last executing test programs: 1.243027806s ago: executing program 0 (id=10055): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.229912587s ago: executing program 0 (id=10056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000"], 0xfc}}, 0x0) 1.214142889s ago: executing program 0 (id=10057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) poll(0x0, 0x0, 0xfff) 1.20631403s ago: executing program 2 (id=10058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x4010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) 1.160127034s ago: executing program 2 (id=10059): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x0) 1.158447044s ago: executing program 2 (id=10060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x6, 0x3, 0x8}}) 1.109088889s ago: executing program 2 (id=10061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x3, 0x8, 0x3, 0x3, 0x8001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000140000000000000000001d3dfbb05a0b719fc5455cd305dabbdc"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000400)="5407e221c1fea1bb10d8ed9d", &(0x7f00000005c0)=""/155}, 0x20) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/../file0/../file0\x00', 0x1a5000, 0x2) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xa, 0x301, 0x0, 0x0, 0x2) move_mount(r5, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) mknod$loop(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) 748.983762ms ago: executing program 1 (id=10067): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0x5, &(0x7f00000026c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160000000000000067000000000000"], &(0x7f0000002700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) iopl(0x3) mlock2(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e640000000014000280070000000000000005001d"], 0x44}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r5, 0x0, 0xfffffffffffffe10, 0x0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private0, @in6=@private2}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) 745.976362ms ago: executing program 3 (id=10068): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 710.978505ms ago: executing program 3 (id=10069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) 682.208278ms ago: executing program 3 (id=10070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6}, {0x8, 0x15, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000900), 0x103, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0xf, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000003c0)=""/8, 0x28, 0x8, 0x1, 0x3, 0x0, @void, @value}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r11, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r11, 0x25, &(0x7f0000000340)={0x0, 0x0, 0x80000f}) fcntl$lock(r11, 0x25, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7, 0x0, 0x4, 0xc000, r2, 0xc22, '\x00', r9, r10, 0x4, 0x5, 0x1, 0x9, @value=r11, @void, @void, @value}, 0x50) 680.825328ms ago: executing program 3 (id=10071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x6, 0x3, 0x8}}) 680.214428ms ago: executing program 1 (id=10072): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_open_procfs$namespace(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0) 625.228923ms ago: executing program 3 (id=10073): openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) 624.651783ms ago: executing program 3 (id=10074): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4c000) 624.437603ms ago: executing program 1 (id=10075): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000940), 0x10001, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 495.064345ms ago: executing program 1 (id=10076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 480.991466ms ago: executing program 1 (id=10077): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000080000000000000000000000100000000000400000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/99, 0x63}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/90, 0xfffffff2}, {&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000200)=""/77, 0x2d}, {&(0x7f0000000940)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000540)=""/191, 0xbf, 0x300}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x101, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r8, &(0x7f00000004c0)="76844dc6dcd9cbda71e4b7daf6b2b0781f8afba21c36195ffb4d601b2b2b3283b385e17f3eda7e2fa0cd1ced5317e591110c8eb50e", &(0x7f0000000880)=""/161}, 0x20) shmctl$IPC_SET(0x0, 0x1, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r10, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x1, @desc3}) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000b00)=ANY=[]) 413.105893ms ago: executing program 1 (id=10078): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) 367.875866ms ago: executing program 0 (id=10080): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 318.969481ms ago: executing program 0 (id=10083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 299.840363ms ago: executing program 0 (id=10085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r2}, 0x1) 262.540746ms ago: executing program 2 (id=10088): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040000000009dca6540f5d9382900"/28], 0x48) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1081e, &(0x7f0000000200)=ANY=[], 0x0, 0x6d0, &(0x7f0000000a40)="$eJzs3V1v29Ydx/Ef5QcpzhAU2xAEQZqcpBtgY5lCyY0DIwNWjaJsbpIokPKQAAOKtLGLIEq6JRmw+Cb1zR6A7g3srje72IsYsOte7w3sbgO67W7AdsGBT5ZkiVGcyEmLfj8CKurw8Jz/IRX+S1k8EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOU0bbtmqe11d2798wNTxGkGfid/8b/J9WlrS1pLF9Zm9itZ1oEsVSo6lxad+/Zw9dn4P1d0IX11QZX4qaL902ffuvmtxVK2vQrDfTk6boOPn+7fvzMY7D56gboLOnbzb5JKw+XF7KgkL0b3+pbb9ULf6zS2XOOFvtnc2LCvbbdC0/LabqiS1DFO4Jb6fmBWnTVT29xcN271tr/T3Wo22m5eeOP7ddveMD8upwdaUjV0tr122+tuJXXi1XGdG+bTn6UV3EYnfhrsrs8ayd69wW7tRSrVZ1Wq2/qkVqvXaxvXN6/fsO3Ful2vjxXYMcs+pIkac3/T4itmLudtYB5Kcf7/myW1VVFXO7olM/XhqKlAvjoF6zNJ4j+QdM0t6jI/xVtxDo/zf57lz0k/zNadV5L/L6avLhbl/4JYjEyywbQ1VkH58R5LSURGj/VU+7qvOxoo0q4ezaFtI3NpLq2c0CMa2e9bctWVp1C+PHXUSEpMVmK0qQ1tyNb72lZLoYxa8tSWq1C3FaovN3lHOQrkqqG+fAUyWpWjNRnVtKlNrcvIVVW35WtHXW2pqYb+E0XRnu5poN2kRtFDeaVaQYXyaKX6c1qaSOZZwQfP0vdplv9t8v/XlRRF0bNy+nb4vKhOdooE3rQou/4/pksnEw0AAAAAADgJVvLpu5X87f5tSZFaXtu133RYAAAAAABgjixFZV2QFV//S3pb1otf/5dOOjgAAAAAADAXVnKPnSVpJflSvzW8E+pFPgRYeA0hAgAAAACAV5Tc+X9xWYqSSSsuyTrW9T8AAAAAAPgK+O3IHPuL+Ry7Uf5n/ZKksFe2/vyvsoIl66B36zvWg0a8pvEgqzP+DYBFqd86b53JJupNnpYlJa8c94KV9ZbNF5x8+mAtSl/szZrr3wqOBLC8kDdwxGgAVtzzxmL2Sp/qcrrJ5WwS4rv7JSVr0l5WWl7brTp++2ZNjcaZUt+91f/lw3u/koLDce7dG+xWP/x4cDeJJZnH8+BB3OizsXBKE7EkT8NYniTzLST3XEwb8Sm18i5/1+2sWEm/dj7+BTUelEY7Khj/kT5/rSvpMbuyktZd2R9OxyxZlXj8tepyfMjGRh8sWcMoakdHPu1ATI0iD/ad7Gn1nfRp//TZv+btlKzK9xakenXyGIxFUR+NonQ4jKIorH9P7IspUYy8F5J9sR5H8Ze4oSSKaOKIrI9HcewjAgBvyt4wCyWTmE/k3fy8mp/UXirvzM7u741n9yd/iNJz7UL8/xRReWYvFcVn9FUryUPLSk6si+ennNHtLK9UVJBX7JfObmlff9JaejPlmrKwJ6L4bxRFN2tJv78/klU/izf4rLDfsF1fiHfhtScPfp5MgB/7aPej3Yf1+vqG/a5tX69rKRlG9rQgcg8AYMLs39iZWcN6V5fTGpfv/uO76dJYxvvm4VcKqvpQH2ugu7qa/4TApemtrox8DeFqetWqkatWc/atm6eko3Vrulp4VZd+1rAy8kMved0l5ZuMZ+ph3fUTPgoAALxeV2bk4en5vzKW/69qNa2xen7qdfd4Ls9+Gvjwkr6obm128O/Ne28AAPD14AZfWCv931hB4PXer21u1hr9bdcEvvMTE3jNLdd43b4bONuN7pZreoHf9x2/bXqByl7TDU240+v5Qd+0/MD0/NC7lfzyuwlvh323Y0K30+j2PSfstd1G6BrH7/YbTt80vdAxvZ0ftb1w2w2SjcOe63gtz2n0Pb9rQn8ncNyqMaHrjlT0mm6377W8eLFreoHXaQS3zU/99k7HNU03dAKv1/fTBvO+vG7LDzpJs9Xkp2sBAMDjp/v37wwGu4+OLpyKL83TkgMV1JlcWJ7SIHMEAQDwJTNM18fYaPp3rQEAAAAAAAAAAAAAAAAAAAAAwAmZfUvfMReWpt0sKB2W/OJMVqJPNLzFcKIdS68Yz7PoFTYvHXer/JaI/fufP6fyqcOSfPeP1jmY+7EoWvj7N6TTSYnSksV41fmXa7AcD+O594/GJdlUxc9ObFw/2Ev3aGGdeOXUVeXDY7E4/38O8cLDPxasivfIaEk+JfOwpDz+D2T5eQMcX4jberT84nfuTiy83vMQgNfv/wEAAP//Nkg53w==") chdir(&(0x7f0000000240)='./file0\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dadde186a7bcbacfe87f9521de63691939c505b71acf5fe9f61b5c5addbf24d52385eeeb4a30c91524c553fec5972dd970b73f932", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,dfltuid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x4, 0x0, 0x0, 0x0, 0xc7, 0x40}}}, @TCA_TBF_PTAB={0x404, 0x3, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7677, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}]}}]}, 0x45c}}, 0x0) r8 = open(&(0x7f0000000200)='./file0\x00', 0x101000, 0x104) getdents(r8, &(0x7f0000000140)=""/140, 0x8c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) socket$kcm(0x11, 0xa, 0x300) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x12, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 187.085053ms ago: executing program 4 (id=10092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 169.597175ms ago: executing program 4 (id=10093): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 132.199898ms ago: executing program 2 (id=10094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000003b8c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYBLOB="63b077ed5e20810c95270c60d92b2576bda5aa409a96310842a44abd4a5e28aae66d05010234c2c3530b907f97efd51fb164c1e89a2f003333b1928632f9fb8ddb445ac7819026799a16af3ce454a2e6a0b006c6d1f7baaed5e465420b3f3f6270f01b69f0d813d8f28a9e073ddc5c28b1305fe736f93412589ac027577e8dd1111cca128aeeec6acde7f1117fb2855a5efbe3670ae672541619d5f1b8ca9fc1092144734b44367642af24f5d67cbb42c235921faf2a758e795159402aa4c039fd39ec002a914cc91f5ab3ac3ab14cff6994d40d4a2e515da426bb5036ec49f44836274c742d7e00f2f55222cc71c7bdbc3ec38363e44736", @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x14, &(0x7f0000001300)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x5, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 114.0153ms ago: executing program 4 (id=10095): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x10001, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050) 96.723991ms ago: executing program 4 (id=10096): openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_clone3(0x0, 0x0) 75.726183ms ago: executing program 4 (id=10097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 0s ago: executing program 4 (id=10098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x3, 0x8, 0x3, 0x3, 0x8001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000140000000000000000001d3dfbb05a0b719fc5455cd305dabbdc"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000400)="5407e221c1fea1bb10d8ed9d", &(0x7f00000005c0)=""/155}, 0x20) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0/../file0/../file0\x00', 0x1a5000, 0x2) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xa, 0x301, 0x0, 0x0, 0x2) move_mount(r5, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) mknod$loop(&(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) kernel console output (not intermixed with test programs): 651][T31907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.191640][T31907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.217596][T31907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.252135][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.268337][T31907] hsr_slave_0: entered promiscuous mode [ 522.274937][T31907] hsr_slave_1: entered promiscuous mode [ 522.280945][T31907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.288493][T31907] Cannot create hsr debugfs directory [ 522.298925][T31889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.328088][T31771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.347945][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.386007][T31889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.442776][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.466807][T31889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.509976][T31968] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 522.523824][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.560560][T31771] veth0_vlan: entered promiscuous mode [ 522.568360][T31771] veth1_vlan: entered promiscuous mode [ 522.576749][T31889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.598204][T31771] veth0_macvtap: entered promiscuous mode [ 522.605755][T31771] veth1_macvtap: entered promiscuous mode [ 522.617532][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.628135][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.638161][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.648622][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.658526][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.669113][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.679205][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.689953][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.699859][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.710293][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.720250][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.730709][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.740539][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.751016][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.760842][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.771335][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.781181][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.791686][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.803801][T31771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.824457][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.835003][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.844987][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.855602][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.865482][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.875935][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.885779][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.896202][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.906027][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.916509][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.926620][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.937058][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.946935][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.957344][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.967277][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.977816][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.987612][T31771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.998043][T31771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.012966][T31771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.022376][T31771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.031192][T31771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.039961][T31771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.048647][T31771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.090318][ T37] bridge_slave_1: left allmulticast mode [ 523.096003][ T37] bridge_slave_1: left promiscuous mode [ 523.101774][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.117877][ T37] bridge_slave_0: left allmulticast mode [ 523.123564][ T37] bridge_slave_0: left promiscuous mode [ 523.129220][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.137309][ T37] bridge_slave_1: left allmulticast mode [ 523.142969][ T37] bridge_slave_1: left promiscuous mode [ 523.148715][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.156415][ T37] bridge_slave_0: left allmulticast mode [ 523.162123][ T37] bridge_slave_0: left promiscuous mode [ 523.167810][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.341477][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.352290][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.362496][ T37] bond0 (unregistering): Released all slaves [ 523.371833][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.382457][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.392536][ T37] bond0 (unregistering): Released all slaves [ 523.401036][ T37] bond1 (unregistering): Released all slaves [ 523.433638][T31889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.444308][T31889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.452550][T31889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.461533][ T37] tipc: Left network mode [ 523.469642][T31889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.508115][ T37] hsr_slave_0: left promiscuous mode [ 523.517317][T31987] loop0: detected capacity change from 0 to 512 [ 523.527504][ T37] hsr_slave_1: left promiscuous mode [ 523.533339][T31987] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.542466][T31987] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 523.550793][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.558366][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.561675][T31987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 523.573834][T31987] System zones: 0-2, 18-18, 34-34 [ 523.574069][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.586412][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.589263][T31987] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 523.610436][ T37] hsr_slave_0: left promiscuous mode [ 523.611391][T31987] EXT4-fs (loop0): 1 truncate cleaned up [ 523.621594][ T37] hsr_slave_1: left promiscuous mode [ 523.621708][T31987] EXT4-fs mount: 58 callbacks suppressed [ 523.621723][T31987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.644649][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.652621][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.660477][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.667896][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.679523][ T37] veth1_vlan: left promiscuous mode [ 523.684837][ T37] veth0_vlan: left promiscuous mode [ 523.690606][ T37] veth1_vlan: left promiscuous mode [ 523.695869][ T37] veth0_vlan: left promiscuous mode [ 523.719069][T31707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.822566][ T37] team0 (unregistering): Port device team_slave_1 removed [ 523.833821][ T37] team0 (unregistering): Port device team_slave_0 removed [ 523.883452][ T37] team0 (unregistering): Port device macvlan1 removed [ 523.912763][ T37] team0 (unregistering): Port device team_slave_1 removed [ 523.923135][ T37] team0 (unregistering): Port device team_slave_0 removed [ 523.962347][T31986] tipc: Enabling of bearer rejected, failed to enable media [ 524.041197][T31889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.050925][T31976] chnl_net:caif_netlink_parms(): no params data found [ 524.067238][T31889] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.107948][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.115141][T11865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.127094][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.134257][T11865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.167427][T31907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.196535][T31907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.213539][T31907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 524.226231][T31907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 524.243336][T31976] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.250517][T31976] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.257678][T31976] bridge_slave_0: entered allmulticast mode [ 524.264545][T31976] bridge_slave_0: entered promiscuous mode [ 524.274163][T31976] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.281290][T31976] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.289434][T32004] loop4: detected capacity change from 0 to 1024 [ 524.295365][T31976] bridge_slave_1: entered allmulticast mode [ 524.302339][T32004] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 524.303006][T31976] bridge_slave_1: entered promiscuous mode [ 524.313255][T32004] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 524.333466][T32004] JBD2: no valid journal superblock found [ 524.339315][T32004] EXT4-fs (loop4): Could not load journal inode [ 524.355721][T31976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.405840][T31976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.415538][T32010] netlink: 'syz.0.9499': attribute type 10 has an invalid length. [ 524.423460][T32010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9499'. [ 524.433379][T32010] vlan0: entered promiscuous mode [ 524.438593][T32010] vlan0: entered allmulticast mode [ 524.443745][T32010] veth0_vlan: entered allmulticast mode [ 524.453739][T32010] bridge0: port 3(vlan0) entered blocking state [ 524.460095][T32010] bridge0: port 3(vlan0) entered disabled state [ 524.467740][T32010] bridge0: port 3(vlan0) entered blocking state [ 524.474089][T32010] bridge0: port 3(vlan0) entered forwarding state [ 524.496263][T32011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9499'. [ 524.505283][T32011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.512759][T32011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.531193][T32011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.538610][T32011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.561072][T31976] team0: Port device team_slave_0 added [ 524.578309][T31889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.588219][T31976] team0: Port device team_slave_1 added [ 524.616961][T31976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.624022][T31976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.650040][T31976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.667088][T31976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.674179][T31976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.700133][T31976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.762206][T31976] hsr_slave_0: entered promiscuous mode [ 524.768863][T31976] hsr_slave_1: entered promiscuous mode [ 524.791712][T31976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.823614][T31976] Cannot create hsr debugfs directory [ 524.852839][T31907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.920674][T31889] veth0_vlan: entered promiscuous mode [ 524.951171][T32027] syz.0.9502[32027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.951271][T32027] syz.0.9502[32027] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.988157][T31907] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.033163][T31889] veth1_vlan: entered promiscuous mode [ 525.048341][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.055478][T11875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.093928][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.101034][T11877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.115956][T32029] loop0: detected capacity change from 0 to 1024 [ 525.129592][T32029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.138716][T32029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 525.164126][T32029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 525.185672][T32029] System zones: 0-1, 3-36 [ 525.193463][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.214018][T32029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.269104][T31707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.305927][T31889] veth0_macvtap: entered promiscuous mode [ 525.333465][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.356281][T31889] veth1_macvtap: entered promiscuous mode [ 525.386207][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.429653][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.440265][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.450154][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.460656][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.470484][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.480916][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.490816][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.491409][T32022] coredump: 1(syz.0.9501): written to core: VMAs: 29, size 91127808; core: 62108334 bytes, pos 91136000 [ 525.501229][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.501244][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.501296][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.501311][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.501325][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.501380][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.501395][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.503892][T31889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.608084][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.651706][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.662301][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.672135][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.682580][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.692412][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.702841][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.712654][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.723134][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.733735][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.744844][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.754723][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.765259][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.775105][T31889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.785618][T31889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.798337][T31889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.806841][T31889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.815701][T31889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.824470][T31889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.833313][T31889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.875395][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9513'. [ 525.893756][T31907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.920478][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 525.920493][ T29] audit: type=1400 audit(1726855465.968:13819): avc: denied { create } for pid=32058 comm="syz.4.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 525.978499][ T37] bridge_slave_1: left allmulticast mode [ 525.984236][ T37] bridge_slave_1: left promiscuous mode [ 525.989953][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.001496][ T29] audit: type=1400 audit(1726855465.968:13820): avc: denied { write } for pid=32058 comm="syz.4.