last executing test programs: 1.480240645s ago: executing program 3 (id=3030): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) 1.329557168s ago: executing program 3 (id=3031): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) listen(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 1.329280308s ago: executing program 4 (id=3032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x15\t\x00\x00\x00\x00\x00\x00\x00\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8105033c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.3049823s ago: executing program 4 (id=3033): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read$ptp(r1, &(0x7f00000000c0)=""/173, 0xad) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) 1.09645718s ago: executing program 1 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="a9aabab2ea2b7f828bec64c06361fefaa511741fc584121140d84e44becfb2485320ca0157939af01d0baaa106bfa18f912c3f2eb0bb7295442ac909747b2ff796d8621c22177403b424397292b48ff0a9e3b35b619aa1ef6cc8d0ec1126a3de8a7f2975a5b96c35e21d2b621592c3d016856d557e13b4cb318026000cef5a24bb7ac62640f9e390583e44afb7dfd624a96af9684024f89c3a1d2aa095fdda27f09e1978b2fd7e28a8d7c0375fe3038b6d25931b2fb919b2db814080b74cb4de37e3acdbdf56428d286554d1f83fa52f9fe363a98c287aea9f344e448273a5abc4d0e5e1370ed4", 0xe7}, {&(0x7f0000000740)="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", 0xf1a}], 0x2}}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000003a80)="80", 0x1}], 0x1}}], 0x2, 0x0) close(r2) 1.094715349s ago: executing program 2 (id=3039): socket$rds(0x15, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100, 0x0, "544e6b24af869c8bcb343306faffff1400165fadcc19dc1a4d5b370e4d00", 0x0, 0x0, 0xfffffffd}, 0x3c) 1.083342461s ago: executing program 3 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x48582, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) syz_open_pts(r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.050972524s ago: executing program 1 (id=3043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000"], 0x20}}, 0x0) truncate(&(0x7f00000002c0)='./file0\x00', 0xeffd) 1.050613823s ago: executing program 2 (id=3044): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xff13, 0x9, 0x0, 0xfffffffb, 0x10f}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff}}]}}}]}, 0x58}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 992.894289ms ago: executing program 1 (id=3046): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 992.477279ms ago: executing program 1 (id=3047): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc08c5335, &(0x7f0000000180)) tkill(r0, 0x7) 928.901254ms ago: executing program 2 (id=3048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="c4", 0x1}], 0x1) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 928.482985ms ago: executing program 2 (id=3049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0) 876.360729ms ago: executing program 2 (id=3051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 666.935589ms ago: executing program 0 (id=3052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000f80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x37) syz_clone(0xa00d000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000020000000000000000500010017"], 0x1c}}, 0x0) 636.405392ms ago: executing program 0 (id=3053): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 618.805883ms ago: executing program 0 (id=3054): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) 456.837898ms ago: executing program 4 (id=3055): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b40)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 392.281664ms ago: executing program 0 (id=3056): socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000031c0), 0x12) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, 0x43}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 392.040194ms ago: executing program 4 (id=3057): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r1, 0x0, 0x8) 371.004906ms ago: executing program 0 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) 370.334576ms ago: executing program 4 (id=3068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffff9, 0x80000001, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) 70.113453ms ago: executing program 2 (id=3059): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001440)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1010000, 0x6, 0x1, 0xa2e5, 0x3, 0x3ff, 0x7, 0x3, 0x4, 0x2, 0x9, 0xe0, 0x1, 0x9d9, 0xffffffff, 0x1, 0x9, 0x5, 0x80, 0x8, 0x3, 0x4, 0xc, 0x80000000, 0x7f, 0x1, 0x1, 0x4, 0xc0000000, 0x3, 0xc4d, 0x6, 0x1, 0x5, 0xfff, 0x1, 0x3, 0xde71, 0x7fffffff, 0x5, 0x1, 0x5, 0x1, 0x0, 0x3, 0x40, 0xe, 0x0, 0x6, 0x0, 0x9, 0x8, 0x51, 0x6, 0x9, 0xd, 0x0, 0x5, 0x81f, 0x9, 0xa20b, 0x1ff, 0x2, 0x9, 0x401, 0x0, 0x4, 0xfffffff6, 0x7, 0xd, 0x6, 0x9, 0x2800, 0x80000001, 0x1, 0x2, 0x200, 0x7, 0xfffffffc, 0x8, 0x1, 0xa, 0x5, 0x3, 0x3, 0x9, 0x4, 0x2, 0x6, 0x6fa, 0xf57, 0x1, 0x26, 0x6, 0x8000, 0x4, 0xfffffffc, 0x1000, 0x3, 0x6, 0x49, 0x3, 0x5, 0x80000000, 0x9, 0x41, 0x6, 0x3, 0x5, 0xfffffff8, 0x2dd, 0x0, 0x1, 0x0, 0x387, 0xa7e, 0xffffffff, 0x80, 0x101, 0x40, 0x9, 0xd74e, 0x1000, 0x8000000, 0x400, 0xc9, 0x4, 0x3, 0x7cb, 0x2, 0x19, 0xcb, 0x7, 0x5, 0x81, 0x2, 0x3ff, 0x8, 0x3, 0x7, 0x9, 0x7fffffff, 0x1000, 0xf42c, 0x1, 0x0, 0x289, 0x7, 0xf, 0x4, 0x7, 0xfffff001, 0x800, 0x0, 0x3, 0xfffffffd, 0x4, 0x6, 0x3, 0x8, 0x3, 0x1, 0x1, 0x8, 0xfffffff7, 0x1, 0xfffffffb, 0x9, 0x8, 0x7, 0x3, 0x686, 0x2, 0xf, 0x2, 0x8, 0x0, 0xfffffffb, 0x80, 0x7, 0x2, 0xfff, 0x5, 0x1, 0x8, 0x6, 0xffffff80, 0x6, 0x0, 0x401, 0x23, 0xb, 0x6, 0x6, 0x5, 0x7, 0x8, 0x9, 0x7, 0x7f, 0xc, 0x4a1, 0x40, 0xa63, 0x550048ac, 0x5, 0x5, 0x9, 0x6, 0x0, 0x4, 0x2, 0xf7db, 0x7, 0x4, 0x8, 0x7, 0x3, 0x0, 0x71b, 0x90f9, 0x7fff, 0x4, 0x0, 0x5, 0x2, 0x0, 0x7, 0x7, 0x4, 0x21e6, 0x2, 0xffffffff, 0xfb, 0xa236, 0x4, 0x9, 0x8, 0x4, 0x9, 0x8, 0x9, 0x883aba1e, 0x22, 0x5c2e, 0x3, 0x0, 0x80, 0x6, 0x7, 0x3ff, 0x8, 0x2, 0xc8, 0x4, 0x7b]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x1, 0x1, 0xf000, 0x2a112000}, {0x3, 0x0, 0xcd86, 0x10, 0x1, 0x6}, 0x5, 0x80000001, 0x40f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 69.726793ms ago: executing program 3 (id=3060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r0}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 69.493463ms ago: executing program 4 (id=3061): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 69.224653ms ago: executing program 0 (id=3070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="010000002700000000000000fbff0000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}, 0x80007}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x100, 0x0) 69.018943ms ago: executing program 1 (id=3062): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 36.643226ms ago: executing program 3 (id=3063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) close(r0) 12.365828ms ago: executing program 1 (id=3075): openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000f80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x37) syz_clone(0xa00d000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000020000000000000000500010017"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ffc0000 [ 142.531327][ T29] audit: type=1326 audit(1728076436.892:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.0.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3eead9959 code=0x7ffc0000 [ 142.556253][ T9937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.568037][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 142.577083][ T9983] netlink: 'syz.1.2169': attribute type 4 has an invalid length. [ 142.608322][ T9937] team0: Port device netdevsim1 removed [ 142.615494][ T9937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.657936][ T9937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.688973][ T9989] loop4: detected capacity change from 0 to 128 [ 142.742113][ T9937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.774787][ T9937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.794041][ T9937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.811346][ T9937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.819648][ T9997] loop4: detected capacity change from 0 to 8192 [ 142.832467][ T9997] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.881210][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.894615][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.917187][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.924281][ T8515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.925266][ T3322] tipc: Node number set to 1 [ 142.935507][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.944075][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.986537][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 143.046093][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.190555][ T9937] veth0_vlan: entered promiscuous mode [ 143.203844][ T9937] veth1_vlan: entered promiscuous mode [ 143.220124][ T9937] veth0_macvtap: entered promiscuous mode [ 143.243206][ T9937] veth1_macvtap: entered promiscuous mode [ 143.266077][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.276776][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.300079][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.312203][ T9937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.322901][ T9937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.334714][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.360679][ T9937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.369497][ T9937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.378285][ T9937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.387145][ T9937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.408715][T10051] net_ratelimit: 74 callbacks suppressed [ 143.408730][T10051] netlink: zone id is out of range [ 143.420074][T10051] netlink: zone id is out of range [ 143.427314][T10051] netlink: zone id is out of range [ 143.433673][T10051] netlink: zone id is out of range [ 143.438864][T10051] netlink: zone id is out of range [ 143.444164][T10051] netlink: zone id is out of range [ 143.452495][T10051] netlink: zone id is out of range [ 143.457855][T10051] netlink: zone id is out of range [ 143.462990][T10051] netlink: zone id is out of range [ 143.468205][T10051] netlink: zone id is out of range [ 143.517155][T10060] geneve0: entered allmulticast mode [ 143.769586][T10089] syzkaller0: entered promiscuous mode [ 143.775160][T10089] syzkaller0: entered allmulticast mode [ 143.856831][T10102] loop4: detected capacity change from 0 to 128 [ 143.858795][T10104] team0: Device wireguard0 is of different type [ 143.886956][T10107] loop4: detected capacity change from 0 to 128 [ 143.893567][T10107] EXT4-fs: Ignoring removed nobh option [ 143.913845][T10107] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.926612][T10107] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.051317][ T8828] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.237451][T10142] loop4: detected capacity change from 0 to 512 [ 144.273362][T10142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.297480][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.306944][T10142] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.317884][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.355080][T10142] loop4: detected capacity change from 512 to 511 [ 144.362954][T10142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2236: bg 0: block 16032: padding at end of block bitmap is not set [ 144.393023][T10142] EXT4-fs error (device loop4): ext4_discard_preallocations:5604: comm syz.4.2236: Error -117 reading block bitmap for 0 [ 144.418459][T10155] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:5429: comm syz.4.2236: Error -117 reading