last executing test programs: 16.603366775s ago: executing program 3 (id=462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) 15.385038617s ago: executing program 4 (id=470): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) chmod(&(0x7f00000000c0)='./file1\x00', 0x13) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 15.319304083s ago: executing program 4 (id=472): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 14.786905233s ago: executing program 4 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r2, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) 14.740882717s ago: executing program 4 (id=476): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14.402682228s ago: executing program 4 (id=479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 14.401925488s ago: executing program 2 (id=480): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="90000000100039042abd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="03000000c31006006000128008000100736974005400028008000100", @ANYRES32, @ANYBLOB="08000300ac1414bb0500040080000000060012004e22000005000a0001000000060010000070000008000c00"], 0x90}}, 0x0) 13.895805995s ago: executing program 3 (id=471): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800082}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) 13.573816575s ago: executing program 1 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 13.573370145s ago: executing program 2 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 13.573039045s ago: executing program 3 (id=483): bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 10.790819712s ago: executing program 0 (id=487): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) 10.789750623s ago: executing program 1 (id=488): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r0, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) 10.086964627s ago: executing program 2 (id=489): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x81, 0x81, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x15) 8.902700997s ago: executing program 3 (id=490): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x84}, 0x0, 0x1, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) splice(r0, 0x0, r4, 0x0, 0x20000000003ff, 0x0) 8.00620762s ago: executing program 0 (id=491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 7.302173195s ago: executing program 1 (id=492): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 6.59847935s ago: executing program 2 (id=493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r3, &(0x7f0000000300)=""/150, 0x96, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x400000000000}, 0x18) 5.894741455s ago: executing program 0 (id=494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 5.254751814s ago: executing program 1 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/6, 0x6}], 0x1}}], 0x1, 0x0, 0x0) 4.614227624s ago: executing program 0 (id=496): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 4.611956724s ago: executing program 1 (id=497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) 4.038939867s ago: executing program 2 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000400)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "522b7be1a2b527b8b47b595c0a16dabfd6b0181d525e15e7de7665997abe4f65", "33997080ee6f23ca34aa5f38047954ce", {"6e68421b9c7619babf635dd091ef08e2", "99568c2032d2f66dbf5c931b86c04146"}}}}}}}}, 0x0) 4.037838357s ago: executing program 3 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000340)={0x1}) 2.278372039s ago: executing program 0 (id=500): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0xfffffffffffffdfd}, 0x1e) 6.90235ms ago: executing program 1 (id=501): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r2, &(0x7f00000006c0)=""/102, 0xfffffffffffffed6, 0x0, 0x0, 0x0) 5.73073ms ago: executing program 2 (id=502): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 4.5185ms ago: executing program 4 (id=503): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x84}, 0x0, 0x1, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) write$binfmt_misc(r4, &(0x7f00000000c0), 0xfdef) splice(r0, 0x0, r4, 0x0, 0x20000000003ff, 0x0) 4.2532ms ago: executing program 0 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) dup3(r2, r3, 0x0) 0s ago: executing program 3 (id=505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x20000080) kernel console output (not intermixed with test programs): 5.252928][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.289283][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.301735][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.314264][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.328260][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.338855][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.369866][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.376989][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.386226][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.393345][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.415045][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.460987][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.508504][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.544138][ T3272] veth0_vlan: entered promiscuous mode [ 25.559533][ T3270] veth0_vlan: entered promiscuous mode [ 25.571575][ T3272] veth1_vlan: entered promiscuous mode [ 25.588016][ T3270] veth1_vlan: entered promiscuous mode [ 25.609759][ T3270] veth0_macvtap: entered promiscuous mode [ 25.621308][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.641303][ T3270] veth1_macvtap: entered promiscuous mode [ 25.649863][ T3272] veth0_macvtap: entered promiscuous mode [ 25.672067][ T3272] veth1_macvtap: entered promiscuous mode [ 25.687338][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.707883][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.716409][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.727009][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.737480][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.748447][ T3273] veth0_vlan: entered promiscuous mode [ 25.763009][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.773520][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.784000][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.793833][ T3270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.802859][ T3270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.811668][ T3270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.820426][ T3270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.836903][ T3272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.845713][ T3272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.854440][ T3272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.863153][ T3272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.874066][ T3273] veth1_vlan: entered promiscuous mode [ 25.890402][ T3266] veth0_vlan: entered promiscuous mode [ 25.907165][ T3266] veth1_vlan: entered promiscuous mode [ 25.919711][ T3265] veth0_vlan: entered promiscuous mode [ 25.938527][ T3272] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.946719][ T3265] veth1_vlan: entered promiscuous mode [ 25.962714][ T3273] veth0_macvtap: entered promiscuous mode [ 25.981915][ T3273] veth1_macvtap: entered promiscuous mode [ 25.999386][ T3266] veth0_macvtap: entered promiscuous mode [ 26.008694][ T3265] veth0_macvtap: entered promiscuous mode [ 26.018369][ T3265] veth1_macvtap: entered promiscuous mode [ 26.028315][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.038793][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.048646][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.059142][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.070853][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.078616][ T3266] veth1_macvtap: entered promiscuous mode [ 26.102878][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.113510][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.123343][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.133888][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.143858][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.154360][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.166175][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.173807][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.184325][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.194152][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.204671][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.216217][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.228585][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.239145][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.248985][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.259543][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.269360][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.279810][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.291113][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.299358][ T3273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.308224][ T3273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.317062][ T3273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.325841][ T3273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.342629][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.353225][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.363169][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.373608][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.383504][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.393970][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.403911][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.414370][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.425603][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.434206][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.444709][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.454560][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.465094][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.474938][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.485378][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.495195][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.505637][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.517322][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.528511][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.537388][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.546345][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.555095][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.603176][ T3266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.611981][ T3266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.620829][ T3266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.629656][ T3266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.682188][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 26.682201][ T29] audit: type=1400 audit(1727908480.981:138): avc: denied { create } for pid=3416 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.726421][ T3417] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4'. [ 26.744615][ T29] audit: type=1400 audit(1727908481.011:139): avc: denied { create } for pid=3416 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.746927][ T3417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 26.765041][ T29] audit: type=1400 audit(1727908481.021:140): avc: denied { create } for pid=3419 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.773770][ T3417] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4'. [ 26.792956][ T29] audit: type=1400 audit(1727908481.021:141): avc: denied { ioctl } for pid=3419 comm="syz.4.5" path="socket:[3596]" dev="sockfs" ino=3596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.792978][ T29] audit: type=1400 audit(1727908481.031:142): avc: denied { write } for pid=3416 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.801807][ T3417] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 26.853666][ T3417] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4'. [ 26.874861][ T29] audit: type=1400 audit(1727908481.151:143): avc: denied { name_bind } for pid=3421 comm="syz.1.2" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 26.876418][ T3420] macvlan0: entered promiscuous mode [ 26.896364][ T29] audit: type=1400 audit(1727908481.151:144): avc: denied { node_bind } for pid=3421 comm="syz.1.2" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.941150][ T3420] ipvlan0: entered promiscuous mode [ 26.952955][ T3420] ipvlan0: left promiscuous