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 526.021013][T32069] loop0: detected capacity change from 0 to 1024 [ 526.027721][ T37] bridge_slave_0: left allmulticast mode [ 526.033405][ T37] bridge_slave_0: left promiscuous mode [ 526.039114][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.056715][T32069] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 526.067744][T32069] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 526.082656][T32069] JBD2: no valid journal superblock found [ 526.088399][T32069] EXT4-fs (loop0): Could not load journal inode [ 526.095961][T32072] syz.4.9515[32072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.096035][T32072] syz.4.9515[32072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.213294][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.239707][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.250261][ T37] bond0 (unregistering): Released all slaves [ 526.264373][T32068] netlink: 'syz.3.9473': attribute type 10 has an invalid length. [ 526.272392][T32068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9473'. [ 526.300693][T32068] bridge0: port 3(ipvlan0) entered blocking state [ 526.307224][T32068] bridge0: port 3(ipvlan0) entered disabled state [ 526.317026][T32068] ipvlan0: entered allmulticast mode [ 526.322552][T32068] veth0_vlan: entered allmulticast mode [ 526.339461][T32068] ipvlan0: left allmulticast mode [ 526.344494][T32068] veth0_vlan: left allmulticast mode [ 526.352550][T32068] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 526.377273][T32075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9515'. [ 526.418961][ T37] hsr_slave_0: left promiscuous mode [ 526.424863][ T37] hsr_slave_1: left promiscuous mode [ 526.433933][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.441626][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.459902][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.467350][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.481182][ T37] veth1_macvtap: left promiscuous mode [ 526.486736][ T37] veth0_macvtap: left promiscuous mode [ 526.492333][ T37] veth1_vlan: left promiscuous mode [ 526.497558][ T37] veth0_vlan: left promiscuous mode [ 526.566208][T32079] Cannot find add_set index 0 as target [ 526.637233][ T37] team0 (unregistering): Port device team_slave_1 removed [ 526.648100][ T37] team0 (unregistering): Port device team_slave_0 removed [ 526.738154][T31907] veth0_vlan: entered promiscuous mode [ 526.754169][T31907] veth1_vlan: entered promiscuous mode [ 526.774804][T31907] veth0_macvtap: entered promiscuous mode [ 526.778048][T32094] loop0: detected capacity change from 0 to 256 [ 526.787413][T32094] vfat: Bad value for 'time_offset' [ 526.787445][T31907] veth1_macvtap: entered promiscuous mode [ 526.801961][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.812524][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.822347][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.832781][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.842679][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.853119][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.862938][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.873378][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.883253][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.893680][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.903584][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.914009][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.924111][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.934737][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.947604][T31907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.955804][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.966301][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.976200][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.985360][T32097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9520'. [ 526.986711][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.005593][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.016197][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.026070][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.036508][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.046332][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.056772][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.066589][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.077022][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.086873][T31907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.097405][T31907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.108127][T31907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.121505][T31907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.130461][T31907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.139170][T31907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.147957][T31907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.192038][T32104] tipc: Enabling of bearer rejected, failed to enable media [ 527.200764][T32106] syz.3.9524[32106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.200856][T32106] syz.3.9524[32106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.205191][T32104] ªªªªªª: renamed from syzkaller0 [ 527.237681][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9524'. [ 527.267464][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9522'. [ 527.299960][T31976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.308740][T31976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 527.320197][T31976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 527.328836][T31976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.375701][T31976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.393242][T31976] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.401558][T32113] netlink: 'syz.4.9525': attribute type 1 has an invalid length. [ 527.411098][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.418137][T11877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.431955][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.439047][T11877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.487461][T32114] loop2: detected capacity change from 0 to 1024 [ 527.496699][T32114] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 527.507782][T32114] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 527.523059][T32114] JBD2: no valid journal superblock found [ 527.528813][T32114] EXT4-fs (loop2): Could not load journal inode [ 527.579212][T31976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.681101][T31976] veth0_vlan: entered promiscuous mode [ 527.689415][T31976] veth1_vlan: entered promiscuous mode [ 527.715888][T31976] veth0_macvtap: entered promiscuous mode [ 527.738728][T31976] veth1_macvtap: entered promiscuous mode [ 527.766974][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.777423][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.787261][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.798007][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.807859][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.818637][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.828510][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.839104][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.848932][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.859453][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.869289][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.879749][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.889778][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.900438][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.910245][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.920664][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.932981][T31976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.941332][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.951834][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.961730][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.972209][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.982246][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.992765][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.002679][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.013137][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.023035][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.033521][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.043367][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.053847][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.063712][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.074134][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.075909][ T29] audit: type=1400 audit(1726855468.118:13821): avc: denied { create } for pid=32127 comm="syz.3.9527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 528.083958][T31976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.083975][T31976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.101923][T31976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.164108][T32131] loop0: detected capacity change from 0 to 256 [ 528.180258][T32131] vfat: Bad value for 'time_offset' [ 528.190834][T32134] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 528.200743][ T29] audit: type=1400 audit(1726855468.168:13822): avc: denied { sys_admin } for pid=32127 comm="syz.3.9527" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 528.226948][T31976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.235777][T31976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.244732][T31976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.253558][T31976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.298132][T32137] Cannot find add_set index 0 as target [ 528.361708][ T29] audit: type=1326 audit(1726855468.398:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32151 comm="syz.0.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa372def9 code=0x7ffc0000 [ 528.385449][ T29] audit: type=1326 audit(1726855468.398:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32151 comm="syz.0.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa372def9 code=0x7ffc0000 [ 528.409387][ T29] audit: type=1326 audit(1726855468.398:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32151 comm="syz.0.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0aa372def9 code=0x7ffc0000 [ 528.433019][ T29] audit: type=1326 audit(1726855468.398:13826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32151 comm="syz.0.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa372def9 code=0x7ffc0000 [ 528.457173][ T29] audit: type=1326 audit(1726855468.398:13827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32151 comm="syz.0.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0aa372def9 code=0x7ffc0000 [ 528.481120][ T29] audit: type=1326 audit(1726855468.398:13828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32151 comm="syz.0.9535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa372def9 code=0x7ffc0000 [ 528.515197][T32157] all: renamed from team_slave_0 (while UP) [ 528.525869][T32158] loop2: detected capacity change from 0 to 512 [ 528.543188][T32158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.555865][T32158] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.574703][T32158] team0: Port device macvlan1 added [ 528.584923][T32158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9536'. [ 528.593918][T32158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9536'. [ 528.636521][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.844857][T32173] geneve2: entered promiscuous mode [ 528.895695][T32174] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 529.217892][T32176] loop1: detected capacity change from 0 to 1024 [ 529.224721][T32176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 529.231657][T32176] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 529.253775][T32176] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 529.257294][T32181] loop0: detected capacity change from 0 to 256 [ 529.262182][T32176] System zones: 0-1, 3-36 [ 529.275732][T32176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.279907][T32181] vfat: Bad value for 'time_offset' [ 529.303170][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.326016][T32184] loop1: detected capacity change from 0 to 512 [ 529.351573][T32184] EXT4-fs (loop1): too many log groups per flexible block group [ 529.359353][T32184] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 529.366293][T32184] EXT4-fs (loop1): mount failed [ 529.392265][T32188] netlink: 'syz.1.9546': attribute type 10 has an invalid length. [ 529.402133][T32188] bridge0: port 3(ipvlan0) entered blocking state [ 529.408750][T32188] bridge0: port 3(ipvlan0) entered disabled state [ 529.415958][T32188] ipvlan0: entered allmulticast mode [ 529.421424][T32188] veth0_vlan: entered allmulticast mode [ 529.424491][T32192] loop4: detected capacity change from 0 to 512 [ 529.433996][T32188] ipvlan0: left allmulticast mode [ 529.439035][T32188] veth0_vlan: left allmulticast mode [ 529.445016][T32192] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 529.453671][T32188] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 529.454108][T32192] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 529.501404][T32192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 529.510265][T32197] __nla_validate_parse: 10 callbacks suppressed [ 529.510279][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9550'. [ 529.517597][T32192] System zones: 0-2, 18-18, 34-34 [ 529.532578][T32192] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 529.551316][T32192] EXT4-fs (loop4): 1 truncate cleaned up [ 529.557300][T32197] hsr_slave_1 (unregistering): left promiscuous mode [ 529.557557][T32192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.586104][T32200] Cannot find add_set index 0 as target [ 529.680208][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.696824][T32222] FAULT_INJECTION: forcing a failure. [ 529.696824][T32222] name failslab, interval 1, probability 0, space 0, times 0 [ 529.706906][T32225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9560'. [ 529.709521][T32222] CPU: 1 UID: 0 PID: 32222 Comm: syz.1.9558 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 529.730309][T32222] Tainted: [W]=WARN [ 529.734105][T32222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 529.740636][T32223] loop0: detected capacity change from 0 to 256 [ 529.744151][T32222] Call Trace: [ 529.744160][T32222] [ 529.753531][T32223] vfat: Bad value for 'time_offset' [ 529.753627][T32222] dump_stack_lvl+0xf2/0x150 [ 529.766368][T32222] dump_stack+0x15/0x20 [ 529.770604][T32222] should_fail_ex+0x229/0x230 [ 529.775294][T32222] ? getname_flags+0x81/0x3b0 [ 529.780007][T32222] should_failslab+0x8f/0xb0 [ 529.784659][T32222] kmem_cache_alloc_noprof+0x4c/0x290 [ 529.790031][T32222] getname_flags+0x81/0x3b0 [ 529.794585][T32222] getname+0x17/0x20 [ 529.798485][T32222] do_sys_openat2+0x67/0x120 [ 529.803150][T32222] __x64_sys_openat+0xf3/0x120 [ 529.807991][T32222] x64_sys_call+0x1025/0x2d60 [ 529.812672][T32222] do_syscall_64+0xc9/0x1c0 [ 529.817171][T32222] ? clear_bhb_loop+0x55/0xb0 [ 529.821857][T32222] ? clear_bhb_loop+0x55/0xb0 [ 529.826581][T32222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.832488][T32222] RIP: 0033:0x7ffadb34def9 [ 529.836895][T32222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.856497][T32222] RSP: 002b:00007ffad9fc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.864989][T32222] RAX: ffffffffffffffda RBX: 00007ffadb505f80 RCX: 00007ffadb34def9 [ 529.873023][T32222] RDX: 00000000000a4000 RSI: 00000000200002c0 RDI: ffffffffffffff9c [ 529.881009][T32222] RBP: 00007ffad9fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 529.889035][T32222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.897000][T32222] R13: 0000000000000000 R14: 00007ffadb505f80 R15: 00007ffeea222388 [ 529.905029][T32222] [ 529.963632][T32241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9557'. [ 530.007558][T32245] loop3: detected