block bitmap for 0 [ 144.452019][T10155] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:5429: comm syz.4.2236: Error -117 reading block bitmap for 0 [ 144.483206][ T8828] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /128/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 144.507371][ T8828] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 144.521077][ T8828] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 12 [ 144.549935][ T8912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.652326][T10158] chnl_net:caif_netlink_parms(): no params data found [ 144.710411][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.759992][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.767402][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.774690][T10158] bridge_slave_0: entered allmulticast mode [ 144.781491][T10158] bridge_slave_0: entered promiscuous mode [ 144.788499][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.795747][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.825308][T10158] bridge_slave_1: entered allmulticast mode [ 144.832887][T10158] bridge_slave_1: entered promiscuous mode [ 144.864301][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.898839][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.909255][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 144.928089][ T28] team0: Port device netdevsim1 removed [ 144.935432][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.949940][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.970071][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 144.985515][T10207] netlink: 'syz.2.2255': attribute type 4 has an invalid length. [ 144.998741][T10158] team0: Port device team_slave_0 added [ 145.006351][T10158] team0: Port device team_slave_1 added [ 145.043333][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.061958][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.069131][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.095153][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.142490][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.149558][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.175841][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.236738][T10158] hsr_slave_0: entered promiscuous mode [ 145.242834][T10158] hsr_slave_1: entered promiscuous mode [ 145.249185][T10158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.256999][T10158] Cannot create hsr debugfs directory [ 145.267448][T10189] chnl_net:caif_netlink_parms(): no params data found [ 145.294285][ T28] bridge_slave_1: left allmulticast mode [ 145.300125][ T28] bridge_slave_1: left promiscuous mode [ 145.305881][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.313573][ T28] bridge_slave_0: left allmulticast mode [ 145.319477][ T28] bridge_slave_0: left promiscuous mode [ 145.325263][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.447829][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.458295][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.468828][ T28] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 145.478843][ T28] bond0 (unregistering): Released all slaves [ 145.519775][T10189] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.527223][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.534586][T10189] bridge_slave_0: entered allmulticast mode [ 145.541715][T10189] bridge_slave_0: entered promiscuous mode [ 145.550637][T10189] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.557918][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.565734][T10189] bridge_slave_1: entered allmulticast mode [ 145.572490][T10189] bridge_slave_1: entered promiscuous mode [ 145.579117][ T28] tipc: Disabling bearer [ 145.584165][ T28] tipc: Left network mode [ 145.603374][T10189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.621285][T10189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.637810][ T28] hsr_slave_0: left promiscuous mode [ 145.643491][ T28] hsr_slave_1: left promiscuous mode [ 145.650518][ T28] veth1_macvtap: left promiscuous mode [ 145.656137][ T28] veth0_macvtap: left promiscuous mode [ 145.661728][ T28] veth1_vlan: left promiscuous mode [ 145.667092][ T28] veth0_vlan: left promiscuous mode [ 145.750158][ T28] team0 (unregistering): Port device team_slave_1 removed [ 145.760743][ T28] team0 (unregistering): Port device team_slave_0 removed [ 145.808116][T10189] team0: Port device team_slave_0 added [ 145.816612][T10189] team0: Port device team_slave_1 added [ 145.832432][T10158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.848934][T10189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.855923][T10189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.881901][T10189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.893526][T10189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.900564][T10189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.926596][T10189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.940108][T10158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.966674][T10189] hsr_slave_0: entered promiscuous mode [ 145.972923][T10189] hsr_slave_1: entered promiscuous mode [ 145.979255][T10189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.987037][T10189] Cannot create hsr debugfs directory [ 146.012598][T10158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.087731][T10158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.153671][T10158] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.162324][T10158] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.171113][T10158] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.180754][T10158] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.220475][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.233830][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.246060][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.253144][ T8534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.264062][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.271151][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.296256][T10158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.348424][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.401327][T10189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.410907][T10189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.423385][T10189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.435580][T10189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.447541][T10158] veth0_vlan: entered promiscuous mode [ 146.457855][T10158] veth1_vlan: entered promiscuous mode [ 146.484250][T10158] veth0_macvtap: entered promiscuous mode [ 146.492553][T10158] veth1_macvtap: entered promiscuous mode [ 146.510907][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.521544][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.531663][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.542161][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.553046][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.565216][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.575872][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.585788][T10158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.596241][T10158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.607106][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.621220][T10189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.629309][T10158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.638128][T10158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.646952][T10158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.655755][T10158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.674621][T10189] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.687826][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.695149][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.716809][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.723905][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.759817][T10235] loop7: detected capacity change from 0 to 16384 [ 146.796711][T10235] loop7: detected capacity change from 16384 to 16383 [ 146.799817][T10189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.819739][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 146.828725][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 146.863542][T10251] loop3: detected capacity change from 0 to 512 [ 146.875734][T10251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.900323][T10251] EXT4-fs (loop3): 1 truncate cleaned up [ 146.908746][T10251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.954032][T10158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.975539][ T999] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 146.983932][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.992725][ T999] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.997800][T10189] veth0_vlan: entered promiscuous mode [ 147.007990][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.013065][T10189] veth1_vlan: entered promiscuous mode [ 147.033057][T10189] veth0_macvtap: entered promiscuous mode [ 147.040936][T10189] veth1_macvtap: entered promiscuous mode [ 147.053325][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.063907][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.073822][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.084286][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.094223][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.104703][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.116294][T10189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.128083][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.138711][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.149032][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.159492][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.169436][T10189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.179965][T10189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.190862][T10189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.203088][T10189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.211991][T10189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.220898][T10189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.229687][T10189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.396500][ T29] kauditd_printk_skb: 642 callbacks suppressed [ 147.396588][ T29] audit: type=1326 audit(1728076441.922:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.4.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e7bedff9 code=0x7ffc0000 [ 147.426692][ T29] audit: type=1326 audit(1728076441.922:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.4.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e7bedff9 code=0x7ffc0000 [ 147.450246][ T29] audit: type=1326 audit(1728076441.922:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.4.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f67e7bedff9 code=0x7ffc0000 [ 147.474340][ T29] audit: type=1326 audit(1728076441.922:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.4.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e7bedff9 code=0x7ffc0000 [ 147.498095][ T29] audit: type=1326 audit(1728076441.922:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.4.