mode [ 26.974816][ T3420] macvlan0: left promiscuous mode [ 27.075531][ T3434] ======================================================= [ 27.075531][ T3434] WARNING: The mand mount option has been deprecated and [ 27.075531][ T3434] and is ignored by this kernel. Remove the mand [ 27.075531][ T3434] option from the mount to silence this warning. [ 27.075531][ T3434] ======================================================= [ 27.164906][ T29] audit: type=1400 audit(1727908481.451:145): avc: denied { mount } for pid=3433 comm="syz.0.11" name="/" dev="ramfs" ino=3638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.187081][ T29] audit: type=1400 audit(1727908481.461:146): avc: denied { setopt } for pid=3436 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.214796][ T29] audit: type=1400 audit(1727908481.511:147): avc: denied { read } for pid=3436 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.450163][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.457684][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.465121][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.472519][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.480046][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.487601][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.495029][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.502431][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.508443][ T3463] loop4: detected capacity change from 0 to 2048 [ 27.509951][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.523621][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.531212][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.538640][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.546052][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.553445][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.561019][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.568450][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.575898][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.583406][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.591004][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.598855][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.606331][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.613733][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.621261][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.628796][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.636466][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.644026][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.651535][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.658941][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.666447][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.673854][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.681341][ T3343] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.695168][ T3343] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 27.707101][ T3463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.822220][ T3480] syz.2.25[3480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.822274][ T3480] syz.2.25[3480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.835211][ T3480] syz.2.25[3480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.856619][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.946519][ T3498] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 27.970110][ C0] hrtimer: interrupt took 27467 ns [ 27.983675][ T3505] syz.1.34[3505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.983746][ T3505] syz.1.34[3505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.023361][ T3505] syz.1.34[3505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.076528][ T3516] netlink: 2 bytes leftover after parsing attributes in process `+}[@'. [ 28.136040][ T3522] loop3: detected capacity change from 0 to 512 [ 28.173378][ T3522] EXT4-fs: Ignoring removed orlov option [ 28.184814][ T3525] geneve2: entered promiscuous mode [ 28.190067][ T3525] geneve2: entered allmulticast mode [ 28.208081][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.220897][ T3522] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.264237][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.285157][ T3530] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.42'. [ 28.494359][ T3553] loop3: detected capacity change from 0 to 764 [ 28.524974][ T3553] hub 1-0:1.0: USB hub found [ 28.549937][ T3553] hub 1-0:1.0: 8 ports detected [ 28.607880][ T3567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.648424][ T3571] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.59'. [ 28.665690][ T3572] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 29.221268][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.270693][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.339287][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.391167][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.439678][ T3603] chnl_net:caif_netlink_parms(): no params data found [ 29.474241][ T3621] syz.2.79[3621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.474338][ T3621] syz.2.79[3621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.485758][ T3621] syz.2.79[3621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.530182][ T40] bridge_slave_1: left allmulticast mode [ 29.547048][ T40] bridge_slave_1: left promiscuous mode [ 29.552680][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.560573][ T40] bridge_slave_0: left allmulticast mode [ 29.566289][ T40] bridge_slave_0: left promiscuous mode [ 29.567518][ T3626] capability: warning: `syz.2.81' uses 32-bit capabilities (legacy support in use) [ 29.571907][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.687621][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 29.698240][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 29.708300][ T40] bond0 (unregistering): Released all slaves [ 29.772864][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.780016][ T3603] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.810233][ T3603] bridge_slave_0: entered allmulticast mode [ 29.827592][ T3603] bridge_slave_0: entered promiscuous mode [ 29.841412][ T3660] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 29.845458][ T3662] raw_sendmsg: syz.2.88 forgot to set AF_INET. Fix it! [ 29.883957][ T3668] syz.2.93[3668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.893686][ T40] hsr_slave_0: left promiscuous mode [ 29.912658][ T40] hsr_slave_1: left promiscuous mode [ 29.920375][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.927893][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.946086][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.953529][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.975125][ T40] veth1_macvtap: left promiscuous mode [ 29.980811][ T40] veth0_macvtap: left promiscuous mode [ 30.109242][ T40] team0 (unregistering): Port device team_slave_1 removed [ 30.131445][ T40] team0 (unregistering): Port device team_slave_0 removed [ 30.175113][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.182198][ T3603] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.191968][ T3603] bridge_slave_1: entered allmulticast mode [ 30.198542][ T3603] bridge_slave_1: entered promiscuous mode [ 30.226609][ T3677] netem: incorrect ge model size [ 30.231619][ T3677] netem: change failed [ 30.237416][ T3679] Zero length message leads to an empty skb [ 30.245666][ T3603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.288364][ T3690] loop3: detected capacity change from 0 to 512 [ 30.309072][ T3603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.327010][ T3690] EXT4-fs: Ignoring removed oldalloc option [ 30.385720][ T3690] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.102: Parent and EA inode have the same ino 15 [ 30.416272][ T3690] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.434380][ T3690] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.102: Parent and EA inode have the same ino 15 [ 30.454285][ T3603] team0: Port device team_slave_0 added [ 30.456720][ T3690] EXT4-fs (loop3): 1 orphan inode deleted [ 30.461038][ T3603] team0: Port device team_slave_1 added [ 30.484301][ T3603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.491357][ T3603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.517285][ T3603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.526317][ T3690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.528647][ T3603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.547352][ T3603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.573260][ T3603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.627830][ T3603] hsr_slave_0: entered promiscuous mode [ 30.646769][ T3603] hsr_slave_1: entered promiscuous mode [ 30.653661][ T3603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.661687][ T3713] netlink: 22 bytes leftover after parsing attributes in process `syz.0.106'. [ 30.673004][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.682062][ T3603] Cannot create hsr debugfs directory [ 30.731351][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 30.830484][ T3732] loop3: detected capacity change from 0 to 2048 [ 30.864728][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.918266][ T3750] loop2: detected capacity change from 0 to 2048 [ 30.936660][ T3732] loop3: detected capacity change from 2048 to 2047 [ 30.944652][ T3754] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #18: comm syz.3.111: corrupted in-inode xattr: bad magic number in in-inode xattr [ 30.960662][ T3754] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #18: comm syz.3.111: corrupted in-inode xattr: bad magic number in in-inode xattr [ 31.024476][ T3273] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /30/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1937076323, rec_len=29797, size=2048 fake=0 [ 31.083575][ T40] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 15315: padding at end of block bitmap is not set [ 31.107719][ T3603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.117033][ T40] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 31.127775][ T3603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.129339][ T40] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.129339][ T40] [ 31.145666][ T40] EXT4-fs (loop3): Total free blocks count 0 [ 31.151680][ T40] EXT4-fs (loop3): Free/Dirty block details [ 31.157630][ T40] EXT4-fs (loop3): free_blocks=0 [ 31.162573][ T40] EXT4-fs (loop3): dirty_blocks=16 [ 31.167856][ T40] EXT4-fs (loop3): Block reservation details [ 31.173845][ T40] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 31.181187][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.185816][ T3775] loop2: detected capacity change from 0 to 128 [ 31.196652][ T3603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.248840][ T3603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.267540][ T3780] netlink: 'syz.1.121': attribute type 5 has an invalid length. [ 31.329928][ T3603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.346678][ T3603] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.372910][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.380090][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.398699][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.405842][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.461675][ T3806] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET) [ 31.520079][ T3603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.699213][ T3853] loop2: detected capacity change from 0 to 512 [ 31.731440][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.759001][ T3853] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.812345][ T3816] chnl_net:caif_netlink_parms(): no params data found [ 31.844982][ T3853] loop2: detected capacity change from 512 to 0 [ 31.873261][ T3270] syz-executor: attempt to access beyond end of device [ 31.873261][ T3270] loop2: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 31.899469][ T1853] kworker/u8:6: attempt to access beyond end of device [ 31.899469][ T1853] loop2: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 31.917976][ T1853] kworker/u8:6: attempt to access beyond end of device [ 31.917976][ T1853] loop2: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 31.935505][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.935704][ T1853] kworker/u8:6: attempt to access beyond end of device [ 31.935704][ T1853] loop2: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 31.942650][ T3816] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.964054][ T3816] bridge_slave_0: entered allmulticast mode [ 31.967484][ T1853] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:6: unable to read itable block [ 31.972740][ T3816] bridge_slave_0: entered promiscuous mode [ 31.985075][ T1853] kworker/u8:6: attempt to access beyond end of device [ 31.985075][ T1853] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 31.999209][ T3603] veth0_vlan: entered promiscuous mode [ 32.003237][ T1853] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 32.011045][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.023956][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.024868][ T1853] EXT4-fs (loop2): I/O error while writing superblock [ 32.038528][ T3270] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.040705][ T3816] bridge_slave_1: entered allmulticast mode [ 32.052660][ T3270] syz-executor: attempt to access beyond end of device [ 32.052660][ T3270] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 32.053955][ T3816] bridge_slave_1: entered promiscuous mode [ 32.066985][ T3270] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 32.068764][ T3270] EXT4-fs (loop2): I/O error while writing superblock [ 32.088280][ T3859] kmmpd-loop2: attempt to access beyond end of device [ 32.088280][ T3859] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 32.101742][ T3859] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 32.120770][ T3816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.131080][ T3603] veth1_vlan: entered promiscuous mode [ 32.138863][ T3816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.154724][ T3603] veth0_macvtap: entered promiscuous mode [ 32.190308][ T3603] veth1_macvtap: entered promiscuous mode [ 32.196583][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 32.196595][ T29] audit: type=1400 audit(1727908486.501:337): avc: denied { create } for pid=3895 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.197879][ T3816] team0: Port device team_slave_0 added [ 32.229933][ T3816] team0: Port device team_slave_1 added [ 32.237049][ T29] audit: type=1400 audit(1727908486.541:338): avc: denied { setopt } for pid=3895 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.239518][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.266877][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.276729][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.287150][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.296952][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.307463][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.317266][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.327781][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.338870][ T3603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.351924][ T3898] loop1: detected capacity change from 0 to 128 [ 32.371080][ T3898] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.379028][ T3898] FAT-fs (loop1): Filesystem has been set read-only [ 32.386460][ T3898] syz.1.137: attempt to access beyond end of device [ 32.386460][ T3898] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 32.399691][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.410460][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.420332][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.421461][ T3898] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.430792][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.430805][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.438672][ T3898] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.448450][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.448460][ T3603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.486978][ T3603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.501797][ T3898] syz.1.137: attempt to access beyond end of device [ 32.501797][ T3898] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.515074][ T3898] syz.1.137: attempt to access beyond end of device [ 32.515074][ T3898] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.525755][ T3603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.535801][ T3816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.542755][ T3816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.568791][ T3816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.581297][ T29] audit: type=1400 audit(1727908486.871:339): avc: denied { shutdown } for pid=3899 comm="syz.0.139" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.614656][ T148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.627099][ T3603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.635872][ T3603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.644765][ T3603] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.653548][ T3603] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.665660][ T3816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.672624][ T3816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.698634][ T3816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.706538][ T29] audit: type=1400 audit(1727908486.971:340): avc: denied { bind } for pid=3910 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.729363][ T29] audit: type=1400 audit(1727908486.971:341): avc: denied { setopt } for pid=3910 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.763830][ T3816] hsr_slave_0: entered promiscuous mode [ 32.783091][ T3816] hsr_slave_1: entered promiscuous mode [ 32.789292][ T3816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.797108][ T3816] Cannot create hsr debugfs directory [ 32.806906][ T148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.818182][ T29] audit: type=1400 audit(1727908487.121:342): avc: denied { ioctl } for pid=3910 comm="syz.0.142" path="socket:[4860]" dev="sockfs" ino=4860 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.852540][ T3915] netem: change failed [ 32.888179][ T29] audit: type=1400 audit(1727908487.191:343): avc: denied { wake_alarm } for pid=3921 comm="syz.0.145" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.891893][ T148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.938576][ T29] audit: type=1400 audit(1727908487.241:344): avc: denied { mounton } for pid=3603 comm="syz-executor" path="/root/syzkaller.rpixZo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.978671][ T3920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.012203][ T29] audit: type=1400 audit(1727908487.311:345): avc: denied { create } for pid=3927 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.031683][ T29] audit: type=1400 audit(1727908487.311:346): avc: denied { connect } for pid=3927 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.054639][ T148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.105351][ T3920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.173205][ T3816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.198902][ T3920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.252303][ T3816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.279232][ T3920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.299091][ T3902] chnl_net:caif_netlink_parms(): no params data found [ 33.317053][ T3816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.336514][ T148] bridge_slave_1: left allmulticast mode [ 33.342316][ T148] bridge_slave_1: left promiscuous mode [ 33.348125][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.356877][ T148] bridge_slave_0: left allmulticast mode [ 33.362622][ T148] bridge_slave_0: left promiscuous mode [ 33.368381][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.447259][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.457783][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.468081][ T148] bond0 (unregistering): Released all slaves [ 33.492541][ T3816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.519746][ T3920] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.527735][ T3952] loop4: detected capacity change from 0 to 512 [ 33.534682][ T3952] EXT4-fs: dax option not supported [ 33.542487][ T148] hsr_slave_0: left promiscuous mode [ 33.554068][ T148] hsr_slave_1: left promiscuous mode [ 33.562884][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.570426][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.579673][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.587138][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.601823][ T148] veth1_macvtap: left promiscuous mode [ 33.607420][ T148] veth0_macvtap: left promiscuous mode [ 33.612897][ T148] veth1_vlan: left promiscuous mode [ 33.618310][ T148] veth0_vlan: left promiscuous mode [ 33.696334][ T148] team0 (unregistering): Port device team_slave_1 removed [ 33.707211][ T148] team0 (unregistering): Port device team_slave_0 removed [ 33.749665][ T3920] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.768597][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.775885][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.783052][ T3902] bridge_slave_0: entered allmulticast mode [ 33.789574][ T3902] bridge_slave_0: entered promiscuous mode [ 33.796531][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.803638][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.811141][ T3902] bridge_slave_1: entered allmulticast mode [ 33.817527][ T3902] bridge_slave_1: entered promiscuous mode [ 33.831931][ T3920] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.855339][ T3902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.871660][ T3920] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.887968][ T3902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.951506][ T3902] team0: Port device team_slave_0 added [ 33.964544][ T3965] loop1: detected capacity change from 0 to 512 [ 33.976294][ T3902] team0: Port device team_slave_1 added [ 33.986634][ T3965] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.000423][ T3816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.000602][ T3965] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.020317][ T3965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.032209][ T3816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.042204][ T3965] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.159: corrupted in-inode xattr: e_value out of bounds [ 34.065168][ T3816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.075925][ T3816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.083540][ T3965] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.159: couldn't read orphan inode 15 (err -117) [ 34.098236][ T3902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.105250][ T3902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.131158][ T3902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.143603][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.146937][ T3902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.162630][ T3902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.188585][ T3902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.227094][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 34.260569][ T3902] hsr_slave_0: entered promiscuous mode [ 34.269452][ T3902] hsr_slave_1: entered promiscuous mode [ 34.276736][ T3902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.284415][ T3902] Cannot create hsr debugfs directory [ 34.297021][ T3983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 34.298241][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.351255][ T3816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.432224][ T3816] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.458549][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.465704][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.474861][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.481973][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.564025][ T3816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.665555][ T3998] bpf_get_probe_write_proto: 2 callbacks suppressed [ 34.665573][ T3998] syz.1.168[3998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.682279][ T3998] syz.1.168[3998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.697835][ T3998] syz.1.168[3998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.703372][ T3816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.761656][ T4035] loop4: detected capacity change from 0 to 512 [ 34.808572][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.821599][ T3902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.828810][ T4035] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.846277][ T3902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.859123][ T3902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.893650][ T3603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.917318][ T3902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.939201][ T4059] macvlan0: entered promiscuous mode [ 34.971055][ T4064] loop4: detected capacity change from 0 to 1024 [ 34.979090][ T4059] ipvlan0: entered promiscuous mode [ 34.982512][ T4064] EXT4-fs: Ignoring removed oldalloc option [ 34.985058][ T4059] ipvlan0: left promiscuous mode [ 35.005706][ T4059] macvlan0: left promiscuous mode [ 35.024531][ T3816] veth0_vlan: entered promiscuous mode [ 35.033131][ T3816] veth1_vlan: entered promiscuous mode [ 35.035162][ T4064] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0102] [ 35.050195][ T4064] System zones: 0-1, 3-12 [ 35.053774][ T3816] veth0_macvtap: entered promiscuous mode [ 35.056210][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.062305][ T3816] veth1_macvtap: entered promiscuous mode [ 35.082262][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.092777][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.102689][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.113189][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.123047][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.133548][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.143446][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.153985][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.164963][ T3816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.189858][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.200373][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.210266][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.220703][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.230529][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.240999][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.250842][ T3816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.261267][ T3816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.272014][ T3816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.314112][ T3603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.334531][ T4083] syz.0.186[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.334647][ T4083] syz.0.186[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.346069][ T4083] syz.0.186[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.371666][ T3816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.391711][ T3816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.400603][ T3816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.409353][ T3816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.469160][ T3902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.480768][ T3902] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.500197][ T3902] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.510687][ T3902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.530255][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.537421][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.546954][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.554108][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.606679][ T3902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.698433][ T3902] veth0_vlan: entered promiscuous mode [ 35.716864][ T3902] veth1_vlan: entered promiscuous mode [ 35.770287][ T3902] veth0_macvtap: entered promiscuous mode [ 35.798776][ T3902] veth1_macvtap: entered promiscuous mode [ 35.822845][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.833494][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.843507][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.854005][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.864113][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.874727][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.884898][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.895366][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.905394][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.915914][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.929633][ T3902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.930065][ T4154] netlink: 332 bytes leftover after parsing attributes in process `+}[@'. [ 35.938086][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.956011][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.965868][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.976365][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.986265][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.996700][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.006586][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.017067][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.026889][ T3902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.037333][ T3902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.048245][ T3902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.048423][ T4154] netlink: '+}[@': attribute type 9 has an invalid length. [ 36.062947][ T4154] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 36.071555][ T4154] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 36.121469][ T3902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.130265][ T3902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.139150][ T3902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.148023][ T3902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.169980][ T4177] loop1: detected capacity change from 0 to 1024 [ 36.180769][ T4177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.201730][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 36.210580][ T4184] netlink: 'syz.0.205': attribute type 15 has an invalid length. [ 36.218401][ T4184] netlink: 'syz.0.205': attribute type 18 has an invalid length. [ 36.229926][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.310620][ T4205] syz.2.212[4205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.310711][ T4205] syz.2.212[4205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.330266][ T4205] syz.2.212[4205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.390512][ T4220] loop1: detected capacity change from 0 to 512 [ 36.432544][ T4227] pim6reg1: entered promiscuous mode [ 36.437949][ T4227] pim6reg1: entered allmulticast mode [ 36.558566][ T4220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.586918][ T4220] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.614366][ T4220] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #18: comm syz.1.215: corrupted inode contents [ 36.628176][ T4220] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #18: comm syz.1.215: mark_inode_dirty error [ 36.642429][ T4220] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #18: comm syz.1.215: corrupted inode contents [ 36.648228][ T4296] xt_hashlimit: size too large, truncated to 1048576 [ 36.672578][ T4220] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #18: comm syz.1.215: mark_inode_dirty error [ 36.685890][ T4220] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #18: comm syz.1.215: mark inode dirty (error -117) [ 36.719576][ T4220] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 36.757669][ T4220] syz.1.215 (4220) used greatest stack depth: 10064 bytes left [ 36.767867][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.783559][ T4306] loop3: detected capacity change from 0 to 512 [ 36.794275][ T4306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.814134][ T4306] EXT4-fs (loop3): 1 truncate cleaned up [ 36.820479][ T4306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.885802][ T3816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.166566][ T4330] loop2: detected capacity change from 0 to 512 [ 37.173854][ T4328] loop4: detected capacity change from 0 to 512 [ 37.184656][ T4328] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 37.196817][ T4328] EXT4-fs (loop4): invalid journal inode [ 37.202493][ T4328] EXT4-fs (loop4): can't get journal size [ 37.213552][ T4328] EXT4-fs (loop4): 1 truncate cleaned up [ 37.220711][ T4328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.269123][ T3603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.271408][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 37.271436][ T29] audit: type=1400 audit(1727908491.571:510): avc: denied { setopt } for pid=4339 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.335375][ T29] audit: type=1400 audit(1727908491.631:511): avc: denied { create } for pid=4343 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.372664][ T4348] loop4: detected capacity change from 0 to 1024 [ 37.383276][ T29] audit: type=1400 audit(1727908491.641:512): avc: denied { ioctl } for pid=4343 comm="syz.2.237" path="socket:[6862]" dev="sockfs" ino=6862 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.385357][ T4348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.420599][ T4348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 37.429655][ T4348] System zones: 0-1, 3-36 [ 37.435534][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.444298][ T29] audit: type=1400 audit(1727908491.741:513): avc: denied { write } for pid=4349 comm="syz.3.239" path="socket:[6875]" dev="sockfs" ino=6875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.478100][ T29] audit: type=1400 audit(1727908491.781:514): avc: denied { write } for pid=4347 comm="syz.4.238" path="/26/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.500512][ T29] audit: type=1400 audit(1727908491.781:515): avc: denied { mounton } for pid=4347 comm="syz.4.238" path="/26/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.554983][ T4348] loop4: detected capacity change from 1024 to 11 [ 37.561536][ T4356] syz.4.238: attempt to access beyond end of device [ 37.561536][ T4356] loop4: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 37.576191][ T4356] syz.4.238: attempt to access beyond end of device [ 37.576191][ T4356] loop4: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 37.589903][ T4356] syz.4.238: attempt to access beyond end of device [ 37.589903][ T4356] loop4: rw=524288, sector=40, nr_sectors = 2 limit=11 [ 37.603291][ T4356] syz.4.238: attempt to access beyond end of device [ 37.603291][ T4356] loop4: rw=524288, sector=42, nr_sectors = 2 limit=11 [ 37.617103][ T4356] syz.4.238: attempt to access beyond end of device [ 37.617103][ T4356] loop4: rw=524288, sector=46, nr_sectors = 2 limit=11 [ 37.631913][ T4356] syz.4.238: attempt to access beyond end of device [ 37.631913][ T4356] loop4: rw=12288, sector=44, nr_sectors = 2 limit=11 [ 37.641426][ T4367] loop1: detected capacity change from 0 to 512 [ 37.647842][ T4356] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #18: block 22: comm syz.4.238: unable to read itable block [ 37.664582][ T4356] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 37.675126][ T4356] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #18: comm syz.4.238: mark_inode_dirty error [ 37.683754][ T29] audit: type=1400 audit(1727908491.981:516): avc: denied { unmount } for pid=4368 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.687462][ T4356] syz.4.238: attempt to access beyond end of device [ 37.687462][ T4356] loop4: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 37.720465][ T4367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.727866][ T4356] syz.4.238: attempt to access beyond end of device [ 37.727866][ T4356] loop4: rw=524288, sector=14, nr_sectors = 2 limit=11 [ 37.733424][ T4367] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.757459][ T4356] syz.4.238: attempt to access beyond end of device [ 37.757459][ T4356] loop4: rw=524288, sector=40, nr_sectors = 2 limit=11 [ 37.771175][ T4356] syz.4.238: attempt to access beyond end of device [ 37.771175][ T4356] loop4: rw=524288, sector=42, nr_sectors = 2 limit=11 [ 37.785346][ T4356] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #18: block 22: comm syz.4.238: unable to read itable block [ 37.798442][ T4356] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #18: comm syz.4.238: can't get inode location 18 [ 37.811345][ T4356] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #18: block 22: comm syz.4.238: unable to read itable block [ 37.827412][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.855123][ T3603] EXT4-fs error (device loop4): ext4_get_inode_loc:4541: inode #2: block 6: comm syz-executor: unable to read itable block [ 37.869503][ T3603] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: IO failure [ 37.879203][ T3603] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 37.891114][ T1853] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4526: inode #18: block 22: comm kworker/u8:6: unable to read itable block [ 37.907142][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 37.907483][ T3603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.916428][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 