0 [ 191.547039][T11551] shmem 0 [ 191.549956][T11551] mapped_file 86016 [ 191.553749][T11551] dirty 86016 [ 191.557322][T11551] writeback 8192 [ 191.560856][T11551] workingset_refault_anon 5 [ 191.565604][T11551] workingset_refault_file 0 [ 191.570098][T11551] swap 176128 [ 191.573386][T11551] swapcached 24576 [ 191.577108][T11551] pgpgin 227748 [ 191.580550][T11551] pgpgout 227721 [ 191.584153][T11551] pgfault 239308 [ 191.587681][T11551] pgmajfault 12 [ 191.591203][T11551] inactive_anon 0 [ 191.594849][T11551] active_anon 24576 [ 191.598640][T11551] inactive_file 0 [ 191.602256][T11551] active_file 86016 [ 191.606063][T11551] unevictable 0 [ 191.609512][T11551] hierarchical_memory_limit 314572800 [ 191.614884][T11551] hierarchical_memsw_limit 9223372036854771712 [ 191.621034][T11551] total_cache 86016 [ 191.624841][T11551] total_rss 0 [ 191.628112][T11551] total_shmem 0 [ 191.631566][T11551] total_mapped_file 86016 [ 191.636307][T11551] total_dirty 86016 [ 191.640112][T11551] total_writeback 8192 [ 191.644479][T11551] total_workingset_refault_anon 5 [ 191.649489][T11551] total_workingset_refault_file 0 [ 191.654581][T11551] total_swap 176128 [ 191.658438][T11551] total_swapcached 24576 [ 191.662657][T11551] total_pgpgin 227778 [ 191.666632][T11551] total_pgpgout 227751 [ 191.670670][T11551] total_pgfault 239354 [ 191.674722][T11551] total_pgmajfault 12 [ 191.678682][T11551] total_inactive_anon 0 [ 191.682808][T11551] total_active_anon 24576 [ 191.687129][T11551] total_inactive_file 0 [ 191.691253][T11551] total_active_file 86016 [ 191.695568][T11551] total_unevictable 0 [ 191.699530][T11551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2548,pid=11551,uid=0 [ 191.714443][T11551] Memory cgroup out of memory: Killed process 11551 (syz.0.2548) total-vm:89112kB, anon-rss:564kB, file-rss:16304kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 192.034131][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.074120][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.142509][T10106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.197008][T10106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.276825][T10106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.326510][T10106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.403759][T10106] bridge_slave_1: left allmulticast mode [ 193.409417][T10106] bridge_slave_1: left promiscuous mode [ 193.415030][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.422812][T10106] bridge_slave_0: left allmulticast mode [ 193.428470][T10106] bridge_slave_0: left promiscuous mode [ 193.434132][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.507867][T10106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.518357][T10106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.529422][T10106] bond0 (unregistering): Released all slaves [ 193.607255][T10106] hsr_slave_0: left promiscuous mode [ 193.612880][T10106] hsr_slave_1: left promiscuous mode [ 193.618660][T10106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.626054][T10106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.633610][T10106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.641011][T10106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.651834][T10106] veth1_macvtap: left promiscuous mode [ 193.657441][T10106] veth0_macvtap: left promiscuous mode [ 193.662896][T10106] veth1_vlan: left promiscuous mode [ 193.668129][T10106] veth0_vlan: left promiscuous mode [ 193.747537][T10106] team0 (unregistering): Port device team_slave_1 removed [ 193.757879][T10106] team0 (unregistering): Port device team_slave_0 removed [ 194.114131][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.164105][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.204126][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 197.234112][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.274111][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.314809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.354125][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available