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e7bedff9 code=0x7ffc0000 [ 147.598366][T10280] loop3: detected capacity change from 0 to 8192 [ 147.606518][T10280] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.621093][ T29] audit: type=1326 audit(1728076442.142:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642945dff9 code=0x7ffc0000 [ 147.621335][T10282] loop7: detected capacity change from 0 to 16384 [ 147.661762][ T29] audit: type=1326 audit(1728076442.172:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642945dff9 code=0x7ffc0000 [ 147.685344][ T29] audit: type=1326 audit(1728076442.172:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642945dff9 code=0x7ffc0000 [ 147.709029][ T29] audit: type=1326 audit(1728076442.172:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642945dff9 code=0x7ffc0000 [ 147.732562][ T29] audit: type=1326 audit(1728076442.182:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.3.2269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642945dff9 code=0x7ffc0000 [ 147.775485][T10282] loop7: detected capacity change from 16384 to 16383 [ 147.818709][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2274'. [ 147.827667][T10285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.835116][T10285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.842752][T10285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.850257][T10285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.530069][T10309] pim6reg1: entered promiscuous mode [ 148.535589][T10309] pim6reg1: entered allmulticast mode [ 148.676952][T10311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.687877][T10311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.698389][T10311] bond0 (unregistering): Released all slaves [ 149.307681][T10327] syzkaller0: entered promiscuous mode [ 149.313165][T10327] syzkaller0: entered allmulticast mode [ 149.445364][T10329] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.484943][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 149.511910][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'. [ 149.572616][T10339] pim6reg1: entered promiscuous mode [ 149.578019][T10339] pim6reg1: entered allmulticast mode [ 149.598131][T10341] syz.0.2295[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.598273][T10341] syz.0.2295[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.611967][T10341] syz.0.2295[10341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.629208][T10341] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 150.252446][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 151.155260][T10434] syz.4.2339[10434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.155386][T10434] syz.4.2339[10434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.167227][T10434] syz.4.2339[10434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.251215][T10442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2342'. [ 151.274459][T10442] netlink: 'syz.4.2342': attribute type 10 has an invalid length. [ 151.288002][T10442] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.336686][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 155.336703][ T29] audit: type=1400 audit(1728076449.862:4699): avc: denied { block_suspend } for pid=10451 comm="syz.2.2346" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.389999][T10462] bridge0: port 3(gretap0) entered blocking state [ 155.391819][ T29] audit: type=1400 audit(1728076449.912:4700): avc: denied { ioctl } for pid=10461 comm="syz.4.2348" path="socket:[30956]" dev="sockfs" ino=30956 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.396574][T10462] bridge0: port 3(gretap0) entered disabled state [ 155.448345][T10462] gretap0: entered allmulticast mode [ 155.454452][T10462] gretap0: entered promiscuous mode [ 155.461080][T10462] bridge0: port 3(gretap0) entered blocking state [ 155.467649][T10462] bridge0: port 3(gretap0) entered forwarding state [ 155.483068][T10469] tipc: Started in network mode [ 155.488129][T10469] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 155.495337][T10469] tipc: Enabled bearer , priority 0 [ 155.679968][ T29] audit: type=1400 audit(1728076450.202:4701): avc: denied { relabelfrom } for pid=10483 comm="syz.0.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.700032][ T29] audit: type=1400 audit(1728076450.202:4702): avc: denied { relabelto } for pid=10483 comm="syz.0.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 155.797713][T10459] chnl_net:caif_netlink_parms(): no params data found [ 155.947854][T10459] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.954981][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.965340][T10459] bridge_slave_0: entered allmulticast mode [ 155.971836][T10459] bridge_slave_0: entered promiscuous mode [ 155.991058][T10459] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.998257][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.006423][T10459] bridge_slave_1: entered allmulticast mode [ 156.014745][T10459] bridge_slave_1: entered promiscuous mode [ 156.043257][T10459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.052415][ T29] audit: type=1400 audit(1728076450.562:4703): avc: denied { listen } for pid=10510 comm="syz.3.2366" lport=45897 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.075510][ T29] audit: type=1400 audit(1728076450.562:4704): avc: denied { accept } for pid=10510 comm="syz.3.2366" lport=45897 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.098756][ T29] audit: type=1400 audit(1728076450.562:4705): avc: denied { write } for pid=10510 comm="syz.3.2366" lport=45897 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 156.122419][ T29] audit: type=1400 audit(1728076450.562:4706): avc: denied { setopt } for pid=10510 comm="syz.3.2366" lport=45897 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 156.147976][T10459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.170711][T10459] team0: Port device team_slave_0 added [ 156.177279][T10459] team0: Port device team_slave_1 added [ 156.206060][T10459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.213084][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.239036][T10459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.251632][T10520] loop3: detected capacity change from 0 to 2048 [ 156.261334][T10459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.268545][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.294697][T10459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.322491][T10520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.343920][ T29] audit: type=1400 audit(1728076450.862:4707): avc: denied { map } for pid=10519 comm="syz.3.2371" path="/29/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 156.366591][ T29] audit: type=1400 audit(1728076450.862:4708): avc: denied { execute } for pid=10519 comm="syz.3.2371" path="/29/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 156.399380][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'. [ 156.409650][T10529] bridge0: port 3(gretap0) entered blocking state [ 156.417270][T10529] bridge0: port 3(gretap0) entered disabled state [ 156.424150][T10529] gretap0: entered allmulticast mode [ 156.431181][T10158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.442047][T10529] gretap0: entered promiscuous mode [ 156.449925][T10529] bridge0: port 3(gretap0) entered blocking state [ 156.456496][T10529] bridge0: port 3(gretap0) entered forwarding state [ 156.467756][T10459] hsr_slave_0: entered promiscuous mode [ 156.476308][T10459] hsr_slave_1: entered promiscuous mode [ 156.482326][T10459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.487789][T10534] loop3: detected capacity change from 0 to 512 [ 156.489977][T10459] Cannot create hsr debugfs directory [ 156.535150][ T8] tipc: Node number set to 11578026 [ 156.571516][T10459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.578491][T10541] syz.3.2377[10541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.581570][T10541] syz.3.2377[10541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.601558][T10541] syz.3.2377[10541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.617667][T10541] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 156.653503][T10459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.701829][T10459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.768354][T10459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.852771][T10459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 156.879842][T10459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 156.905322][T10459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 156.914087][T10459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.966582][T10459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.982470][T10459] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.993185][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.000374][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.012875][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.020054][ T8515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.095133][T10459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.167184][T10459] veth0_vlan: entered promiscuous mode [ 157.175888][T10459] veth1_vlan: entered promiscuous mode [ 157.194223][T10459] veth0_macvtap: entered promiscuous mode [ 157.202275][T10459] veth1_macvtap: entered promiscuous mode [ 157.213636][T10459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.224131][T10459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.234044][T10459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.244582][T10459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.254554][T10459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.264987][T10459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.277073][T10459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.289272][T10459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.299799][T10459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.309635][T10459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.320101][T10459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.330017][T10459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.340578][T10459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.351648][T10459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.362813][T10459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.371659][T10459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.380391][T10459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.389162][T10459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.445327][T10569] vlan2: entered promiscuous mode [ 157.556693][T10583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.568329][T10583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.579853][T10583] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 157.590992][T10583] bond0 (unregistering): Released all slaves [ 157.622672][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2385'. [ 157.643023][T10593] bridge0: port 3(gretap0) entered blocking state [ 157.649703][T10593] bridge0: port 3(gretap0) entered disabled state [ 157.656610][T10593] gretap0: entered allmulticast mode [ 157.662542][T10593] gretap0: entered promiscuous mode [ 157.668232][T10593] bridge0: port 3(gretap0) entered blocking state [ 157.674754][T10593] bridge0: port 3(gretap0) entered forwarding state [ 157.747151][T10604] vlan2: entered promiscuous mode [ 157.951125][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 158.125334][T10628] bridge0: port 3(gretap0) entered blocking state [ 158.131936][T10628] bridge0: port 3(gretap0) entered disabled state [ 158.139684][T10628] gretap0: entered allmulticast mode [ 158.145937][T10628] gretap0: entered promiscuous mode [ 158.151547][T10628] bridge0: port 3(gretap0) entered blocking state [ 158.158072][T10628] bridge0: port 3(gretap0) entered forwarding state [ 158.169317][T10629] tipc: Started in network mode [ 158.174248][T10629] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 158.181680][T10629] tipc: Enabled bearer , priority 0 [ 158.237496][T10639] loop3: detected capacity change from 0 to 2048 [ 