capacity change from 0 to 1024 [ 530.017682][T32245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.022388][T32249] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 530.036887][T32245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 530.048307][T32245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 530.052935][T32252] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 530.059643][T32247] IPv6: Can't replace route, no match found [ 530.064651][T32245] System zones: 0-1, 3-36 [ 530.084391][T32245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.100189][T32254] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9572'. [ 530.109706][T31889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.114278][T32254] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 530.161082][T32262] loop3: detected capacity change from 0 to 256 [ 530.167642][T32262] vfat: Bad value for 'time_offset' [ 530.202750][T32265] netlink: 'syz.0.9575': attribute type 10 has an invalid length. [ 530.211781][T32265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9575'. [ 530.222848][T32265] bridge0: port 4(ipvlan0) entered blocking state [ 530.229322][T32265] bridge0: port 4(ipvlan0) entered disabled state [ 530.236724][T32265] ipvlan0: entered allmulticast mode [ 530.242496][T32265] ipvlan0: left allmulticast mode [ 530.248192][T32265] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 530.328066][T32280] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 530.419938][T32299] loop2: detected capacity change from 0 to 512 [ 530.429097][T32299] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 530.438175][T32299] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 530.446793][T32302] netlink: 300 bytes leftover after parsing attributes in process `syz.3.9588'. [ 530.457296][T32299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 530.461868][T32302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 530.465743][T32299] System zones: 0-2, 18-18, 34-34 [ 530.483382][T32299] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 530.498186][T32299] EXT4-fs (loop2): 1 truncate cleaned up [ 530.504471][T32299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.588127][T32309] loop1: detected capacity change from 0 to 1024 [ 530.594836][T32309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 530.601659][T32309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 530.614537][T32309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 530.624412][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.627319][T32309] System zones: 0-1, 3-36 [ 530.639727][T32309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.659215][T32314] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 530.666682][T32312] loop2: detected capacity change from 0 to 256 [ 530.676313][T32312] vfat: Bad value for 'time_offset' [ 530.682005][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.695483][T32317] ªªªªªª: renamed from syzkaller0 [ 530.776430][T32333] netlink: 'syz.4.9600': attribute type 10 has an invalid length. [ 530.784434][T32333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9600'. [ 530.795979][T32333] bridge0: port 3(ipvlan0) entered blocking state [ 530.802550][T32333] bridge0: port 3(ipvlan0) entered disabled state [ 530.809478][T32333] ipvlan0: entered allmulticast mode [ 530.814961][T32333] veth0_vlan: entered allmulticast mode [ 530.815003][T32335] netlink: 300 bytes leftover after parsing attributes in process `syz.3.9601'. [ 530.828462][T32333] ipvlan0: left allmulticast mode [ 530.834585][T32333] veth0_vlan: left allmulticast mode [ 530.840671][T32333] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 530.869444][T32335] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 530.895666][T32342] netlink: 'syz.4.9604': attribute type 10 has an invalid length. [ 530.903559][T32342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9604'. [ 530.926390][T32342] bridge0: port 3(ipvlan0) entered blocking state [ 530.933403][T32342] bridge0: port 3(ipvlan0) entered disabled state [ 530.944214][T32345] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 530.945190][T32342] ipvlan0: entered allmulticast mode [ 530.959144][T32342] veth0_vlan: entered allmulticast mode [ 530.964900][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 530.964915][ T29] audit: type=1400 audit(1726855471.008:14401): avc: denied { mount } for pid=32346 comm="syz.1.9606" name="/" dev="ramfs" ino=123246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 530.994343][T32342] ipvlan0: left allmulticast mode [ 530.999518][T32342] veth0_vlan: left allmulticast mode [ 531.008913][T32342] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 531.033049][ T29] audit: type=1400 audit(1726855471.078:14402): avc: denied { connect } for pid=32346 comm="syz.1.9606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 531.053766][ T29] audit: type=1400 audit(1726855471.078:14403): avc: denied { write } for pid=32346 comm="syz.1.9606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 531.105650][T32347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9606'. [ 531.119122][T32361] loop2: detected capacity change from 0 to 256 [ 531.126495][T32361] vfat: Bad value for 'time_offset' [ 531.193891][T32371] netlink: 'syz.0.9615': attribute type 10 has an invalid length. [ 531.202493][T32371] bridge0: port 4(ipvlan0) entered blocking state [ 531.208928][T32371] bridge0: port 4(ipvlan0) entered disabled state [ 531.218052][T32371] ipvlan0: entered allmulticast mode [ 531.224105][T32371] ipvlan0: left allmulticast mode [ 531.243805][T32374] syz.1.9617[32374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.243866][T32374] syz.1.9617[32374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.299042][T32377] Cannot find add_set index 0 as target [ 531.323201][T32385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 531.371575][ T29] audit: type=1326 audit(1726855471.418:14404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.3.9622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd154bedef9 code=0x7ffc0000 [ 531.395552][ T29] audit: type=1326 audit(1726855471.418:14405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.3.9622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd154bedef9 code=0x7ffc0000 [ 531.419310][ T29] audit: type=1326 audit(1726855471.418:14406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.3.9622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd154bedef9 code=0x7ffc0000 [ 531.443010][ T29] audit: type=1400 audit(1726855471.418:14407): avc: denied { mounton } for pid=32391 comm="syz.3.9622" path="/32/file0" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 531.465757][ T29] audit: type=1400 audit(1726855471.418:14408): avc: denied { mount } for pid=32391 comm="syz.3.9622" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 531.488606][ T29] audit: type=1326 audit(1726855471.418:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.3.9622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd154bedef9 code=0x7ffc0000 [ 531.512323][ T29] audit: type=1326 audit(1726855471.418:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.3.9622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fd154bedef9 code=0x7ffc0000 [ 531.561082][T32396] IPv6: Can't replace route, no match found [ 531.582128][T32398] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 531.630567][T32404] loop2: detected capacity change from 0 to 512 [ 531.637346][T32404] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 531.649905][T32404] EXT4-fs (loop2): invalid journal inode [ 531.655561][T32404] EXT4-fs (loop2): can't get journal size [ 531.673119][T32404] EXT4-fs (loop2): 1 truncate cleaned up [ 531.673126][T32410] loop4: detected capacity change from 0 to 256 [ 531.673513][T32410] vfat: Bad value for 'time_offset' [ 531.679239][T32404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.719644][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.763898][T32416] net_ratelimit: 1 callbacks suppressed [ 531.763965][T32416] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 531.797306][T32420] syz.2.9632[32420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.797372][T32420] syz.2.9632[32420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.932355][T32424] Cannot find add_set index 0 as target [ 531.964378][T32439] syz.1.9638[32439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.964484][T32439] syz.1.9638[32439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.074944][T32456] loop1: detected capacity change from 0 to 256 [ 532.081521][T32459] loop2: detected capacity change from 0 to 1024 [ 532.088014][T32456] vfat: Bad value for 'time_offset' [ 532.093829][T32459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 532.111629][T32459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 532.123716][T32459] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 532.132750][T32459] System zones: 0-1, 3-36 [ 532.137843][T32459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.162328][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.187436][T32464] ªªªªªª: renamed from syzkaller0 [ 532.232787][T32470] loop0: detected capacity change from 0 to 512 [ 532.250238][T32470] EXT4-fs (loop0): too many log groups per flexible block group [ 532.257908][T32470] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 532.267420][T32473] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 532.279490][T32470] EXT4-fs (loop0): mount failed [ 532.293378][T32478] netlink: 'syz.1.9654': attribute type 10 has an invalid length. [ 532.302733][T32478] bridge0: port 3(ipvlan0) entered blocking state [ 532.309246][T32478] bridge0: port 3(ipvlan0) entered disabled state [ 532.318693][T32478] ipvlan0: entered allmulticast mode [ 532.324040][T32478] veth0_vlan: entered allmulticast mode [ 532.330247][T32478] ipvlan0: left allmulticast mode [ 532.335284][T32478] veth0_vlan: left allmulticast mode [ 532.341219][T32478] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 532.433391][T32487] Cannot find add_set index 0 as target [ 532.528391][T32504] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 532.545344][T32508] loop0: detected capacity change from 0 to 1024 [ 532.567498][T32509] loop2: detected capacity change from 0 to 512 [ 532.571814][T32508] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 532.584720][T32508] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 532.618068][T32508] JBD2: no valid journal superblock found [ 532.623943][T32508] EXT4-fs (loop0): Could not load journal inode [ 532.640100][T32509] EXT4-fs (loop2): too many log groups per flexible block group [ 532.647904][T32509] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 532.663180][T32509] EXT4-fs (loop2): mount failed [ 532.671974][T32517] netlink: 'syz.3.9668': attribute type 10 has an invalid length. [ 532.682345][T32517] bridge0: port 3(ipvlan0) entered blocking state [ 532.688932][T32517] bridge0: port 3(ipvlan0) entered disabled state [ 532.696049][T32517] ipvlan0: entered allmulticast mode [ 532.701414][T32517] veth0_vlan: entered allmulticast mode [ 532.714647][T32517] ipvlan0: left allmulticast mode [ 532.719900][T32517] veth0_vlan: left allmulticast mode [ 532.730343][T32517] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 532.746547][T32522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 532.862811][T32537] ªªªªªª: renamed from syzkaller0 [ 532.880241][T32539] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 532.966609][T32548] loop4: detected capacity change from 0 to 1024 [ 532.997344][T32553] FAULT_INJECTION: forcing a failure. [ 532.997344][T32553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.011173][T32553] CPU: 1 UID: 0 PID: 32553 Comm: syz.2.9683 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 533.023115][T32553] Tainted: [W]=WARN [ 533.026911][T32553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 533.037078][T32553] Call Trace: [ 533.040360][T32553] [ 533.043292][T32553] dump_stack_lvl+0xf2/0x150 [ 533.047954][T32553] dump_stack+0x15/0x20 [ 533.052147][T32553] should_fail_ex+0x229/0x230 [ 533.057006][T32553] should_fail+0xb/0x10 [ 533.061221][T32553] should_fail_usercopy+0x1a/0x20 [ 533.066261][T32553] _copy_from_user+0x1e/0xd0 [ 533.070977][T32553] copy_msghdr_from_user+0x54/0x2a0 [ 533.076265][T32553] __sys_sendmsg+0x171/0x270 [ 533.080929][T32553] __x64_sys_sendmsg+0x46/0x50 [ 533.085805][T32553] x64_sys_call+0x2689/0x2d60 [ 533.090512][T32553] do_syscall_64+0xc9/0x1c0 [ 533.095074][T32553] ? clear_bhb_loop+0x55/0xb0 [ 533.099899][T32553] ? clear_bhb_loop+0x55/0xb0 [ 533.104598][T32553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.110497][T32553] RIP: 0033:0x7f28c773def9 [ 533.114987][T32553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.134685][T32553] RSP: 002b:00007f28c63b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.143140][T32553] RAX: ffffffffffffffda RBX: 00007f28c78f5f80 RCX: 00007f28c773def9 [ 533.151190][T32553] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 533.159334][T32553] RBP: 00007f28c63b7090 R08: 0000000000000000 R09: 0000000000000000 [ 533.167423][T32553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.175554][T32553] R13: 0000000000000000 R14: 00007f28c78f5f80 R15: 00007ffd2e0c2668 [ 533.183600][T32553] [ 533.188579][T32548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.198807][T32548] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.226801][T32548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 533.234940][T32548] System zones: 0-1, 3-36 [ 533.252456][T32548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.285607][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.368958][T32568] loop1: detected capacity change from 0 to 512 [ 533.393036][T32568] EXT4-fs (loop1): too many log groups per flexible block group [ 533.400817][T32568] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 533.419223][T32568] EXT4-fs (loop1): mount failed [ 533.467738][T32574] loop1: detected capacity change from 0 to 1024 [ 