37.965338][ T29] audit: type=1400 audit(1727908492.271:517): avc: denied { create } for pid=4380 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.997248][ T29] audit: type=1400 audit(1727908492.301:518): avc: denied { create } for pid=4380 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.016739][ T29] audit: type=1400 audit(1727908492.301:519): avc: denied { write } for pid=4380 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.081608][ T4274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.135697][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 38.153632][ T4274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.243905][ T4274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.297278][ T4392] chnl_net:caif_netlink_parms(): no params data found [ 38.328959][ T4423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.373354][ T4274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.401036][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.408186][ T4392] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.415498][ T4392] bridge_slave_0: entered allmulticast mode [ 38.421933][ T4392] bridge_slave_0: entered promiscuous mode [ 38.428733][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.435819][ T4392] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.442941][ T4392] bridge_slave_1: entered allmulticast mode [ 38.449503][ T4392] bridge_slave_1: entered promiscuous mode [ 38.480445][ T4392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.509093][ T4392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.533039][ T4274] bridge_slave_1: left allmulticast mode [ 38.538766][ T4274] bridge_slave_1: left promiscuous mode [ 38.544445][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.557170][ T4274] bridge_slave_0: left allmulticast mode [ 38.562847][ T4274] bridge_slave_0: left promiscuous mode [ 38.568553][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.747610][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.759662][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.770360][ T4274] bond0 (unregistering): Released all slaves [ 38.784646][ T4392] team0: Port device team_slave_0 added [ 38.799166][ T4392] team0: Port device team_slave_1 added [ 38.834042][ T4274] hsr_slave_0: left promiscuous mode [ 38.839979][ T4274] hsr_slave_1: left promiscuous mode [ 38.847202][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.854720][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.862470][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.869964][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.881115][ T4274] veth1_macvtap: left promiscuous mode [ 38.886647][ T4274] veth0_macvtap: left promiscuous mode [ 38.892174][ T4274] veth1_vlan: left promiscuous mode [ 38.897445][ T4274] veth0_vlan: left promiscuous mode [ 39.041194][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 39.053246][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 39.095434][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.102478][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.128551][ T4392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.149967][ T4392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.157041][ T4392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.183017][ T4392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.228265][ T4392] hsr_slave_0: entered promiscuous mode [ 39.234378][ T4392] hsr_slave_1: entered promiscuous mode [ 39.241456][ T4392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.250745][ T4392] Cannot create hsr debugfs directory [ 39.284240][ T4467] loop2: detected capacity change from 0 to 512 [ 39.311362][ T4467] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.359704][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 39.367325][ T4467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.390014][ T4467] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.453164][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.460329][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.470271][ T3902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.480108][ T4440] bridge_slave_0: entered allmulticast mode [ 39.492581][ T4440] bridge_slave_0: entered promiscuous mode [ 39.499477][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.506555][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.513789][ T4440] bridge_slave_1: entered allmulticast mode [ 39.520411][ T4440] bridge_slave_1: entered promiscuous mode [ 39.540498][ T4485] pim6reg1: entered promiscuous mode [ 39.545884][ T4485] pim6reg1: entered allmulticast mode [ 39.557405][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.583206][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.608481][ T4440] team0: Port device team_slave_0 added [ 39.615145][ T4440] team0: Port device team_slave_1 added [ 39.631730][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.638706][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.665074][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.676242][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.683212][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.709204][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.735023][ T4440] hsr_slave_0: entered promiscuous mode [ 39.741099][ T4440] hsr_slave_1: entered promiscuous mode [ 39.747045][ T4440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.754603][ T4440] Cannot create hsr debugfs directory [ 39.763065][ T4274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.800107][ T4392] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.830497][ T4274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.842202][ T4392] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.862573][ T4392] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.878679][ T4392] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.902523][ T4274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.941068][ T4274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.943681][ T4497] loop2: detected capacity change from 0 to 128 [ 39.957744][ T4499] loop1: detected capacity change from 0 to 256 [ 40.003248][ T4501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 40.004032][ T4392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.025030][ T4499] loop1: detected capacity change from 256 to 11 [ 40.032206][ T4499] FAT-fs (loop1): unable to read inode block for updating (i_pos 202) [ 40.055795][ T4392] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.069712][ T4274] bridge_slave_1: left allmulticast mode [ 40.075610][ T4274] bridge_slave_1: left promiscuous mode [ 40.081288][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.089647][ T4274] bridge_slave_0: left allmulticast mode [ 40.095458][ T4274] bridge_slave_0: left promiscuous mode [ 40.101178][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.207583][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.220361][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.233776][ T4274] bond0 (unregistering): Released all slaves [ 40.252978][ T1853] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.260115][ T1853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.271338][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.278509][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.289313][ T4517] IPv4: Oversized IP packet from 136.202.26.0 [ 40.299782][ T4274] hsr_slave_0: left promiscuous mode [ 40.306984][ T4274] hsr_slave_1: left promiscuous mode [ 40.313730][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.321219][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.342698][ T4519] process 'syz.2.304' launched './file1' with NULL argv: empty string added [ 40.355214][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.362716][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.373567][ T4522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.305'. [ 40.387027][ T4274] veth1_macvtap: left promiscuous mode [ 40.391898][ T3266] FAT-fs (loop1): Directory bread(block 3) failed [ 40.392511][ T4274] veth0_macvtap: left promiscuous mode [ 40.392589][ T4274] veth1_vlan: left promiscuous mode [ 40.392617][ T4274] veth0_vlan: left promiscuous mode [ 40.501499][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 40.511967][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 40.623249][ T4392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.634216][ T4392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.757938][ T4392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.800602][ T4440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.814297][ T4440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.838055][ T4440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.849544][ T4440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.974520][ T3340] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 40.978829][ T4392] veth0_vlan: entered promiscuous mode [ 40.981961][ T3340] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 40.994588][ T4392] veth1_vlan: entered promiscuous mode [ 40.998341][ T3340] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.005033][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.017797][ T3340] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6 [ 41.025358][ T3340] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd [ 41.034084][ T3340] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 41.054405][ T4274] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.074209][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.094772][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.101923][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.127544][ T4274] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.144560][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.151617][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.176865][ T4274] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.196405][ T4440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.206868][ T4440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.244429][ T4392] veth0_macvtap: entered promiscuous mode [ 41.251878][ T4392] veth1_macvtap: entered promiscuous mode [ 41.261948][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.272745][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.282890][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.293459][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.303375][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.313839][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.323745][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.334210][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.344896][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.353029][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.363513][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.373387][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.383845][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.393756][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.404237][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.414096][ T4392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.424523][ T4392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.436181][ T4392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.463449][ T4556] chnl_net:caif_netlink_parms(): no params data found [ 41.478076][ T4274] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.505019][ T4392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.513810][ T4392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.522740][ T4392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.531432][ T4392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.554684][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.572630][ T4615] loop7: detected capacity change from 0 to 7 [ 41.579720][ T4615] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.588823][ T4615] Buffer I/O error on dev loop7, logical block 0, async page read [ 41.596711][ T4615] loop7: unable to read partition table [ 41.603654][ T4615] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 41.603654][ T4615] ) failed (rc=-5) [ 41.641330][ T4556] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.648563][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.691736][ T4556] bridge_slave_0: entered allmulticast mode [ 41.698765][ T4556] bridge_slave_0: entered promiscuous mode [ 41.719394][ T4274] bridge_slave_1: left allmulticast mode [ 41.725203][ T4274] bridge_slave_1: left promiscuous mode [ 41.730950][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.734257][ T4633] loop2: detected