158.262789][T10643] syz.4.2414[10643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.262897][T10643] syz.4.2414[10643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.274824][T10643] syz.4.2414[10643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.287553][T10639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.370919][T10639] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2412: bg 0: block 234: padding at end of block bitmap is not set [ 158.386704][T10639] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 158.399352][T10639] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.399352][T10639] [ 158.426940][ T8534] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 654 with error 28 [ 158.439681][ T8534] EXT4-fs (loop3): This should not happen!! Data will be lost [ 158.439681][ T8534] [ 158.449481][ T8534] EXT4-fs (loop3): Total free blocks count 0 [ 158.455517][ T8534] EXT4-fs (loop3): Free/Dirty block details [ 158.461424][ T8534] EXT4-fs (loop3): free_blocks=0 [ 158.466502][ T8534] EXT4-fs (loop3): dirty_blocks=672 [ 158.471734][ T8534] EXT4-fs (loop3): Block reservation details [ 158.596357][T10662] tipc: Started in network mode [ 158.601385][T10662] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 158.608653][T10662] tipc: Enabled bearer , priority 0 [ 158.672399][T10671] : renamed from vlan1 (while UP) [ 158.712249][T10673] loop3: detected capacity change from 0 to 256 [ 159.000571][T10687] pim6reg1: entered promiscuous mode [ 159.005963][T10687] pim6reg1: entered allmulticast mode [ 159.115910][T10697] tipc: Started in network mode [ 159.120881][T10697] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 159.128105][T10697] tipc: Enabled bearer , priority 0 [ 159.199844][T10711] bridge0: port 3(gretap0) entered blocking state [ 159.206431][T10711] bridge0: port 3(gretap0) entered disabled state [ 159.213223][T10711] gretap0: entered allmulticast mode [ 159.220006][T10711] gretap0: entered promiscuous mode [ 159.225739][T10711] bridge0: port 3(gretap0) entered blocking state [ 159.232269][T10711] bridge0: port 3(gretap0) entered forwarding state [ 159.273950][T10719] loop3: detected capacity change from 0 to 512 [ 159.295801][ T3345] tipc: Node number set to 11578026 [ 159.337556][T10719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.366760][T10719] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.407715][T10716] wireguard0: entered promiscuous mode [ 159.413366][T10716] wireguard0: entered allmulticast mode [ 159.453740][T10158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.715467][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.725072][ T3345] tipc: Node number set to 11578026 [ 159.725213][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.801837][T10743] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 159.810188][T10743] tipc: Enabled bearer , priority 10 [ 160.087002][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.094787][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.102755][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.110554][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.118439][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.126195][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.133945][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.141778][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.142277][T10753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.149571][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.165762][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.173498][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.181360][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.189135][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.196990][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.204782][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.212622][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.220513][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.228361][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.236197][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.243933][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.245063][ T3355] tipc: Node number set to 11578026 [ 160.251734][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.265424][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.273176][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.280990][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.288762][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.296529][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.304348][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.312302][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.320080][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.327852][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.335650][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.343467][ T9] hid-generic 0000:0000:FFFFFFFF.0007: unknown main item tag 0x0 [ 160.360396][ T9] hid-generic 0000:0000:FFFFFFFF.0007: hidraw0: HID v0.01 Device [syz0] on syz0 [ 160.366208][T10753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.401346][T10755] pim6reg1: entered promiscuous mode [ 160.402602][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 160.402619][ T29] audit: type=1400 audit(1728076454.922:4813): avc: denied { module_load } for pid=10756 comm="syz.3.2463" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 160.406691][T10755] pim6reg1: entered allmulticast mode [ 160.912977][T10785] loop3: detected capacity change from 0 to 2048 [ 160.956944][T10785] loop3: p1 < > p2 p3 < p5 > p4 [ 160.962038][T10785] loop3: partition table partially beyond EOD, truncated [ 160.988967][T10785] loop3: p1 start 4278190080 is beyond EOD, truncated [ 160.995828][T10785] loop3: p2 start 16908800 is beyond EOD, truncated [ 160.996250][ T29] audit: type=1400 audit(1728076455.522:4814): avc: denied { mounton } for pid=10787 comm="syz.1.2476" path="/26/bus" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.023532][T10785] loop3: p4 start 11326 is beyond EOD, truncated [ 161.031411][T10785] loop3: p5 start 16908800 is beyond EOD, truncated [ 161.038689][ T29] audit: type=1400 audit(1728076455.542:4815): avc: denied { sqpoll } for pid=10787 comm="syz.1.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 161.064230][ T29] audit: type=1400 audit(1728076455.562:4816): avc: denied { write } for pid=10790 comm="syz.2.2477" name="pfkey" dev="proc" ino=4026533639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 161.088793][T10794] block device autoloading is deprecated and will be removed. [ 161.118418][ T29] audit: type=1400 audit(1728076455.632:4817): avc: denied { read write } for pid=10459 comm="syz-executor" name="loop1" dev="devtmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.141923][ T29] audit: type=1400 audit(1728076455.632:4818): avc: denied { open } for pid=10459 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.165207][ T29] audit: type=1400 audit(1728076455.632:4819): avc: denied { ioctl } for pid=10459 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=558 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.189958][ T29] audit: type=1400 audit(1728076455.642:4820): avc: denied { read append } for pid=10790 comm="syz.2.2477" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 161.214201][ T29] audit: type=1400 audit(1728076455.642:4821): avc: denied { open } for pid=10790 comm="syz.2.2477" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 161.488073][T10809] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 161.496524][T10809] tipc: Enabled bearer , priority 10 [ 161.577460][T10815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.595206][T10815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.613654][T10815] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2487'. [ 161.625696][T10815] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2487'. [ 161.636048][T10819] netem: change failed [ 161.678858][T10821] loop1: detected capacity change from 0 to 2048 [ 161.735506][T10821] loop1: p1 < > p2 p3 < p5 > p4 [ 161.740494][T10821] loop1: partition table partially beyond EOD, truncated [ 161.748998][T10821] loop1: p1 start 4278190080 is beyond EOD, truncated [ 161.755909][T10821] loop1: p2 start 16908800 is beyond EOD, truncated [ 161.775833][T10821] loop1: p4 start 11326 is beyond EOD, truncated [ 161.782254][T10821] loop1: p5 start 16908800 is beyond EOD, truncated [ 161.943059][ T29] audit: type=1400 audit(1728076456.462:4822): avc: denied { bind } for pid=10837 comm="syz.1.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.449475][T10871] program syz.1.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.132079][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2533'. [ 163.189382][T10920] loop1: detected capacity change from 0 to 512 [ 163.212228][T10920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.226875][T10920] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.241048][T10920] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.2534: corrupted inode contents [ 163.254132][T10920] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #2: comm syz.1.2534: mark_inode_dirty error [ 163.282593][T10920] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #2: comm syz.1.2534: corrupted inode contents [ 163.302914][T10920] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.2534: mark_inode_dirty error [ 163.354166][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.547463][T10939] loop7: detected capacity change from 0 to 16384 [ 163.606132][T10939] loop7: detected capacity change from 16384 to 16383 [ 163.651445][T10943] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 163.664439][T10941] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2541'. [ 163.807240][T10951] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 163.813865][T10951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.821426][T10951] vhci_hcd vhci_hcd.0: Device attached [ 163.829444][T10952] vhci_hcd: connection closed [ 163.829694][ T28] vhci_hcd: stop threads [ 163.838812][ T28] vhci_hcd: release socket [ 163.843291][ T28] vhci_hcd: disconnect device [ 164.381496][T10979] program syz.3.2554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.383618][T10978] loop1: detected capacity change from 0 to 128 [ 164.521592][T10991] loop3: detected capacity change from 0 to 2048 [ 164.554802][T10991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.645974][T10991] loop3: detected capacity change from 2048 to 2047 [ 164.781335][T10158] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /83/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 164.806875][T10158] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 164.819809][T10158] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 164.842533][T10158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.877031][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.938372][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.988705][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.028181][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.079666][ T28] gretap0: left allmulticast mode [ 165.084782][ T28] gretap0: left promiscuous mode [ 165.089859][ T28] bridge0: port 3(gretap0) entered disabled state [ 165.097014][ T28] bridge_slave_1: left allmulticast mode [ 165.102720][ T28] bridge_slave_1: left promiscuous mode [ 165.108505][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.116469][ T28] bridge_slave_0: left allmulticast mode [ 165.122142][ T28] bridge_slave_0: left promiscuous mode [ 165.127928][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.247973][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.259428][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.270233][ T28] bond0 (unregistering): Released all slaves [ 165.306510][ T28] tipc: Disabling bearer [ 