533.475409][T32574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.484059][T32574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.494075][T32574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 533.495283][T32586] loop0: detected capacity change from 0 to 1024 [ 533.502321][T32574] System zones: 0-1, 3-36 [ 533.505620][T32574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.509689][T32586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.513993][T32576] Cannot find add_set index 0 as target [ 533.531724][T32586] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.548087][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.548428][T32586] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 533.565383][T32586] System zones: 0-1, 3-36 [ 533.570928][T32586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.587933][T32591] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 533.602517][T31707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.708297][T32595] loop1: detected capacity change from 0 to 1024 [ 533.715070][T32595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.722945][T32595] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.733833][T32595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 533.742043][T32595] System zones: 0-1, 3-36 [ 533.747061][T32595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.768340][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.801618][T32604] syz.1.9701[32604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.801670][T32604] syz.1.9701[32604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.926218][T32616] loop1: detected capacity change from 0 to 256 [ 533.947305][T32616] vfat: Bad value for 'time_offset' [ 534.284097][T32630] loop1: detected capacity change from 0 to 1024 [ 534.295287][T32627] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 534.344815][T32630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.362210][T32622] Cannot find add_set index 0 as target [ 534.389271][T32630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 534.418939][T32630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 534.427916][T32630] System zones: 0-1, 3-36 [ 534.431556][T32638] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 534.433265][T32630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.465876][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.491901][T32647] loop1: detected capacity change from 0 to 128 [ 534.501632][T32647] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.514353][T32647] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 534.557984][T31976] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.577201][T32654] __nla_validate_parse: 20 callbacks suppressed [ 534.577218][T32654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9717'. [ 534.640156][T32656] Cannot find add_set index 0 as target [ 534.759467][T32665] loop3: detected capacity change from 0 to 256 [ 534.766235][T32665] vfat: Bad value for 'time_offset' [ 534.928089][T32668] loop3: detected capacity change from 0 to 512 [ 534.935063][T32668] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 534.944172][T32668] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 534.953247][T32668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 534.961974][T32668] System zones: 0-2, 18-18, 34-34 [ 534.967639][T32668] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 534.984273][T32671] netlink: 'syz.4.9722': attribute type 10 has an invalid length. [ 534.985396][T32668] EXT4-fs (loop3): 1 truncate cleaned up [ 534.992261][T32671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9722'. [ 534.998291][T32668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.006888][T32671] bridge0: port 3(ipvlan0) entered blocking state [ 535.025352][T32671] bridge0: port 3(ipvlan0) entered disabled state [ 535.032658][T32671] ipvlan0: entered allmulticast mode [ 535.037961][T32671] veth0_vlan: entered allmulticast mode [ 535.044937][T32671] ipvlan0: left allmulticast mode [ 535.050138][T32671] veth0_vlan: left allmulticast mode [ 535.056104][T32671] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 535.096603][T32674] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6z [ 535.137460][T31889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.171458][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9726'. [ 535.186561][T32683] loop3: detected capacity change from 0 to 512 [ 535.202377][T32685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9728'. [ 535.207573][T32687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9729'. [ 535.232407][T32683] EXT4-fs (loop3): too many log groups per flexible block group [ 535.240335][T32683] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 535.240471][T32691] loop4: detected capacity change from 0 to 256 [ 535.253874][T32691] vfat: Bad value for 'time_offset' [ 535.255331][T32683] EXT4-fs (loop3): mount failed [ 535.405240][T32705] loop4: detected capacity change from 0 to 128 [ 535.413187][T32705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 535.419984][T32708] IPv6: Can't replace route, no match found [ 535.429025][T32705] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 535.474961][T31771] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.519061][T32711] Cannot find add_set index 0 as target [ 535.555260][T32721] delete_channel: no stack [ 535.697841][T32735] loop4: detected capacity change from 0 to 256 [ 535.704498][T32735] vfat: Bad value for 'time_offset' [ 535.877985][T32742] IPv6: Can't replace route, no match found [ 535.898055][T32744] loop4: detected capacity change from 0 to 512 [ 535.904796][T32744] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 535.914001][T32744] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 535.923159][T32744] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 535.931678][T32744] System zones: 0-2, 18-18, 34-34 [ 535.937014][T32744] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 535.952493][T32744] EXT4-fs (loop4): 1 truncate cleaned up [ 535.958595][T32744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.978571][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 535.978581][ T29] audit: type=1326 audit(1726855476.028:14752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 536.009726][ T29] audit: type=1326 audit(1726855476.028:14753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 536.033441][ T29] audit: type=1326 audit(1726855476.028:14754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffadb34def9 code=0x7ffc0000 [ 536.057132][ T29] audit: type=1326 audit(1726855476.058:14755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 536.080641][ T29] audit: type=1326 audit(1726855476.058:14756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 536.104424][ T29] audit: type=1326 audit(1726855476.058:14757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffadb34def9 code=0x7ffc0000 [ 536.140571][ T29] audit: type=1326 audit(1726855476.058:14758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 536.164069][ T29] audit: type=1326 audit(1726855476.058:14759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 536.187824][ T29] audit: type=1326 audit(1726855476.058:14760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffadb34def9 code=0x7ffc0000 [ 536.211508][ T29] audit: type=1326 audit(1726855476.068:14761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32693 comm="syz.1.9730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 536.255852][T32749] netlink: 'syz.0.9751': attribute type 10 has an invalid length. [ 536.263725][T32749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9751'. [ 536.279127][T32749] bridge0: port 4(ipvlan0) entered blocking state [ 536.285879][T32749] bridge0: port 4(ipvlan0) entered disabled state [ 536.292778][T32749] ipvlan0: entered allmulticast mode [ 536.298378][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.298719][T32749] ipvlan0: left allmulticast mode [ 536.317238][T32749] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 536.451876][ T312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9759'. [ 536.481786][ T302] Cannot find add_set index 0 as target [ 536.487014][ T315] IPv6: Can't replace route, no match found [ 536.512616][ T317] loop4: detected capacity change from 0 to 512 [ 536.519478][ T317] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 536.528518][ T317] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 536.552666][ T320] syz.3.9765[320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.552759][ T320] syz.3.9765[320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.556578][ T317] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 536.583356][ T317] System zones: 0-2, 18-18, 34-34 [ 536.590625][ T317] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 536.607685][ T317] EXT4-fs (loop4): 1 truncate cleaned up [ 536.614771][ T317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.707607][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.735070][ T333] loop4: detected capacity change from 0 to 256 [ 536.744211][ T333] vfat: Bad value for 'time_offset' [ 536.822783][ T343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9774'. [ 536.850475][ T345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9775'. [ 536.918365][ T353] loop4: detected capacity change from 0 to 1024 [ 536.925193][ T353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 536.934830][ T353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 536.938802][ T355] loop1: detected capacity change from 0 to 512 [ 536.951177][ T355] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 536.951179][ T353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 536.960241][ T355] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 536.968423][ T353] System zones: 0-1, 3-36 [ 536.982594][ T353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.002050][ T355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 537.010296][ T355] System zones: 0-2, 18-18, 34-34 [ 537.010614][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.026844][ T355] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 537.049208][ T355] EXT4-fs (loop1): 1 truncate cleaned up [ 537.056698][ T355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.059642][ T366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9781'. [ 537.103536][ T358] Cannot find add_set index 0 as target [ 537.143526][ T375] FAULT_INJECTION: forcing a failure. [ 537.143526][ T375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.156889][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz.4.9785 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 537.168683][ T375] Tainted: [W]=WARN [ 537.172525][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 537.182618][ T375] Call Trace: [ 537.185887][ T375] [ 537.188812][ T375] dump_stack_lvl+0xf2/0x150 [ 537.193476][ T375] dump_stack+0x15/0x20 [ 537.197745][ T375] should_fail_ex+0x229/0x230 [ 537.202417][ T375] should_fail+0xb/0x10 [ 537.206582][ T375] should_fail_usercopy+0x1a/0x20 [ 537.211617][ T375] _copy_from_user+0x1e/0xd0 [ 537.216351][ T375] copy_msghdr_from_user+0x54/0x2a0 [ 537.221560][ T375] __sys_sendmsg+0x171/0x270 [ 537.226257][ T375] __x64_sys_sendmsg+0x46/0x50 [ 537.231116][ T375] x64_sys_call+0x2689/0x2d60 [ 537.235796][ T375] do_syscall_64+0xc9/0x1c0 [ 537.240294][ T375] ? clear_bhb_loop+0x55/0xb0 [ 537.244994][ T375] ? clear_bhb_loop+0x55/0xb0 [ 537.249738][ T375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.255702][ T375] RIP: 0033:0x7f0b8501def9 [ 537.260128][ T375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.279878][ T375] RSP: 002b:00007f0b83c91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.288279][ T375] RAX: ffffffffffffffda RBX: 00007f0b851d5f80 RCX: 00007f0b8501def9 [ 537.296240][ T375] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 537.304227][ T375] RBP: 00007f0b83c91090 R08: 0000000000000000 R09: 0000000000000000 [ 537.312201][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.320171][ T375] R13: 0000000000000000 R14: 00007f0b851d5f80 R15: 00007fff71baacb8 [ 537.328174][ T375] [ 537.333817][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.370105][ T385] syz.0.9790[385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.370252][ T385] syz.0.9790[385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.376598][ T386] loop4: detected capacity change from 0 to 256 [ 537.401973][ T386] vfat: Bad value for 'time_offset' [ 537.427118][ T389] loop0: detected capacity change from 0 to 1024 [ 537.433938][ T389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 537.441658][ T389] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 537.451449][ T389] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 537.459851][ T389] System zones: 0-1, 3-36 [ 537.465233][ T389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.467482][ T393] syz.2.9792[393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.478059][ T393] syz.2.9792[393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.491054][T31707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.570552][ T404] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 537.585703][ T406] loop0: detected capacity change from 0 to 512 [ 537.592067][ T409] 9pnet_fd: Insufficient options for proto=fd [ 537.598254][ T406] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 537.607365][ T406] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 537.617256][ T409] 9pnet_fd: p9_fd_create_tcp (409): problem connecting socket to 127.0.0.1 [ 537.631109][ T409] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 537.631164][ T406] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 537.637719][ T409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 537.637770][ T409] vhci_hcd vhci_hcd.0: Device attached [ 537.647047][ T406] System zones: 0-2, 18-18, 34-34 [ 537.664996][ T409] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.674008][ T409] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.682156][ T406] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 537.684788][ T409] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 537.697409][ T406] EXT4-fs (loop0): 1 truncate cleaned up [ 537.703124][ T409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 537.711784][ T406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.716242][ T409] vhci_hcd vhci_hcd.0: Device attached [ 537.735524][ T417] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.752369][ T409] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.761380][ T409] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.770829][ T409] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 537.782039][ T409] vhci_hcd vhci_hcd.0: port 0 already used [ 537.788933][ T410] vhci_hcd: connection closed [ 537.789121][T11865] vhci_hcd: stop threads [ 537.789199][ T415] vhci_hcd: connection closed [ 537.793812][T11865] vhci_hcd: release socket [ 537.807173][T11865] vhci_hcd: disconnect device [ 537.809812][T11865] vhci_hcd: stop threads [ 537.816120][T11865] vhci_hcd: release socket [ 537.820732][T11865] vhci_hcd: disconnect device [ 537.830123][ T428] syz.4.9803[428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.830226][ T428] syz.4.9803[428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.844599][T31707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.875829][ T432] netlink: 'syz.0.9804': attribute type 10 has an invalid length. [ 537.884766][ T432] bridge0: port 4(ipvlan0) entered blocking state [ 537.891616][ T432] bridge0: port 4(ipvlan0) entered disabled state [ 537.892695][ T434] loop4: detected capacity change from 0 to 256 [ 537.901976][ T432] ipvlan0: entered allmulticast mode [ 537.908870][ T434] vfat: Bad value for 'time_offset' [ 537.910068][ T432] ipvlan0: left allmulticast mode [ 537.920715][ T432] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 537.993893][ T445] loop1: detected capacity change from 0 to 8192 [ 538.096837][ T468] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 538.102522][ T453] Cannot find add_set index 0 as target [ 538.143321][ T470] loop4: detected capacity change from 0 to 512 [ 538.160336][ T470] EXT4-fs (loop4): too many log groups per flexible block group [ 538.168066][ T470] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 538.174936][ T470] EXT4-fs (loop4): mount failed [ 538.196112][ T474] loop4: detected capacity change from 0 to 512 [ 538.203242][ T474] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 538.212312][ T474] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 538.222178][ T474] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 538.231235][ T474] System zones: 0-2, 18-18, 34-34 [ 538.236681][ T474] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 538.251754][ T474] EXT4-fs (loop4): 1 truncate cleaned up [ 538.258001][ T474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.357669][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.393665][ T489] loop4: detected capacity change from 0 to 256 [ 538.400477][ T489] vfat: Bad value for 'time_offset' [ 538.468901][ T496] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6z [ 538.494726][ T498] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 538.578094][ T506] loop2: detected capacity change from 0 to 512 [ 538.593188][ T506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 538.605838][ T506] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.620069][ T511] loop4: detected capacity change from 0 to 512 [ 538.633868][ T511] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 538.643025][ T511] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 538.652436][ T511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 538.661983][ T511] System zones: 0-2, 18-18, 34-34 [ 538.669586][ T511] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 538.684653][ T511] EXT4-fs (loop4): 1 truncate cleaned up [ 538.691010][ T511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.758860][ T522] 9pnet_fd: Insufficient options for proto=fd [ 538.760774][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 538.792273][ T522] 9pnet_fd: p9_fd_create_tcp (522): problem connecting socket to 127.0.0.1 [ 538.792385][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.818804][ T527] loop0: detected capacity change from 0 to 256 [ 538.832802][ T522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 538.839432][ T522] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.846859][ T522] vhci_hcd vhci_hcd.0: Device attached [ 538.859795][ T527] vfat: Bad value for 'time_offset' [ 538.867592][ T522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 538.884816][ T534] loop4: detected capacity change from 0 to 512 [ 538.885101][ T522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 538.910704][ T522] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(18) [ 538.917362][ T522] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 538.924847][ T522] vhci_hcd vhci_hcd.0: Device attached [ 538.927615][ T543] loop1: detected capacity change from 0 to 512 [ 538.931957][ T522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 538.945163][ T534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 538.947979][ T522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 538.958040][ T534] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.987744][ T522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 538.995345][ T534] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 538.998136][ T522] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 539.022684][ T543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 539.039290][ T2929] vhci_hcd: vhci_device speed not set [ 539.044858][ T522] vhci_hcd vhci_hcd.0: port 0 already used [ 539.051892][ T531] vhci_hcd: connection closed [ 539.052105][ T28] vhci_hcd: stop threads [ 539.061079][ T28] vhci_hcd: release socket [ 539.065581][ T28] vhci_hcd: disconnect device [ 539.065646][ T543] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.079038][ T547] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 539.086845][ T538] vhci_hcd: connection closed [ 539.094832][ T543] FAULT_INJECTION: forcing a failure. [ 539.094832][ T543] name failslab, interval 1, probability 0, space 0, times 0 [ 539.096963][T31771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 539.099606][ T543] CPU: 1 UID: 0 PID: 543 Comm: syz.1.9842 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 539.099638][ T543] Tainted: [W]=WARN [ 539.099645][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 539.099658][ T543] Call Trace: [ 539.099664][ T543] [ 539.152967][ T543] dump_stack_lvl+0xf2/0x150 [ 539.157580][ T543] dump_stack+0x15/0x20 [ 539.161755][ T543] should_fail_ex+0x229/0x230 [ 539.166515][ T543] ? audit_log_start+0x34c/0x6b0 [ 539.171525][ T543] should_failslab+0x8f/0xb0 [ 539.176188][ T543] kmem_cache_alloc_noprof+0x4c/0x290 [ 539.181576][ T543] audit_log_start+0x34c/0x6b0 [ 539.186357][ T543] audit_seccomp+0x4b/0x130 [ 539.190936][ T543] __seccomp_filter+0x6fa/0x1180 [ 539.195884][ T543] ? proc_fail_nth_write+0x12a/0x150 [ 539.201200][ T543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 539.207031][ T543] ? vfs_write+0x580/0x910 [ 539.211542][ T543] __secure_computing+0x9f/0x1c0 [ 539.216553][ T543] syscall_trace_enter+0xd1/0x1f0 [ 539.221636][ T543] do_syscall_64+0xaa/0x1c0 [ 539.226210][ T543] ? clear_bhb_loop+0x55/0xb0 [ 539.230903][ T543] ? clear_bhb_loop+0x55/0xb0 [ 539.235652][ T543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.241557][ T543] RIP: 0033:0x7ffadb34def9 [ 539.245968][ T543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.265628][ T543] RSP: 002b:00007ffad9fc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 539.274202][ T543] RAX: ffffffffffffffda RBX: 00007ffadb505f80 RCX: 00007ffadb34def9 [ 539.282174][ T543] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 0000000020000000 [ 539.290159][ T543] RBP: 00007ffad9fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 539.298396][ T543] R10: 00000000000083c0 R11: 0000000000000246 R12: 0000000000000001 [ 539.306521][ T543] R13: 0000000000000000 R14: 00007ffadb505f80 R15: 00007ffeea222388 [ 539.314498][ T543] [ 539.325210][ T28] vhci_hcd: stop threads [ 539.329557][ T28] vhci_hcd: release socket [ 539.334039][ T28] vhci_hcd: disconnect device [ 539.342442][ T2929] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 539.361684][ T2929] usb 7-1: enqueue for inactive port 0 [ 539.367301][ T2929] usb 7-1: enqueue for inactive port 0 [ 539.374152][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 539.376767][ T2929] usb 7-1: enqueue for inactive port 0 [ 539.410098][ T558] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 539.444791][ T565] loop2: detected capacity change from 0 to 512 [ 539.452469][ T565] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.461567][ T565] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 539.469915][ T2929] vhci_hcd: vhci_device speed not set [ 539.485278][ T565] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 539.496441][ T565] System zones: 0-2, 18-18, 34-34 [ 539.507503][ T565] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 539.527114][ T565] EXT4-fs (loop2): 1 truncate cleaned up [ 539.533288][ T565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.545843][ T578] syz.1.9855[578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.545919][ T578] syz.1.9855[578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.600942][ T585] loop1: detected capacity change from 0 to 1024 [ 539.619054][ T585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.626121][ T585] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.635748][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.636341][ T585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 539.653966][ T585] System zones: 0-1, 3-36 [ 539.659079][ T585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.690453][T31976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.715105][ T594] __nla_validate_parse: 10 callbacks suppressed [ 539.715119][ T594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9862'. [ 539.746270][ T598] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6z [ 539.773316][ T602] loop1: detected capacity change from 0 to 512 [ 539.800230][ T602] EXT4-fs (loop1): too many log groups per flexible block group [ 539.808036][ T602] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 539.815735][ T602] EXT4-fs (loop1): mount failed [ 539.829418][ T606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9867'. [ 539.860017][ T611] loop2: detected capacity change from 0 to 512 [ 539.866965][ T611] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.876228][ T611] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 539.888548][ T611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 539.896912][ T611] System zones: 0-2, 18-18, 34-34 [ 539.905037][ T611] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 539.920728][ T611] EXT4-fs (loop2): 1 truncate cleaned up [ 539.926923][ T611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.943329][ T618] netlink: 300 bytes leftover after parsing attributes in process `syz.1.9872'. [ 539.955384][ T618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 539.979017][ T621] tipc: Started in network mode [ 539.983946][ T621] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 539.991083][ T621] tipc: Enabled bearer , priority 0 [ 540.008223][T31907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.038888][ T626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9875'. [ 540.098199][ T633] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 540.109116][ T635] loop1: detected capacity change from 0 to 1024 [ 540.111773][ T635] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.123418][ T635] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 540.133362][ T635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 540.142239][ T635] System zones: 0-1, 3-36 [ 540.151290][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9879'. [ 540.245959][ T649] loop1: detected capacity change from 0 to 512 [ 540.253971][ T649] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 540.263144][ T649] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 540.278270][ T649] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 540.287052][ T649] System zones: 0-2, 18-18, 34-34 [ 540.299071][ T649] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 540.316424][ T649] EXT4-fs (loop1): 1 truncate cleaned up [ 540.398886][ T662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9890'. [ 540.421117][ T665] loop0: detected capacity change from 0 to 1024 [ 540.508049][ T681] IPv6: Can't replace route, no match found [ 540.530528][ T685] pimreg: entered allmulticast mode [ 540.543020][ T687] loop4: detected capacity change from 0 to 512 [ 540.551335][ T687] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 540.560444][ T687] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 540.572262][ T687] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 540.580376][ T687] System zones: 0-2, 18-18, 34-34 [ 540.585840][ T687] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 540.601228][ T687] EXT4-fs (loop4): 1 truncate cleaned up [ 540.632047][ T695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.635021][ T695] EXT4-fs (loop0): shut down requested (0) [ 540.709462][ T706] loop3: detected capacity change from 0 to 1024 [ 540.716113][ T706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.723095][ T706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 540.733195][ T706] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0003] [ 540.741422][ T706] System zones: 0-1, 3-36 [ 540.986242][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 540.986258][ T29] audit: type=1326 audit(1726855481.028:15068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 541.017306][ T29] audit: type=1326 audit(1726855481.068:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 541.040814][ T29] audit: type=1326 audit(1726855481.068:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 541.064110][ T29] audit: type=1326 audit(1726855481.068:15071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 541.087437][ T29] audit: type=1326 audit(1726855481.068:15072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffadb34def9 code=0x7ffc0000 [ 541.113043][ T984] tipc: Node number set to 10136234 [ 541.119138][ T29] audit: type=1326 audit(1726855481.138:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 541.142488][ T29] audit: type=1326 audit(1726855481.138:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 541.165909][ T29] audit: type=1326 audit(1726855481.138:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ffadb34def9 code=0x7ffc0000 [ 541.189387][ T29] audit: type=1326 audit(1726855481.138:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffadb344ea7 code=0x7ffc0000 [ 541.212907][ T29] audit: type=1326 audit(1726855481.138:15077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=663 comm="syz.1.9891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffadb2e9879 code=0x7ffc0000 [ 541.283754][ T722] loop1: detected capacity change from 0 to 512 [ 541.314241][ T722] EXT4-fs (loop1): too many log groups per flexible block group [ 541.322046][ T722] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 541.329214][ T722] EXT4-fs (loop1): mount failed [ 541.347533][ T728] loop0: detected capacity change from 0 to 512 [ 541.359016][ T730] loop4: detected capacity change from 0 to 1024 [ 541.365805][ T730] EXT4-fs: Ignoring removed orlov option [ 541.370835][ T728] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 541.371668][ T730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.380550][ T728] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 541.391783][ T732] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6z [ 541.406264][ T728] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 541.414467][ T728] System zones: 0-2, 18-18, 34-34 [ 541.419951][ T728] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 541.434954][ T728] EXT4-fs (loop0): 1 truncate cleaned up [ 541.472716][ T739] loop1: detected capacity change from 0 to 512 [ 541.529215][ T739] loop1: detected capacity change from 512 to 511 [ 541.615996][T31976] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 541.643934][ T753] bpf_get_probe_write_proto: 6 callbacks suppressed [ 541.643948][ T753] syz.0.9926[753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.651577][ T753] syz.0.9926[753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.663133][T31976] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220 [ 541.692173][T31976] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 2923804220 [ 541.698290][ T753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9926'. [ 541.822182][ T768] netlink: 300 bytes leftover after parsing attributes in process `syz.4.9932'. [ 541.835080][ T768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 541.944590][T11865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.992721][T11865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.041461][ T789] Cannot find add_set index 0 as target [ 542.084591][T11865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.105958][ T797] loop4: detected capacity change from 0 to 128 [ 542.134263][T11865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.194159][ T785] chnl_net:caif_netlink_parms(): no params data found [ 542.203412][ T803] FAULT_INJECTION: forcing a failure. [ 542.203412][ T803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.216558][ T803] CPU: 1 UID: 0 PID: 803 Comm: syz.4.9941 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 542.228281][ T803] Tainted: [W]=WARN [ 542.232074][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 542.242204][ T803] Call Trace: [ 542.245472][ T803] [ 542.248392][ T803] dump_stack_lvl+0xf2/0x150 [ 542.253004][ T803] dump_stack+0x15/0x20 [ 542.257176][ T803] should_fail_ex+0x229/0x230 [ 542.261891][ T803] should_fail+0xb/0x10 [ 542.266119][ T803] should_fail_usercopy+0x1a/0x20 [ 542.271156][ T803] _copy_from_user+0x1e/0xd0 [ 542.275761][ T803] __sys_bpf+0x14e/0x7a0 [ 542.280016][ T803] __x64_sys_bpf+0x43/0x50 [ 542.284553][ T803] x64_sys_call+0x2625/0x2d60 [ 542.289316][ T803] do_syscall_64+0xc9/0x1c0 [ 542.293899][ T803] ? clear_bhb_loop+0x55/0xb0 [ 542.298575][ T803] ? clear_bhb_loop+0x55/0xb0 [ 542.303274][ T803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.309233][ T803] RIP: 0033:0x7f0b8501def9 [ 542.313641][ T803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.333328][ T803] RSP: 002b:00007f0b83c91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 542.341788][ T803] RAX: ffffffffffffffda RBX: 00007f0b851d5f80 RCX: 00007f0b8501def9 [ 542.349833][ T803] RDX: 0000000000000090 RSI: 00000000200005c0 RDI: 0000000000000005 [ 542.357869][ T803] RBP: 00007f0b83c91090 R08: 0000000000000000 R09: 0000000000000000 [ 542.365838][ T803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.373812][ T803] R13: 0000000000000000 R14: 00007f0b851d5f80 R15: 00007fff71baacb8 [ 542.381786][ T803] [ 542.406064][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.413251][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.422907][ T785] bridge_slave_0: entered allmulticast mode [ 542.423264][ T810] loop4: detected capacity change from 0 to 512 [ 542.429511][ T785] bridge_slave_0: entered promiscuous mode [ 542.445565][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.452738][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.454071][ T810] EXT4-fs (loop4): too many log groups per flexible block group [ 542.459933][ T785] bridge_slave_1: entered allmulticast mode [ 542.460749][ T785] bridge_slave_1: entered promiscuous mode [ 542.468042][ T810] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 542.486310][ T810] EXT4-fs (loop4): mount failed [ 542.508156][ T785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.518997][ T785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.528347][T11865] bridge_slave_1: left allmulticast mode [ 542.534121][T11865] bridge_slave_1: left promiscuous mode [ 542.539788][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.547596][T11865] bridge_slave_0: left allmulticast mode [ 542.553282][T11865] bridge_slave_0: left promiscuous mode [ 542.558890][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.663409][T11865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.673842][T11865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.683836][T11865] bond0 (unregistering): Released all slaves [ 542.710966][ T785] team0: Port device team_slave_0 added [ 542.717625][ T785] team0: Port device team_slave_1 added [ 542.735439][T11865] hsr_slave_0: left promiscuous mode [ 542.741889][T11865] hsr_slave_1: left promiscuous mode [ 542.747861][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.755400][T11865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.765690][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.773167][T11865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.784841][T11865] veth1_vlan: left promiscuous mode [ 542.790163][T11865] veth0_vlan: left promiscuous mode [ 542.864913][ T834] loop3: detected capacity change from 0 to 512 [ 542.874431][ T834] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.883560][ T834] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 542.898737][T11865] team0 (unregistering): Port device team_slave_1 removed [ 542.906798][ T834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 542.919581][ T834] System zones: 0-2, 18-18, 34-34 [ 542.925068][T11865] team0 (unregistering): Port device team_slave_0 removed [ 542.925047][ T834] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 542.948180][ T834] EXT4-fs (loop3): 1 truncate cleaned up [ 542.989110][ T785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.996103][ T785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.022143][ T785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.033698][ T785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.040798][ T785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.066820][ T785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.081847][ T842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9956'. [ 543.140029][ T785] hsr_slave_0: entered promiscuous mode [ 543.156694][ T785] hsr_slave_1: entered promiscuous mode [ 543.167797][ T785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.180163][ T785] Cannot create hsr debugfs directory [ 543.205954][ T860] loop0: detected capacity change from 0 to 512 [ 543.257829][ T860] EXT4-fs (loop0): too many log groups per flexible block group [ 543.265577][ T860] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 543.272782][ T860] EXT4-fs (loop0): mount failed [ 543.386422][ T873] 9pnet_fd: Insufficient options for proto=fd [ 543.405454][ T875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9968'. [ 543.417617][ T879] random: crng reseeded on system resumption [ 543.576333][ T890] loop2: detected capacity change from 0 to 512 [ 543.593399][ T890] EXT4-fs (loop2): too many log groups per flexible block group [ 543.601311][ T890] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 543.608151][ T890] EXT4-fs (loop2): mount failed [ 543.618233][ T901] 9pnet_fd: Insufficient options for proto=fd [ 543.640990][ T785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.657874][ T785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.668988][ T785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.685975][ T785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.689830][ T912] loop2: detected capacity change from 0 to 512 [ 543.699987][ T912] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.709056][ T912] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 543.718077][ T914] FAULT_INJECTION: forcing a failure. [ 543.718077][ T914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.731316][ T914] CPU: 1 UID: 0 PID: 914 Comm: syz.0.9985 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 543.738478][ T785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.743194][ T914] Tainted: [W]=WARN [ 543.743203][ T914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 543.743215][ T914] Call Trace: [ 543.743220][ T914] [ 543.743228][ T914] dump_stack_lvl+0xf2/0x150 [ 543.743268][ T914] dump_stack+0x15/0x20 [ 543.768107][ T912] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 543.769920][ T914] should_fail_ex+0x229/0x230 [ 543.769974][ T914] should_fail+0xb/0x10 [ 543.777346][ T912] System zones: [ 543.778683][ T914] should_fail_usercopy+0x1a/0x20 [ 543.786708][ T912] 0-2 [ 543.791318][ T914] _copy_from_user+0x1e/0xd0 [ 543.795483][ T912] , 18-18 [ 543.799034][ T914] copy_msghdr_from_user+0x54/0x2a0 [ 543.804054][ T912] , 34-34 [ 543.806604][ T914] __sys_sendmsg+0x171/0x270 [ 543.811184][ T912] [ 543.814128][ T914] __x64_sys_sendmsg+0x46/0x50 [ 543.819397][ T912] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 543.822254][ T914] x64_sys_call+0x2689/0x2d60 [ 543.827306][ T912] EXT4-fs (loop2): 1 truncate cleaned up [ 543.829141][ T914] do_syscall_64+0xc9/0x1c0 [ 543.829165][ T914] ? clear_bhb_loop+0x55/0xb0 [ 543.829197][ T914] ? clear_bhb_loop+0x55/0xb0 [ 543.872616][ T914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.878509][ T914] RIP: 0033:0x7f0aa372def9 [ 543.882927][ T914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.902643][ T914] RSP: 002b:00007f0aa23a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.911065][ T914] RAX: ffffffffffffffda RBX: 00007f0aa38e5f80 RCX: 00007f0aa372def9 [ 543.919086][ T914] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000007 [ 543.927058][ T914] RBP: 00007f0aa23a1090 R08: 0000000000000000 R09: 0000000000000000 [ 543.935034][ T914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.943081][ T914] R13: 0000000000000000 R14: 00007f0aa38e5f80 R15: 00007ffd250b3ee8 [ 543.951131][ T914] [ 543.958569][ T785] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.973213][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.980524][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.993701][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.000793][T11877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.066565][ T925] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 544.096886][ T785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.209047][ T785] veth0_vlan: entered promiscuous mode [ 544.222606][ T785] veth1_vlan: entered promiscuous mode [ 544.256018][ T785] veth0_macvtap: entered promiscuous mode [ 544.266118][ T785] veth1_macvtap: entered promiscuous mode [ 544.275299][ T967] syz.3.10002[967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.275409][ T967] syz.3.10002[967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.278502][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.308728][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.318545][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.329046][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.338869][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.349308][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.359127][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.369684][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.369703][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.369717][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.369745][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.369757][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.369771][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.369847][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.369858][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.369909][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.373264][ T785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.475413][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.485964][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.495852][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.506428][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.516357][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.526846][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.537005][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.547513][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.557498][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.567956][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.577796][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.588236][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.598035][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.608479][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.618340][ T785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.628786][ T785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.641126][ T785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.655797][ T980] IPv6: Can't replace route, no match found [ 544.663205][ T785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.672010][ T785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.680747][ T785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.689465][ T785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.711125][ T982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 544.772202][ T989] __nla_validate_parse: 5 callbacks suppressed [ 544.772219][ T989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10007'. [ 544.851452][ T1000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10012'. [ 544.860638][ T1000] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10012'. [ 544.871357][ T1000] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10012'. [ 544.909101][ T1002] netlink: 300 bytes leftover after parsing attributes in process `syz.0.10013'. [ 544.924410][ T1002] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 544.974460][ T1006] loop3: detected capacity change from 0 to 512 [ 544.991185][ T1006] EXT4-fs (loop3): too many log groups per flexible block group [ 544.998911][ T1006] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 545.005749][ T1006] EXT4-fs (loop3): mount failed [ 545.022495][ T1010] IPv6: Can't replace route, no match found [ 545.112112][ T1020] IPv6: Can't replace route, no match found [ 545.163640][ T1028] syz.3.10025[1028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 545.163750][ T1028] syz.3.10025[1028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 545.191783][ T1028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10025'. [ 545.197585][ T1032] loop2: detected capacity change from 0 to 512 [ 545.236478][ T1035] IPv6: Can't replace route, no match found [ 545.254723][ T1032] EXT4-fs (loop2): too many log groups per flexible block group [ 545.262462][ T1032] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 545.262598][ T1032] EXT4-fs (loop2): mount failed [ 545.304240][ T1044] loop0: detected capacity change from 0 to 2048 [ 545.331547][ T1053] SELinux: Context system_u:object_r:scsi_generic_device_t:s0 is not valid (left unmapped). [ 545.369362][ T1058] netlink: 300 bytes leftover after parsing attributes in process `syz.2.10035'. [ 545.381693][ T1058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 545.503619][ T1061] Cannot find add_set index 0 as target [ 545.574555][ T1070] FAULT_INJECTION: forcing a failure. [ 545.574555][ T1070] name failslab, interval 1, probability 0, space 0, times 0 [ 545.587413][ T1070] CPU: 0 UID: 0 PID: 1070 Comm: syz.4.10038 Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 545.599340][ T1070] Tainted: [W]=WARN [ 545.603125][ T1070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 545.613347][ T1070] Call Trace: [ 545.613357][ T1070] [ 545.613365][ T1070] dump_stack_lvl+0xf2/0x150 [ 545.624653][ T1070] dump_stack+0x15/0x20 [ 545.628867][ T1070] should_fail_ex+0x229/0x230 [ 545.633558][ T1070] ? __alloc_skb+0x10b/0x310 [ 545.638180][ T1070] should_failslab+0x8f/0xb0 [ 545.642779][ T1070] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 545.648587][ T1070] __alloc_skb+0x10b/0x310 [ 545.653007][ T1070] audit_log_start+0x368/0x6b0 [ 545.657772][ T1070] audit_seccomp+0x4b/0x130 [ 545.662342][ T1070] __seccomp_filter+0x6fa/0x1180 [ 545.667358][ T1070] ? proc_fail_nth_write+0x12a/0x150 [ 545.672677][ T1070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 545.678319][ T1070] ? vfs_write+0x580/0x910 [ 545.682814][ T1070] ? __fget_files+0x1d4/0x210 [ 545.687492][ T1070] __secure_computing+0x9f/0x1c0 [ 545.692447][ T1070] syscall_trace_enter+0xd1/0x1f0 [ 545.697594][ T1070] ? fpregs_assert_state_consistent+0x83/0xa0 [ 545.703684][ T1070] do_syscall_64+0xaa/0x1c0 [ 545.708182][ T1070] ? clear_bhb_loop+0x55/0xb0 [ 545.713078][ T1070] ? clear_bhb_loop+0x55/0xb0 [ 545.717910][ T1070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.723965][ T1070] RIP: 0033:0x7f0b8501def9 [ 545.728400][ T1070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.748006][ T1070] RSP: 002b:00007f0b83c91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 545.756417][ T1070] RAX: ffffffffffffffda RBX: 00007f0b851d5f80 RCX: 00007f0b8501def9 [ 545.764385][ T1070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 545.772467][ T1070] RBP: 00007f0b83c91090 R08: 0000000000000000 R09: 0000000000000000 [ 545.780432][ T1070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.788431][ T1070] R13: 0000000000000000 R14: 00007f0b851d5f80 R15: 00007fff71baacb8 [ 545.796507][ T1070] [ 545.822822][ T1075] IPv6: Can't replace route, no match found [ 545.847194][ T1079] loop1: detected capacity change from 0 to 512 [ 545.872392][ T1079] EXT4-fs (loop1): too many log groups per flexible block group [ 545.880087][ T1079] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 545.884190][ T1085] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10044'. [ 545.886933][ T1079] EXT4-fs (loop1): mount failed [ 545.924347][ T1089] netlink: 300 bytes leftover after parsing attributes in process `syz.1.10046'. [ 545.936355][ T1089] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 545.958390][ T1091] loop4: detected capacity change from 0 to 512 [ 545.971555][ T1091] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.044638][ T1095] Cannot find add_set index 0 as target [ 546.045426][ T1103] netlink: 'syz.1.10049': attribute type 1 has an invalid length. [ 546.156732][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 546.156747][ T29] audit: type=1400 audit(1726855486.198:15533): avc: denied { rmdir } for pid=31707 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 546.185973][ T29] audit: type=1400 audit(1726855486.198:15534): avc: denied { unmount } for pid=31707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 546.206169][ T29] audit: type=1400 audit(1726855486.198:15535): avc: denied { unmount } for pid=31707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 546.224420][ T1106] IPv6: Can't replace route, no match found [ 546.269630][ T29] audit: type=1400 audit(1726855486.288:15536): avc: denied { unlink } for pid=31707 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 546.292641][ T29] audit: type=1400 audit(1726855486.288:15537): avc: denied { unlink } for pid=31707 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 546.299563][ T1113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10050'. [ 546.375696][ T29] audit: type=1326 audit(1726855486.418:15538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1120 comm="syz.0.10057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aa372def9 code=0x0 [ 546.636881][ T1139] Cannot find add_set index 0 as target [ 546.659404][ T1149] loop1: detected capacity change from 0 to 512 [ 546.666496][ T1149] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.675629][ T1149] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 546.694928][ T1149] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 546.703147][ T1149] System zones: 0-2, 18-18, 34-34 [ 546.708619][ T1149] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 546.723483][ T1149] EXT4-fs (loop1): 1 truncate cleaned up [ 546.908937][ T29] audit: type=1400 audit(1726855486.948:15539): avc: denied { connect } for pid=1164 comm="syz.1.10072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.935943][ T29] audit: type=1326 audit(1726855486.978:15540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.1.10072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3482abdef9 code=0x7ffc0000 [ 546.959757][ T29] audit: type=1326 audit(1726855486.978:15541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.1.10072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3482abdef9 code=0x7ffc0000 [ 546.983550][ T29] audit: type=1326 audit(1726855486.978:15542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.1.10072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f3482abdef9 code=0x7ffc0000 [ 547.061243][ T1170] Cannot find add_set index 0 as target [ 547.113616][ T1183] 9pnet_virtio: no channels available for device € [ 547.244109][ T1194] loop4: detected capacity change from 0 to 164 [ 547.254516][ T1194] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 547.267992][ T1196] IPv6: Can't replace route, no match found [ 547.328361][ T1206] loop2: detected capacity change from 0 to 164 [ 547.336232][ T1206] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 547.346155][ T1206] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 547.355101][ T1206] 9pnet_fd: Insufficient options for proto=fd [ 547.440720][T31907] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 547.451335][T31907] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 547.459140][T31907] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 547.468262][T31907] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 547.476743][T31907] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 547.485671][T31907] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 547.493779][T31907] VFS: Lookup of '' in iso9660 loop2 would have caused loop [ 547.502512][T31907] VFS: Lookup of '' in iso9660 loop2 would have caused loop [ 547.617671][ T29] ================================================================== [ 547.625763][ T29] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 547.632971][ T29] [ 547.635292][ T29] race at unknown origin, with assert no writes to 0xffff88810432d2e8 of 4 bytes by task 29 on cpu 0: [ 547.646223][ T29] dequeue_entities+0x6df/0x760 [ 547.651082][ T29] pick_next_task_fair+0x7d/0x410 [ 547.656108][ T29] __schedule+0x27c/0x940 [ 547.660444][ T29] schedule+0x55/0xc0 [ 547.664420][ T29] kauditd_thread+0x56b/0x650 [ 547.669094][ T29] kthread+0x1d1/0x210 [ 547.673166][ T29] ret_from_fork+0x4b/0x60 [ 547.677582][ T29] ret_from_fork_asm+0x1a/0x30 [ 547.682356][ T29] [ 547.684668][ T29] value changed: 0x00000000 -> 0x00000001 [ 547.690373][ T29] [ 547.692685][ T29] Reported by Kernel Concurrency Sanitizer on: [ 547.698824][ T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Tainted: G W 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 547.710196][ T29] Tainted: [W]=WARN [ 547.713988][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 547.724037][ T29] ================================================================== [ 547.802963][T11875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.882723][T11875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.952561][T11875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.991965][T11875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.040837][T11875] bridge_slave_1: left allmulticast mode [ 548.046545][T11875] bridge_slave_1: left promiscuous mode [ 548.052227][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.060442][T11875] bridge_slave_0: left allmulticast mode [ 548.066074][T11875] bridge_slave_0: left promiscuous mode [ 548.071722][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.145547][T11875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.155933][T11875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.166501][T11875] bond0 (unregistering): Released all slaves [ 548.232232][T11875] hsr_slave_0: left promiscuous mode [ 548.237957][T11875] hsr_slave_1: left promiscuous mode [ 548.243685][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.251344][T11875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.258827][T11875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.266244][T11875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.275725][T11875] veth1_vlan: left promiscuous mode [ 548.281025][T11875] veth0_vlan: left promiscuous mode [ 548.329009][T11875] team0 (unregistering): Port device macvlan1 removed [ 548.357988][T11875] team0 (unregistering): Port device team_slave_1 removed [ 548.368277][T11875] team0 (unregistering): Port device team_slave_0 removed [ 551.331927][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 551.331945][ T29] audit: type=1400 audit(1726855491.378:15887): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 551.783364][ T29] audit: type=1400 audit(1726855491.828:15888): avc: denied { execmem } for pid=1260 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 552.609999][ T29] audit: type=1400 audit(1726855492.658:15889): avc: denied { egress } for pid=28 comm="kworker/u8:1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 552.790692][ T29] audit: type=1400 audit(1726855492.838:15890): avc: denied { execmem } for pid=1261 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 553.916215][ T29] audit: type=1400 audit(1726855493.958:15891): avc: denied { execmem } for pid=1262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 554.209694][ T29] audit: type=1400 audit(1726855494.258:15892): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.109 dest=47312 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 554.234859][ T29] audit: type=1400 audit(1726855494.258:15893): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.109 dest=47312 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 554.540036][ T29] audit: type=1400 audit(1726855494.588:15894): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 554.563645][ T29] audit: type=1400 audit(1726855494.588:15895): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 555.123348][ T29] audit: type=1400 audit(1726855495.168:15896): avc: denied { execmem } for pid=1263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 556.430547][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 556.430559][ T29] audit: type=1400 audit(1726855496.478:15899): avc: denied { execmem } for pid=1264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0