capacity change from 0 to 1024 [ 41.746440][ T4274] bridge_slave_0: left allmulticast mode [ 41.752210][ T4274] bridge_slave_0: left promiscuous mode [ 41.758017][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.767912][ T4633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.780228][ T4633] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.821776][ T3902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.877016][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.887271][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.897773][ T4274] bond0 (unregistering): Released all slaves [ 41.905909][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.913071][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.921669][ T4556] bridge_slave_1: entered allmulticast mode [ 41.928097][ T4556] bridge_slave_1: entered promiscuous mode [ 41.940381][ T4627] pim6reg1: entered promiscuous mode [ 41.945785][ T4627] pim6reg1: entered allmulticast mode [ 41.963133][ T4274] hsr_slave_0: left promiscuous mode [ 41.968890][ T4274] hsr_slave_1: left promiscuous mode [ 41.974596][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.982061][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.990162][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.997809][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.006976][ T4274] veth1_macvtap: left promiscuous mode [ 42.012541][ T4274] veth0_macvtap: left promiscuous mode [ 42.018276][ T4274] veth1_vlan: left promiscuous mode [ 42.023559][ T4274] veth0_vlan: left promiscuous mode [ 42.114182][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 42.125053][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 42.176324][ T4556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.185567][ T4642] bridge0: port 3(gretap0) entered blocking state [ 42.192044][ T4642] bridge0: port 3(gretap0) entered disabled state [ 42.198632][ T4642] gretap0: entered allmulticast mode [ 42.206179][ T4642] gretap0: entered promiscuous mode [ 42.211543][ T4642] bridge0: port 3(gretap0) entered blocking state [ 42.218074][ T4642] bridge0: port 3(gretap0) entered forwarding state [ 42.226410][ T4650] netlink: 'syz.2.345': attribute type 27 has an invalid length. [ 42.274766][ T29] kauditd_printk_skb: 1554 callbacks suppressed [ 42.274780][ T29] audit: type=1326 audit(1727908496.571:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e0f5d9959 code=0x7ffc0000 [ 42.304503][ T29] audit: type=1326 audit(1727908496.591:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f7e0f63dff9 code=0x7ffc0000 [ 42.327935][ T29] audit: type=1326 audit(1727908496.591:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e0f634fa7 code=0x7ffc0000 [ 42.351370][ T29] audit: type=1326 audit(1727908496.591:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e0f5d9959 code=0x7ffc0000 [ 42.374649][ T29] audit: type=1326 audit(1727908496.591:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e0f634fa7 code=0x7ffc0000 [ 42.398049][ T29] audit: type=1326 audit(1727908496.591:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e0f5d9959 code=0x7ffc0000 [ 42.421419][ T29] audit: type=1326 audit(1727908496.591:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e0f634fa7 code=0x7ffc0000 [ 42.444634][ T29] audit: type=1326 audit(1727908496.591:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e0f5d9959 code=0x7ffc0000 [ 42.468044][ T29] audit: type=1326 audit(1727908496.591:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e0f634fa7 code=0x7ffc0000 [ 42.491348][ T29] audit: type=1326 audit(1727908496.591:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4656 comm="syz.0.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e0f5d9959 code=0x7ffc0000 [ 42.517190][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.524432][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.610139][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.620980][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.670763][ T4650] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.679727][ T4650] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.688703][ T4650] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.697601][ T4650] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.715948][ T4556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.744400][ T4440] veth0_vlan: entered promiscuous mode [ 42.783831][ T4556] team0: Port device team_slave_0 added [ 42.798422][ T4440] veth1_vlan: entered promiscuous mode [ 42.804519][ T4663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.350'. [ 42.820647][ T4440] veth0_macvtap: entered promiscuous mode [ 42.829550][ T4556] team0: Port device team_slave_1 added [ 42.852536][ T4556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.859593][ T4556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.885567][ T4556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.909627][ T4440] veth1_macvtap: entered promiscuous mode [ 42.916795][ T4556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.923871][ T4556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.930160][ T4681] loop2: detected capacity change from 0 to 256 [ 42.949877][ T4556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.992026][ T4556] hsr_slave_0: entered promiscuous mode [ 42.998169][ T4556] hsr_slave_1: entered promiscuous mode [ 43.004064][ T4556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.012202][ T4556] Cannot create hsr debugfs directory [ 43.046169][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.056663][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.066473][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.076927][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.086811][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.097351][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.109667][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.134468][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.145055][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.155003][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.165590][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.175496][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.186119][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.197486][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.206416][ T4440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.215312][ T4440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.224067][ T4440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.232766][ T4440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.307364][ T4701] loop4: detected capacity change from 0 to 512 [ 43.317783][ T4701] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 43.366685][ T4708] loop4: detected capacity change from 0 to 512 [ 43.396577][ T4708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.409152][ T4708] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.422250][ T4708] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 43.444411][ T4392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.580896][ T4729] syzkaller0: entered promiscuous mode [ 43.586541][ T4729] syzkaller0: entered allmulticast mode [ 43.601250][ T4734] loop2: detected capacity change from 0 to 1024 [ 43.646746][ T4734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.664030][ T4556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.682115][ T4556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.721265][ T4556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.754423][ T4556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.842705][ T4556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.872713][ T4556] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.889995][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.897208][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.016126][ T4556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.026584][ T4556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.047089][ T3902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.073156][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.080331][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.212038][ T4556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.336443][ T4556] veth0_vlan: entered promiscuous mode [ 44.360290][ T4556] veth1_vlan: entered promiscuous mode [ 44.387211][ T4556] veth0_macvtap: entered promiscuous mode [ 44.401748][ T4556] veth1_macvtap: entered promiscuous mode [ 44.413110][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.423913][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.433758][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.444381][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.454420][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.464990][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.474894][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.485334][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.497568][ T4556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.509216][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.519797][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.529759][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.540252][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.550225][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.560895][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.570725][ T4556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.581316][ T4556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.592590][ T4556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.603392][ T4556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.612217][ T4556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620958][ T4556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.629873][ T4556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.708285][ T4785] loop1: detected capacity change from 0 to 512 [ 44.720158][ T4785] EXT4-fs: Ignoring removed i_version option [ 44.726346][ T4785] EXT4-fs: Ignoring removed nobh option [ 44.732641][ T4785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.762188][ T4785] EXT4-fs (loop1): 1 truncate cleaned up [ 44.768519][ T4785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.815683][ T4798] syz.0.398[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.815735][ T4798] syz.0.398[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.837191][ T4798] syz.0.398[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.854269][ T4798] syz.0.398[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.855587][ T4556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.867929][ T4798] syz.0.398[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.887375][ T4808] syz.2.404[4808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.890748][ T4798] syz.0.398[4798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.919148][ T4808] syz.2.404[4808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.949445][ T4808] syz.2.404[4808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.996472][ T4824] pim6reg1: entered promiscuous mode [ 45.013290][ T4824] pim6reg1: entered allmulticast mode [ 45.043903][ T4828] bond1: entered promiscuous mode [ 45.049049][ T4828] bond1: entered allmulticast mode [ 45.054395][ T4828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.066152][ T4828] bond1 (unregistering): Released all slaves [ 45.293092][ T4853] pim6reg1: entered promiscuous mode [ 45.298503][ T4853] pim6reg1: entered allmulticast mode [ 45.408852][ T4866] loop4: detected capacity change from 0 to 512 [ 45.417163][ T4866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.428182][ T4866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 45.436195][ T4866] System zones: 1-12 [ 45.440418][ T4866] EXT4-fs (loop4): 1 truncate cleaned up [ 45.446504][ T4866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.489338][ T4872] team_slave_0: entered promiscuous mode [ 45.495001][ T4872] team_slave_1: entered promiscuous mode [ 45.501525][ T4872] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.511310][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 45.520344][ T4873] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (880048229) [ 45.644527][ T4878] tipc: Started in network mode [ 45.649484][ T4878] tipc: Node identity aa2ac3f649be, cluster identity 4711 [ 45.656713][ T4878] tipc: Enabled bearer , priority 0 [ 45.671442][ T4878] tipc: Resetting bearer [ 45.680100][ T4877] tipc: Disabling bearer [ 45.702658][ T4882] loop3: detected capacity change from 0 to 1024 [ 45.710964][ T4882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.741304][ T4440] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.763886][ T4887] loop2: detected capacity change from 0 to 2048 [ 45.785393][ T4887] loop2: p1 p2 < > p3 p4 < p5 > [ 45.790474][ T4887] loop2: partition table partially beyond EOD, truncated [ 45.797789][ T4887] loop2: p1 start 2305 is beyond EOD, truncated [ 45.804090][ T4887] loop2: p2 start 4294902784 is beyond EOD, truncated [ 45.810909][ T4887] loop2: p3 start 4278191616 is beyond EOD, truncated [ 45.818957][ T4887] loop2: p5 start 2305 is beyond EOD, truncated [ 45.838482][ T4895] batman_adv: batadv0: Adding interface: dummy0 [ 45.844886][ T4895] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.873754][ T4899] loop2: detected capacity change from 0 to 256 [ 45.874843][ T4895] batman_adv: batadv0: Interface activated: dummy0 [ 45.911331][ T4901] team_slave_0: entered promiscuous mode [ 45.917118][ T4901] team_slave_1: entered promiscuous mode [ 45.923777][ T4901] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.947377][ T4903] loop1: detected capacity change from 0 to 512 [ 45.951866][ T3902] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 45.961325][ T3902] FAT-fs (loop2): Filesystem has been set read-only [ 45.968289][ T3902] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 45.988562][ T4903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.001653][ T4903] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.049407][ T4903] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.441: corrupted inode contents [ 46.062787][ T4903] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.441: mark_inode_dirty error [ 46.076403][ T4903] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.441: corrupted inode contents [ 46.088559][ T4903] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.441: mark_inode_dirty error [ 46.100632][ T4903] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.441: mark inode dirty (error -117) [ 46.113322][ T4903] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 46.138377][ T4556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.162414][ T4916] tipc: Started in network mode [ 46.167423][ T4916] tipc: Node identity 7ee24e562143, cluster identity 4711 [ 46.174709][ T4916] tipc: Enabled bearer , priority 0 [ 46.183135][ T4916] tipc: Resetting bearer [ 46.192383][ T4915] tipc: Disabling bearer [ 46.243845][ T4392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.250834][ T4907] chnl_net:caif_netlink_parms(): no params data found [ 46.294298][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.301480][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.308960][ T4907] bridge_slave_0: entered allmulticast mode [ 46.315490][ T4907] bridge_slave_0: entered promiscuous mode [ 46.322915][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.330162][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.338629][ T4907] bridge_slave_1: entered allmulticast mode [ 46.345412][ T4907] bridge_slave_1: entered promiscuous mode [ 46.366901][ T4907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.382432][ T4907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.409230][ T4907] team0: Port device team_slave_0 added [ 46.415251][ T3822] bridge_slave_1: left allmulticast mode [ 46.420960][ T3822] bridge_slave_1: left promiscuous mode [ 46.426663][ T3822] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.434204][ T3822] bridge_slave_0: left allmulticast mode [ 46.439954][ T3822] bridge_slave_0: left promiscuous mode [ 46.445607][ T3822] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.509028][ T3822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.518687][ T3822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.528125][ T3822] bond0 (unregistering): Released all slaves [ 46.536821][ T4907] team0: Port device team_slave_1 added [ 46.554590][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.561705][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.587626][ T4907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.599315][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.606295][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.632233][ T4907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.670622][ T4935] loop1: detected capacity change from 0 to 512 [ 46.678298][ T4936] batman_adv: batadv0: Adding interface: dummy0 [ 46.684609][ T4936] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.686414][ T4938] loop3: detected capacity change from 0 to 256 [ 46.713622][ T4936] batman_adv: batadv0: Interface activated: dummy0 [ 46.724670][ T3822] hsr_slave_0: left promiscuous mode [ 46.731935][ T3822] hsr_slave_1: left promiscuous mode [ 46.738045][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.738362][ T4935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.757719][ T4935] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.758108][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.807195][ T4556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.821377][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 46.829012][ T4440] FAT-fs (loop3): Filesystem has been set read-only [ 46.836467][ T4440] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 46.836527][ T3822] team0 (unregistering): Port device team_slave_1 removed [ 46.855188][ T3822] team0 (unregistering): Port device team_slave_0 removed [ 46.890622][ T4907] hsr_slave_0: entered promiscuous mode [ 46.897132][ T4907] hsr_slave_1: entered promiscuous mode [ 46.902908][ T4907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.911332][ T4907] Cannot create hsr debugfs directory [ 46.946028][ T4950] Falling back ldisc for ptm0. [ 47.264468][ T4964] chnl_net:caif_netlink_parms(): no params data found [ 47.287869][ T4907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.300651][ T3822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.315369][ T4907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.334295][ T4907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.342914][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.350246][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.357712][ T4964] bridge_slave_0: entered allmulticast mode [ 47.364200][ T4964] bridge_slave_0: entered promiscuous mode [ 47.371639][ T4907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.382914][ T3822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.394112][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.401353][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.408624][ T4964] bridge_slave_1: entered allmulticast mode [ 47.415093][ T4964] bridge_slave_1: entered promiscuous mode [ 47.429488][ T3822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.447546][ T4964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.458268][ T4964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.481165][ T3822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.492941][ T4964] team0: Port device team_slave_0 added [ 47.499687][ T4964] team0: Port device team_slave_1 added [ 47.515255][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.522262][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.548182][ T4964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.560378][ T4964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.567451][ T4964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.593536][ T4964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.627534][ T4964] hsr_slave_0: entered promiscuous mode [ 47.634440][ T4964] hsr_slave_1: entered promiscuous mode [ 47.644219][ T4964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.651881][ T4964] Cannot create hsr debugfs directory [ 47.678030][ T3822] bridge_slave_1: left allmulticast mode [ 47.683690][ T3822] bridge_slave_1: left promiscuous mode [ 47.689487][ T3822] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.700781][ T4984] xt_connbytes: Forcing CT accounting to be enabled [ 47.704949][ T3822] bridge_slave_0: left allmulticast mode [ 47.707995][ T4984] Cannot find add_set index 0 as target [ 47.713033][ T3822] bridge_slave_0: left promiscuous mode [ 47.713150][ T3822] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.807173][ T3822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.817973][ T3822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.828127][ T3822] bond0 (unregistering): Released all slaves [ 47.842093][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.849431][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.856818][ T4987] bridge0: entered allmulticast mode [ 47.864040][ T4988] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.871242][ T4988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.878602][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.885765][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.893107][ T4988] bridge0: entered promiscuous mode [ 47.912025][ T3822] hsr_slave_0: left promiscuous mode [ 47.928412][ T3822] hsr_slave_1: left promiscuous mode [ 47.937732][ T4992] TCP: out of memory -- consider tuning tcp_mem [ 47.944922][ T4992] ------------[ cut here ]------------ [ 47.950415][ T4992] WARNING: CPU: 1 PID: 4992 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x444/0x450 [ 47.959986][ T4992] Modules linked in: [ 47.963877][ T4992] CPU: 1 UID: 0 PID: 4992 Comm: syz.4.468 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 47.974691][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.985023][ T4992] RIP: 0010:inet_sock_destruct+0x444/0x450 [ 47.990868][ T4992] Code: 0f 0b 90 e9 ab fe ff ff e8 19 4a c3 fc 90 0f 0b 90 e9 c5 fe ff ff e8 0b 4a c3 fc 90 0f 0b 90 e9 df fe ff ff e8 fd 49 c3 fc 90 <0f> 0b 90 e9 35 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 [ 48.010536][ T4992] RSP: 0018:ffffc90000f0bce0 EFLAGS: 00010283 [ 48.016649][ T4992] RAX: ffffffff846ce703 RBX: 0000000080002000 RCX: 0000000000040000 [ 48.024649][ T4992] RDX: ffffc90003c52000 RSI: 00000000000011de RDI: 00000000000011df [ 48.032689][ T4992] RBP: ffff888104706880 R08: ffffffff846ce634 R09: 0000000000000000 [ 48.040730][ T4992] R10: 0001ffffffffffff R11: 0001c900013af8a7 R12: ffff888104706800 [ 48.048791][ T4992] R13: ffff888104706b68 R14: ffff8881047068a8 R15: ffff888104706892 [ 48.056786][ T4992] FS: 00007f5efb2216c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 48.065840][ T4992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.072436][ T4992] CR2: 0000001b2e71cff8 CR3: 000000011dc66000 CR4: 00000000003506f0 [ 48.080497][ T4992] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.089099][ T4992] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.097134][ T4992] Call Trace: [ 48.100397][ T4992] [ 48.103324][ T4992] ? __warn+0x141/0x350 [ 48.107550][ T4992] ? report_bug+0x315/0x420 [ 48.112079][ T4992] ? inet_sock_destruct+0x444/0x450 [ 48.117302][ T4992] ? handle_bug+0x60/0x90 [ 48.121701][ T4992] ? exc_invalid_op+0x1a/0x50 [ 48.126413][ T4992] ? asm_exc_invalid_op+0x1a/0x20 [ 48.131512][ T4992] ? inet_sock_destruct+0x374/0x450 [ 48.136906][ T4992] ? inet_sock_destruct+0x443/0x450 [ 48.142220][ T4992] ? inet_sock_destruct+0x444/0x450 [ 48.147495][ T4992] ? __pfx_inet_sock_destruct+0x10/0x10 [ 48.153026][ T4992] __sk_destruct+0x3d/0x440 [ 48.157538][ T4992] __sk_free+0x284/0x2d0 [ 48.161810][ T4992] sk_free+0x39/0x80 [ 48.165742][ T4992] tcp_close+0x8b/0xd0 [ 48.169801][ T4992] inet_release+0xce/0xf0 [ 48.174154][ T4992] sock_close+0x68/0x150 [ 48.178442][ T4992] ? __pfx_sock_close+0x10/0x10 [ 48.183347][ T4992] __fput+0x17a/0x6d0 [ 48.187396][ T4992] ____fput+0x1c/0x30 [ 48.191365][ T4992] task_work_run+0x13a/0x1a0 [ 48.196057][ T4992] syscall_exit_to_user_mode+0xbe/0x130 [ 48.201676][ T4992] do_syscall_64+0xd6/0x1c0 [ 48.206259][ T4992] ? clear_bhb_loop+0x55/0xb0 [ 48.210978][ T4992] ? clear_bhb_loop+0x55/0xb0 [ 48.215716][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.221618][ T4992] RIP: 0033:0x7f5efc5adff9 [ 48.226144][ T4992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.245832][ T4992] RSP: 002b:00007f5efb221038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 48.254278][ T4992] RAX: 0000000000000000 RBX: 00007f5efc765f80 RCX: 00007f5efc5adff9 [ 48.262286][ T4992] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 48.270457][ T4992] RBP: 00007f5efc620296 R08: 0000000000000000 R09: 0000000000000000 [ 48.278542][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.286515][ T4992] R13: 0000000000000000 R14: 00007f5efc765f80 R15: 00007ffe4c664818 [ 48.294491][ T4992] [ 48.297521][ T4992] ---[ end trace 0000000000000000 ]--- [ 48.303772][ T3822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.311320][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.321728][ T3822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.329268][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.338766][ T3822] veth1_macvtap: left promiscuous mode [ 48.344420][ T3822] veth0_macvtap: left promiscuous mode [ 48.349950][ T3822] veth1_vlan: left promiscuous mode [ 48.355310][ T3822] veth0_vlan: left promiscuous mode [ 48.433881][ T3822] team0 (unregistering): Port device team_slave_1 removed [ 48.443720][ T3822] team0 (unregistering): Port device team_slave_0 removed [ 48.498735][ T5001] syzkaller0: entered promiscuous mode [ 48.504256][ T5001] syzkaller0: entered allmulticast mode [ 48.549000][ T4907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.562448][ T4907] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.572068][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.579161][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.591153][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.598279][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.658413][ T4907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.718019][ T4907] veth0_vlan: entered promiscuous mode [ 48.726689][ T4907] veth1_vlan: entered promiscuous mode [ 48.741666][ T4907] veth0_macvtap: entered promiscuous mode [ 48.749005][ T4907] veth1_macvtap: entered promiscuous mode [ 48.761096][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.771594][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.781457][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.791890][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.801703][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.812135][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.822096][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.832673][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.843236][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.855238][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.865754][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.875578][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.886061][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.895866][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.906420][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.916327][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.927613][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.942356][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.959076][ T5019] loop1: detected capacity change from 0 to 1024 [ 48.967524][ T5019] EXT4-fs: Ignoring removed orlov option [ 48.973315][ T5019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.977201][ T4907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.989118][ T4907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.997939][ T4907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.006676][ T4907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.018930][ T5019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.051962][ T4964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.058966][ T29] kauditd_printk_skb: 1344 callbacks suppressed [ 49.058979][ T29] audit: type=1400 audit(1727908503.351:3428): avc: denied { map } for pid=5020 comm="syz.4.476" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.089431][ T29] audit: type=1400 audit(1727908503.351:3429): avc: denied { execute } for pid=5020 comm="syz.4.476" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.124060][ T4964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.136187][ T4964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.157313][ T4964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.195279][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.202511][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.210195][ T5030] bridge0: entered allmulticast mode [ 49.223958][ T4964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.240653][ T4964] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.247956][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.255139][ T5030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.262410][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.269475][ T5030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.278392][ T5030] bridge0: entered promiscuous mode [ 49.290046][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.297151][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.323128][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.330277][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.343673][ T5036] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 49.352345][ T5036] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 49.413044][ T4964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.481647][ T4964] veth0_vlan: entered promiscuous mode [ 49.490449][ T4964] veth1_vlan: entered promiscuous mode [ 49.506282][ T4964] veth0_macvtap: entered promiscuous mode [ 49.513632][ T4964] veth1_macvtap: entered promiscuous mode [ 49.523720][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.534503][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.544333][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.554815][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.564712][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.575223][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.585153][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.595794][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.605665][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.616080][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.627772][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.638144][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.648772][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.658699][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.669229][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.679109][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.689533][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.699452][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.709939][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.719768][ T4964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.730211][ T4964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.741002][ T4964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.752029][ T4964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.760902][ T4964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.769805][ T4964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.778680][ T4964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.796942][ T4556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.207621][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 52.957505][ T29] audit: type=1400 audit(1727908507.261:3430): avc: denied { read } for pid=5069 comm="syz.1.488" name="usbmon7" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.981792][ T29] audit: type=1400 audit(1727908507.261:3431): avc: denied { open } for pid=5069 comm="syz.1.488" path="/dev/usbmon7" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.008974][ T29] audit: type=1400 audit(1727908507.311:3432): avc: denied { ioctl } for pid=5069 comm="syz.1.488" path="/dev/usbmon7" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.828371][ T5076] loop3: detected capacity change from 0 to 1024 [ 54.834974][ T5076] EXT4-fs: Ignoring removed orlov option [ 54.840605][ T5076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.856824][ T5076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.662832][ T4964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.424203][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.431454][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.438777][ T5086] bridge0: entered allmulticast mode [ 56.449788][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.456936][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.464883][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.471919][ T5086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.480380][ T5086] bridge0: entered promiscuous mode [ 57.128610][ T29] audit: type=1400 audit(1727908511.431:3433): avc: denied { read } for pid=5087 comm="syz.2.493" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.151657][ T29] audit: type=1400 audit(1727908511.431:3434): avc: denied { open } for pid=5087 comm="syz.2.493" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.115515][ T5097] TCP: out of memory -- consider tuning tcp_mem [ 59.691087][ T29] audit: type=1400 audit(1727908513.991:3435): avc: denied { create } for pid=5101 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.710491][ T29] audit: type=1400 audit(1727908514.001:3436): avc: denied { ioctl } for pid=5101 comm="syz.3.499" path="socket:[11246]" dev="sockfs" ino=11246 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 63.733171][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 63.747390][ T5112] loop4: detected capacity change from 0 to 1024 [ 63.754190][ T5112] EXT4-fs: Ignoring removed orlov option [ 63.759988][ T5112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.766942][ T29] audit: type=1400 audit(1727908518.051:3437): avc: denied { connect } for pid=5108 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.786682][ T29] audit: type=1400 audit(1727908518.071:3438): avc: denied { connect } for pid=5109 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.810979][ T5112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.567827][ T4392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.424809][ T4096] page_pool_release_retry() stalled pool shutdown: id 60, 1 inflight 60 sec [ 162.229359][ T148] bridge_slave_1: left allmulticast mode [ 162.235150][ T148] bridge_slave_1: left promiscuous mode [ 162.240888][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.248767][ T148] bridge_slave_0: left allmulticast mode [ 162.254427][ T148] bridge_slave_0: left promiscuous mode [ 162.260357][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.347665][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.357725][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.367610][ T148] bond0 (unregistering): Released all slaves [ 162.437772][ T148] hsr_slave_0: left promiscuous mode [ 162.443447][ T148] hsr_slave_1: left promiscuous mode [ 162.449078][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.456493][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.463861][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.471355][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.479944][ T148] veth1_macvtap: left promiscuous mode [ 162.485517][ T148] veth0_macvtap: left promiscuous mode [ 162.491096][ T148] veth1_vlan: left promiscuous mode [ 162.496373][ T148] veth0_vlan: left promiscuous mode [ 162.563447][ T148] team0 (unregistering): Port device team_slave_1 removed [ 162.573953][ T148] team0 (unregistering): Port device team_slave_0 removed [ 317.715334][ T0] ================================================================== [ 317.723430][ T0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_update_events [ 317.731585][ T0] [ 317.733907][ T0] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 317.741274][ T0] __tmigr_cpu_activate+0x55/0x200 [ 317.746472][ T0] tmigr_cpu_activate+0x8a/0xc0 [ 317.751316][ T0] timer_clear_idle+0x28/0x100 [ 317.756084][ T0] tick_nohz_restart_sched_tick+0x22/0x110 [ 317.761886][ T0] tick_nohz_idle_exit+0xfe/0x1d0 [ 317.766894][ T0] do_idle+0x1ee/0x230 [ 317.770946][ T0] cpu_startup_entry+0x25/0x30 [ 317.775697][ T0] rest_init+0xef/0xf0 [ 317.779753][ T0] start_kernel+0x586/0x5e0 [ 317.784230][ T0] x86_64_start_reservations+0x2a/0x30 [ 317.789667][ T0] x86_64_start_kernel+0x9a/0xa0 [ 317.794678][ T0] common_startup_64+0x12c/0x137 [ 317.799604][ T0] [ 317.801905][ T0] read to 0xffff888237c205dc of 1 bytes by task 0 on cpu 1: [ 317.809160][ T0] tmigr_update_events+0x41d/0x5d0 [ 317.814252][ T0] __tmigr_cpu_deactivate+0x2b1/0x410 [ 317.819601][ T0] tmigr_cpu_deactivate+0x66/0x180 [ 317.824690][ T0] __get_next_timer_interrupt+0x137/0x530 [ 317.830386][ T0] timer_base_try_to_set_idle+0x54/0x60 [ 317.835929][ T0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 317.841472][ T0] do_idle+0x178/0x230 [ 317.845522][ T0] cpu_startup_entry+0x25/0x30 [ 317.850352][ T0] start_secondary+0x96/0xa0 [ 317.854920][ T0] common_startup_64+0x12c/0x137 [ 317.859946][ T0] [ 317.862265][ T0] value changed: 0x00 -> 0x01 [ 317.866912][ T0] [ 317.869210][ T0] Reported by Kernel Concurrency Sanitizer on: [ 317.875344][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 317.887123][ T0] Tainted: [W]=WARN [ 317.890900][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.900939][ T0] ==================================================================