165.311929][ T28] tipc: Disabling bearer [ 165.317241][ T28] tipc: Left network mode [ 165.328837][ T28] hsr_slave_0: left promiscuous mode [ 165.335932][ T28] hsr_slave_1: left promiscuous mode [ 165.349299][ T28] veth1_macvtap: left promiscuous mode [ 165.354807][ T28] veth0_macvtap: left promiscuous mode [ 165.360512][ T28] veth1_vlan: left promiscuous mode [ 165.365792][ T28] veth0_vlan: left promiscuous mode [ 165.388464][T11009] program syz.2.2570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.541870][ T28] team0 (unregistering): Port device team_slave_1 removed [ 165.556017][ T28] team0 (unregistering): Port device team_slave_0 removed [ 165.743011][T11010] chnl_net:caif_netlink_parms(): no params data found [ 165.792116][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.799303][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.807798][T11010] bridge_slave_0: entered allmulticast mode [ 165.814278][T11010] bridge_slave_0: entered promiscuous mode [ 165.822000][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.829143][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.838544][T11010] bridge_slave_1: entered allmulticast mode [ 165.845189][T11010] bridge_slave_1: entered promiscuous mode [ 165.865889][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.876744][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.898128][T11010] team0: Port device team_slave_0 added [ 165.904787][T11010] team0: Port device team_slave_1 added [ 165.938107][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.945207][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.971689][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.986607][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.993582][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.019660][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.050500][T11010] hsr_slave_0: entered promiscuous mode [ 166.056785][T11010] hsr_slave_1: entered promiscuous mode [ 166.062732][T11010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.071402][T11010] Cannot create hsr debugfs directory [ 166.170899][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 166.170979][ T29] audit: type=1326 audit(1728076460.692:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.200638][ T29] audit: type=1326 audit(1728076460.692:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.224319][ T29] audit: type=1326 audit(1728076460.692:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.248151][ T29] audit: type=1326 audit(1728076460.692:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.271763][ T29] audit: type=1326 audit(1728076460.692:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.295317][ T29] audit: type=1326 audit(1728076460.692:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.318873][ T29] audit: type=1326 audit(1728076460.692:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.342487][ T29] audit: type=1326 audit(1728076460.692:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.366107][ T29] audit: type=1326 audit(1728076460.702:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11033 comm="syz.1.2584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb42f8dff9 code=0x7ffc0000 [ 166.493798][T11046] loop4: detected capacity change from 0 to 2048 [ 166.518280][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.527421][T11046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.533370][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.550975][T11050] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2579'. [ 166.561159][T11050] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2579'. [ 166.575152][T11046] loop4: detected capacity change from 2048 to 2047 [ 166.598740][T11010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.609087][T11010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.619394][T11010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.626697][T10189] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /40/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 166.648524][T10189] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 166.650945][T11010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.668578][T10189] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 15 [ 166.671272][T11056] loop1: detected capacity change from 0 to 512 [ 166.697214][T10189] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.698107][T11056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.719005][T11056] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.740880][ T8508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.782175][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.797337][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.812512][ T8508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.825334][ T29] audit: type=1400 audit(1728076461.352:4844): avc: denied { create } for pid=11063 comm="syz.1.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.847740][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.861902][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.869064][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.883202][ T8508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.895346][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.902399][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.959787][ T8508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.988476][T11077] loop1: detected capacity change from 0 to 512 [ 166.994998][T11077] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 167.041431][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.069132][T11082] loop1: detected capacity change from 0 to 1024 [ 167.089386][T11082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.109988][ T8508] gretap0: left allmulticast mode [ 167.115260][ T8508] gretap0: left promiscuous mode [ 167.120370][ T8508] bridge0: port 3(gretap0) entered disabled state [ 167.128192][T11082] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.139913][ T8508] bridge_slave_1: left allmulticast mode [ 167.145825][ T8508] bridge_slave_1: left promiscuous mode [ 167.149587][T11082] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 167.151581][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.163704][T11082] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.163704][T11082] [ 167.180487][T11082] EXT4-fs (loop1): Total free blocks count 0 [ 167.186601][T11082] EXT4-fs (loop1): Free/Dirty block details [ 167.192508][T11082] EXT4-fs (loop1): free_blocks=0 [ 167.197486][T11082] EXT4-fs (loop1): dirty_blocks=0 [ 167.202549][T11082] EXT4-fs (loop1): Block reservation details [ 167.208554][T11082] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 167.216393][ T8508] bridge_slave_0: left allmulticast mode [ 167.222149][ T8508] bridge_slave_0: left promiscuous mode [ 167.227945][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.265473][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.339804][T11060] chnl_net:caif_netlink_parms(): no params data found [ 167.389355][ T8508] tipc: Disabling bearer [ 167.404688][ T8508] tipc: Left network mode [ 167.438375][ T8508] hsr_slave_0: left promiscuous mode [ 167.444392][ T8508] hsr_slave_1: left promiscuous mode [ 167.458146][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.465671][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.481499][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.489127][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.512882][ T8508] veth1_macvtap: left promiscuous mode [ 167.518436][ T8508] veth0_macvtap: left promiscuous mode [ 167.523953][ T8508] veth1_vlan: left promiscuous mode [ 167.529326][ T8508] veth0_vlan: left promiscuous mode [ 167.664014][ T8508] team0 (unregistering): Port device team_slave_1 removed [ 167.676099][ T8508] team0 (unregistering): Port device team_slave_0 removed [ 167.776474][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.783632][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.802190][T11060] bridge_slave_0: entered allmulticast mode [ 167.813414][T11060] bridge_slave_0: entered promiscuous mode [ 167.826428][T11010] veth0_vlan: entered promiscuous mode [ 167.835584][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.842717][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.865172][T11060] bridge_slave_1: entered allmulticast mode [ 167.871693][T11060] bridge_slave_1: entered promiscuous mode [ 167.886088][T11010] veth1_vlan: entered promiscuous mode [ 167.901827][T11060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.919651][T11010] veth0_macvtap: entered promiscuous mode [ 167.931264][T11060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.946747][T11010] veth1_macvtap: entered promiscuous mode [ 167.979296][T11060] team0: Port device team_slave_0 added [ 167.993189][T11060] team0: Port device team_slave_1 added [ 168.014149][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.024731][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.034711][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.045224][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.055147][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.065673][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.077896][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.086250][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.096815][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.106655][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.117122][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.126940][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.137384][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.149223][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.173004][T11060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.180036][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.206030][T11060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.241164][T11060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.248181][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.274203][T11060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.290659][T11010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.299611][T11010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.308440][T11010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.317311][T11010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.339239][T11127] loop1: detected capacity change from 0 to 512 [ 168.348056][T11127] EXT4-fs (loop1): failed to initialize system zone (-117) [ 168.356799][T11127] EXT4-fs (loop1): mount failed [ 168.374156][T11060] hsr_slave_0: entered promiscuous mode [ 168.380951][T11060] hsr_slave_1: entered promiscuous mode [ 168.387136][T11060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.394710][T11060] Cannot create hsr debugfs directory [ 168.488756][T11143] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2612'. [ 168.497929][T11143] 0X: renamed from caif0 [ 168.503843][T11143] 0X: entered allmulticast mode [ 168.509158][T11143] net_ratelimit: 74 callbacks suppressed [ 168.509169][T11143] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 168.549140][T11148] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 168.710162][T11060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.719154][T11060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.728044][T11060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.738673][T11060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.766604][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2618'. [ 168.795091][T11060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.816162][T11060] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.828084][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.835193][ T8534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.847024][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.854494][ T8508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.887611][T11160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.901895][T11160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.929509][T11060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.050841][T11060] veth0_vlan: entered promiscuous mode [ 169.060361][T11060] veth1_vlan: entered promiscuous mode [ 169.078754][T11060] veth0_macvtap: entered promiscuous mode [ 169.087119][T11060] veth1_macvtap: entered promiscuous mode [ 169.098245][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.108783][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.118790][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.129375][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.139377][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.149918][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.159868][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.170399][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.181722][T11060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.194392][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.204995][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.214957][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.225704][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.235658][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.246184][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.256111][T11060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.266740][T11060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.279182][T11060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.290485][T11060] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.299706][T11060] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.308744][T11060] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.317699][T11060] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.430651][T11195] vlan0: entered allmulticast mode [ 169.454099][T11201] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 169.672361][T11229] loop4: detected capacity change from 0 to 1024 [ 169.699387][T11235] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 169.709580][T11229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.737439][T11236] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2640'. [ 169.746739][T11236] 0X: renamed from caif0 [ 169.761544][T11236] 0X: entered allmulticast mode [ 169.766873][T11236] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 169.791444][T11060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.803641][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2642'. [ 169.856624][T11244] loop4: detected capacity change from 0 to 2048 [ 169.880194][T11244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.898900][T11252] loop3: detected capacity change from 0 to 1024 [ 169.907275][T11252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.923070][T11252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.951932][T11010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.962509][T11060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.982011][T11257] wireguard0: entered promiscuous mode [ 169.984056][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 169.987587][T11257] wireguard0: entered allmulticast mode [ 170.148130][T11272] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2655'. [ 170.157264][T11272] 0X: renamed from caif0 [ 170.163822][T11272] 0X: entered allmulticast mode [ 170.169081][T11272] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 170.211548][T11275] loop1: detected capacity change from 0 to 512 [ 170.219231][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 170.254437][T11275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.271097][T11283] loop4: detected capacity change from 0 to 2048 [ 170.277594][T11275] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.309509][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.310956][T11283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.363920][T11060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.403162][T11295] loop4: detected capacity change from 0 to 1024 [ 170.446086][T11295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.505082][T11295] loop4: detected capacity change from 1024 to 64 [ 170.523162][T11295] bio_check_eod: 3 callbacks suppressed [ 170.523204][T11295] syz.4.2665: attempt to access beyond end of device [ 170.523204][T11295] loop4: rw=0, sector=162, nr_sectors = 2 limit=64 [ 170.556977][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.571493][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.586811][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.600648][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.614493][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.628329][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.643967][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.658727][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.679897][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.693973][T11060] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 170.716945][T11308] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2669'. [ 170.736029][T11308] 0X: renamed from caif0 [ 170.751280][T11308] 0X: entered allmulticast mode [ 170.756630][T11308] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 170.835470][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 171.240322][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 171.240411][ T29] audit: type=1326 audit(1728076465.775:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.270383][ T29] audit: type=1326 audit(1728076465.775:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.294041][ T29] audit: type=1326 audit(1728076465.775:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.317683][ T29] audit: type=1326 audit(1728076465.775:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.341336][ T29] audit: type=1326 audit(1728076465.775:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.364895][ T29] audit: type=1326 audit(1728076465.775:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.388479][ T29] audit: type=1326 audit(1728076465.775:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.412136][ T29] audit: type=1326 audit(1728076465.775:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.435718][ T29] audit: type=1326 audit(1728076465.775:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.459386][ T29] audit: type=1326 audit(1728076465.775:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11353 comm="syz.2.2690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 171.558865][T11364] loop3: detected capacity change from 0 to 1024 [ 171.588024][T11364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.600314][T11364] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.614955][T11364] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 171.627449][T11364] EXT4-fs (loop3): This should not happen!! Data will be lost [ 171.627449][T11364] [ 171.637201][T11364] EXT4-fs (loop3): Total free blocks count 0 [ 171.643284][T11364] EXT4-fs (loop3): Free/Dirty block details [ 171.649229][T11364] EXT4-fs (loop3): free_blocks=0 [ 171.654238][T11364] EXT4-fs (loop3): dirty_blocks=0 [ 171.659309][T11364] EXT4-fs (loop3): Block reservation details [ 171.665387][T11364] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 171.684116][T11010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.771733][T11395] xt_l2tp: invalid flags combination: 0 [ 171.844816][T11408] loop1: detected capacity change from 0 to 164 [ 172.468205][T11060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.480841][ T8534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.493447][T11296] kmmpd-loop4: attempt to access beyond end of device [ 172.493447][T11296] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 172.507087][T11296] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 172.711222][T11444] chnl_net:caif_netlink_parms(): no params data found [ 172.763884][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.771085][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.778638][T11444] bridge_slave_0: entered allmulticast mode [ 172.785382][T11444] bridge_slave_0: entered promiscuous mode [ 172.793545][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.800735][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.808266][T11444] bridge_slave_1: entered allmulticast mode [ 172.814837][T11444] bridge_slave_1: entered promiscuous mode [ 172.836818][ T8534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.860549][T11444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.875120][T11444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.882104][T11464] loop3: detected capacity change from 0 to 512 [ 172.898922][T11464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.899120][T11444] team0: Port device team_slave_0 added [ 172.911512][T11464] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.918653][T11444] team0: Port device team_slave_1 added [ 172.944134][ T8534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.986306][T11444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.993346][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.019351][T11444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.030610][T11010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.049672][ T8534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.061947][T11444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.069022][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.095075][T11444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.133412][T11444] hsr_slave_0: entered promiscuous mode [ 173.145421][T11444] hsr_slave_1: entered promiscuous mode [ 173.152452][T11444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.164335][T11444] Cannot create hsr debugfs directory [ 173.215704][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 173.235380][ T8534] bridge_slave_1: left allmulticast mode [ 173.241111][ T8534] bridge_slave_1: left promiscuous mode [ 173.247192][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.256366][ T8534] bridge_slave_0: left allmulticast mode [ 173.262293][ T8534] bridge_slave_0: left promiscuous mode [ 173.268077][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.368333][ T8534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.379238][ T8534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.389809][ T8534] bond0 (unregistering): Released all slaves [ 173.432238][T11493] loop3: detected capacity change from 0 to 1024 [ 173.457483][T11493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.482827][ T8534] hsr_slave_0: left promiscuous mode [ 173.488652][ T8534] hsr_slave_1: left promiscuous mode [ 173.494572][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.502049][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.506377][T11493] loop3: detected capacity change from 1024 to 64 [ 173.517444][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.519176][T11493] syz.3.2725: attempt to access beyond end of device [ 173.519176][T11493] loop3: rw=0, sector=162, nr_sectors = 2 limit=64 [ 173.524887][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.549869][ T8534] veth1_macvtap: left promiscuous mode [ 173.555438][ T8534] veth0_macvtap: left promiscuous mode [ 173.560996][ T8534] veth1_vlan: left promiscuous mode [ 173.563453][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.566634][ T8534] veth0_vlan: left promiscuous mode [ 173.582050][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.598956][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.612554][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.626257][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.639874][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.653468][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.667591][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.681121][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.694664][T11010] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 173.746869][ T8534] team0 (unregistering): Port device team_slave_1 removed [ 173.758918][ T8534] team0 (unregistering): Port device team_slave_0 removed [ 173.900250][T11479] chnl_net:caif_netlink_parms(): no params data found [ 173.968789][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.976074][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.983298][T11479] bridge_slave_0: entered allmulticast mode [ 173.989905][T11479] bridge_slave_0: entered promiscuous mode [ 173.995947][T11010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.997278][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.012030][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.019420][T11479] bridge_slave_1: entered allmulticast mode [ 174.025939][T11479] bridge_slave_1: entered promiscuous mode [ 174.038890][T11494] kmmpd-loop3: attempt to access beyond end of device [ 174.038890][T11494] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 174.052615][T11494] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 174.075093][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.088281][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.110400][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 174.148564][T11479] team0: Port device team_slave_0 added [ 174.156431][T11479] team0: Port device team_slave_1 added [ 174.186112][T11531] vlan0: entered allmulticast mode [ 174.204984][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.212013][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.238133][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.249763][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.256863][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.282865][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.336393][T11479] hsr_slave_0: entered promiscuous mode [ 174.342881][T11479] hsr_slave_1: entered promiscuous mode [ 174.349121][T11479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.357186][T11479] Cannot create hsr debugfs directory [ 174.366395][T11444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.382873][T11444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.391888][T11444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.401140][T11444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.499180][ T8534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.530044][T11479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.550885][ T8534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.576260][T11525] chnl_net:caif_netlink_parms(): no params data found [ 174.588317][T11479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.651017][ T8534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.662476][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.669559][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.676786][T11525] bridge_slave_0: entered allmulticast mode [ 174.683342][T11525] bridge_slave_0: entered promiscuous mode [ 174.691316][T11479] team0: Port device netdevsim1 removed [ 174.698517][T11479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.709864][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.716990][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.724341][T11525] bridge_slave_1: entered allmulticast mode [ 174.731419][T11525] bridge_slave_1: entered promiscuous mode [ 174.742746][ T8534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.767685][T11479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.780344][T11525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.791725][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.800885][T11525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.832214][T11525] team0: Port device team_slave_0 added [ 174.839555][T11525] team0: Port device team_slave_1 added [ 174.846882][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.865883][T11525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.872853][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.898967][T11525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.910969][T11525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.917954][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.943895][T11525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.966788][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.973936][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.001561][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.008693][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.022746][T11479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.036643][T11525] hsr_slave_0: entered promiscuous mode [ 175.042752][T11525] hsr_slave_1: entered promiscuous mode [ 175.048810][T11525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.056449][T11525] Cannot create hsr debugfs directory [ 175.065611][T11479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.074697][T11479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.083921][T11479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.114706][ T8534] bridge_slave_1: left allmulticast mode [ 175.120457][ T8534] bridge_slave_1: left promiscuous mode [ 175.126184][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.133933][ T8534] bridge_slave_0: left allmulticast mode [ 175.139840][ T8534] bridge_slave_0: left promiscuous mode [ 175.145600][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.237661][ T8534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.248268][ T8534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.258756][ T8534] bond0 (unregistering): Released all slaves [ 175.300500][ T8534] hsr_slave_0: left promiscuous mode [ 175.306455][ T8534] hsr_slave_1: left promiscuous mode [ 175.312407][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.319923][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.327986][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.335524][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.346471][ T8534] veth1_macvtap: left promiscuous mode [ 175.351974][ T8534] veth0_macvtap: left promiscuous mode [ 175.357576][ T8534] veth1_vlan: left promiscuous mode [ 175.362785][ T8534] veth0_vlan: left promiscuous mode [ 175.477542][ T8534] team0 (unregistering): Port device team_slave_1 removed [ 175.488342][ T8534] team0 (unregistering): Port device team_slave_0 removed [ 175.580086][T11479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.597135][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.608750][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.620572][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.627667][ T8508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.651310][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.658451][ T8508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.768838][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.846242][T11525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.860328][T11589] loop1: detected capacity change from 0 to 2048 [ 175.870026][T11525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.881653][T11525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.891520][T11589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.907551][T11525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.940051][T11444] veth0_vlan: entered promiscuous mode [ 175.953216][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.971657][T11444] veth1_vlan: entered promiscuous mode [ 175.980312][T11479] veth0_vlan: entered promiscuous mode [ 176.001460][T11479] veth1_vlan: entered promiscuous mode [ 176.022143][T11444] veth0_macvtap: entered promiscuous mode [ 176.030877][T11525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.043118][T11479] veth0_macvtap: entered promiscuous mode [ 176.055525][T11444] veth1_macvtap: entered promiscuous mode [ 176.062313][T11479] veth1_macvtap: entered promiscuous mode [ 176.072586][T11525] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.086521][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.093583][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.106405][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.116951][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.126983][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.137454][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.147282][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.157727][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.169111][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.178908][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.186013][ T8534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.198288][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.208782][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.218625][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.229070][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.238916][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.249400][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.260685][T11444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.268674][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.279173][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.289048][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.299486][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.309333][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.319858][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.329752][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.340329][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.351472][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.365434][T11444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.374145][T11444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.382865][T11444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.391622][T11444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.404586][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.415152][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.425070][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.435577][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.445411][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.455990][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.465834][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.476291][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.487045][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.506375][T11479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.515146][T11479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.523965][T11479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.532751][T11479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.617116][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 176.641632][T11525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.721511][T11618] vlan2: entered allmulticast mode [ 176.778453][T11525] veth0_vlan: entered promiscuous mode [ 176.788517][T11525] veth1_vlan: entered promiscuous mode [ 176.827307][T11525] veth0_macvtap: entered promiscuous mode [ 176.835320][T11525] veth1_macvtap: entered promiscuous mode [ 176.859718][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.870230][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.880167][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.890687][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.900667][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.911203][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.921057][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.931538][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.941515][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.952149][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.964994][T11525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.973372][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.983909][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.993953][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.004599][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.014535][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.025040][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.034861][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.045324][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.055251][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.065750][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.076572][T11525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.096291][T11525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.105111][T11525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.113816][T11525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.122629][T11525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.233231][T11650] netlink: 'syz.3.2736': attribute type 4 has an invalid length. [ 177.246461][T11651] netlink: 'syz.0.2761': attribute type 3 has an invalid length. [ 177.263143][T11650] netlink: 'syz.3.2736': attribute type 4 has an invalid length. [ 177.341985][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 177.342003][ T29] audit: type=1400 audit(1728076471.887:5062): avc: denied { getopt } for pid=11661 comm="syz.3.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.404253][T11664] syzkaller0: entered promiscuous mode [ 177.409893][T11664] syzkaller0: entered allmulticast mode [ 177.436866][ T29] audit: type=1400 audit(1728076471.987:5063): avc: denied { create } for pid=11666 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.468825][ T29] audit: type=1400 audit(1728076472.007:5064): avc: denied { bind } for pid=11666 comm="syz.0.2768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.570191][ T29] audit: type=1400 audit(1728076472.117:5065): avc: denied { append } for pid=11678 comm="syz.2.2773" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.597825][T11679] loop6: detected capacity change from 0 to 7 [ 177.603998][T11679] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.619724][T11679] Buffer I/O error on dev loop6, logical block 0, async page read [ 177.627934][T11679] loop6: unable to read partition table [ 177.634302][T11679] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 177.634302][T11679] ) failed (rc=-5) [ 177.684666][T11684] bridge0: port 4(vlan0) entered blocking state [ 177.691027][T11684] bridge0: port 4(vlan0) entered disabled state [ 177.710946][T11684] vlan0: entered allmulticast mode [ 177.718565][T11684] vlan0: left allmulticast mode [ 177.920348][T11700] syzkaller0: entered promiscuous mode [ 177.925895][T11700] syzkaller0: entered allmulticast mode [ 178.036343][ T29] audit: type=1326 audit(1728076472.587:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982704dff9 code=0x7ffc0000 [ 178.062930][ T29] audit: type=1326 audit(1728076472.587:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982704dff9 code=0x7ffc0000 [ 178.086572][ T29] audit: type=1326 audit(1728076472.607:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f982704dff9 code=0x7ffc0000 [ 178.110240][ T29] audit: type=1326 audit(1728076472.607:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982704dff9 code=0x7ffc0000 [ 178.133822][ T29] audit: type=1326 audit(1728076472.607:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982704dff9 code=0x7ffc0000 [ 178.157443][ T29] audit: type=1326 audit(1728076472.607:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11704 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f982704dff9 code=0x7ffc0000 [ 178.201950][T11709] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2786'. [ 178.233131][T11713] bridge0: port 3(vlan2) entered blocking state [ 178.239607][T11713] bridge0: port 3(vlan2) entered disabled state [ 178.246255][T11713] vlan2: entered allmulticast mode [ 178.251782][T11713] vlan2: left allmulticast mode [ 178.469867][T11736] loop6: detected capacity change from 0 to 7 [ 178.476225][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.484125][T11736] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.492015][T11736] loop6: unable to read partition table [ 178.498486][T11736] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 178.498486][T11736] ) failed (rc=-5) [ 178.537337][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.629337][T11755] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.645980][T11753] vhci_hcd: invalid port number 157 [ 178.651234][T11753] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 178.659005][T11746] veth0_vlan: left promiscuous mode [ 178.666897][T11746] veth0_vlan: entered promiscuous mode [ 178.678649][T11757] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 178.688569][T11759] netlink: 'syz.3.2809': attribute type 4 has an invalid length. [ 178.707529][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 178.734907][T11759] loop3: detected capacity change from 0 to 512 [ 178.743431][T11759] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.770904][T11763] vlan2: entered allmulticast mode [ 178.781713][T11759] EXT4-fs error (device loop3): ext4_quota_enable:7053: inode #4: comm syz.3.2809: iget: special inode unallocated [ 178.795580][T11759] EXT4-fs error (device loop3): ext4_quota_enable:7056: comm syz.3.2809: Bad quota inode: 4, type: 1 [ 178.806709][T11759] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.821938][T11759] EXT4-fs (loop3): mount failed [ 178.834800][T11772] loop6: detected capacity change from 0 to 7 [ 178.842374][T11774] pim6reg1: entered promiscuous mode [ 178.845556][T11772] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.847804][T11774] pim6reg1: entered allmulticast mode [ 178.858401][T11772] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.868897][T11772] loop6: unable to read partition table [ 178.874706][T11772] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 178.874706][T11772] ) failed (rc=-5) [ 178.963218][T11780] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 179.010233][T11789] bridge0: port 4(vlan0) entered blocking state [ 179.016726][T11789] bridge0: port 4(vlan0) entered disabled state [ 179.024680][T11789] vlan0: entered allmulticast mode [ 179.044329][T11789] vlan0: left allmulticast mode [ 179.054363][T11784] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 179.118840][T11798] syz.2.2826[11798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.118964][T11798] syz.2.2826[11798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.131206][T11799] loop3: detected capacity change from 0 to 512 [ 179.151210][T11798] syz.2.2826[11798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.156574][T11799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.198209][T11799] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 179.215976][T11799] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.229374][T11799] EXT4-fs (loop3): 1 truncate cleaned up [ 179.235740][T11806] loop6: detected capacity change from 0 to 7 [ 179.236956][T11799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.241979][T11806] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.262285][T11806] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.270157][T11806] loop6: unable to read partition table [ 179.275962][T11806] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 179.275962][T11806] ) failed (rc=-5) [ 179.544584][T11525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.564710][T11839] loop4: detected capacity change from 0 to 2048 [ 179.581089][T11839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.632599][T11849] vlan2: entered allmulticast mode [ 179.678609][T11851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2830: bg 0: block 234: padding at end of block bitmap is not set [ 179.693506][T11851] EXT4-fs (loop4): Remounting filesystem read-only [ 179.746798][T11854] syzkaller1: entered promiscuous mode [ 179.752321][T11854] syzkaller1: entered allmulticast mode [ 179.757700][T11444] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.858310][T11864] netlink: 'syz.2.2838': attribute type 2 has an invalid length. [ 179.878884][T11866] tipc: Started in network mode [ 179.883850][T11866] tipc: Node identity caf38308019f, cluster identity 4711 [ 179.891131][T11866] tipc: Enabled bearer , priority 7 [ 179.899725][T11866] : renamed from syzkaller0 [ 179.906551][T11866] tipc: Disabling bearer [ 180.143067][T11882] Unknown options in mask 5 [ 180.161949][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 180.343687][T11891] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.446681][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'. [ 180.666367][T11919] loop1: detected capacity change from 0 to 1024 [ 180.673764][T11919] EXT4-fs: Ignoring removed nobh option [ 180.679672][T11919] EXT4-fs: Ignoring removed orlov option [ 180.718187][T11919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.773427][T11919] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.2864: Abort forced by user [ 180.837661][T11919] EXT4-fs (loop1): Remounting filesystem read-only [ 180.857282][T11919] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 180.884402][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.931890][T11942] loop3: detected capacity change from 0 to 512 [ 180.943034][T11942] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.064751][T11942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.105191][T11942] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.126365][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2876'. [ 181.189649][T11961] loop4: detected capacity change from 0 to 256 [ 181.243793][T11525] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.258792][T11961] FAT-fs (loop4): Directory bread(block 64) failed [ 181.274574][T11961] FAT-fs (loop4): Directory bread(block 65) failed [ 181.288759][T11961] FAT-fs (loop4): Directory bread(block 66) failed [ 181.297231][T11961] FAT-fs (loop4): Directory bread(block 67) failed [ 181.303842][T11961] FAT-fs (loop4): Directory bread(block 68) failed [ 181.310420][T11961] FAT-fs (loop4): Directory bread(block 69) failed [ 181.317319][T11961] FAT-fs (loop4): Directory bread(block 70) failed [ 181.323910][T11961] FAT-fs (loop4): Directory bread(block 71) failed [ 181.334863][T11961] FAT-fs (loop4): Directory bread(block 72) failed [ 181.343380][T11961] FAT-fs (loop4): Directory bread(block 73) failed [ 181.482530][T11988] wireguard0: entered promiscuous mode [ 181.488144][T11988] wireguard0: entered allmulticast mode [ 181.646086][T12003] netlink: 'syz.2.2886': attribute type 4 has an invalid length. [ 181.654595][T12003] netlink: 'syz.2.2886': attribute type 4 has an invalid length. [ 181.853596][ T8515] kworker/u8:20: attempt to access beyond end of device [ 181.853596][ T8515] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 181.874457][ T8515] kworker/u8:20: attempt to access beyond end of device [ 181.874457][ T8515] loop4: rw=1, sector=1864, nr_sectors = 2056 limit=256 [ 181.893709][ T8515] kworker/u8:20: attempt to access beyond end of device [ 181.893709][ T8515] loop4: rw=1, sector=3920, nr_sectors = 2056 limit=256 [ 181.924328][ T8515] kworker/u8:20: attempt to access beyond end of device [ 181.924328][ T8515] loop4: rw=1, sector=5976, nr_sectors = 2048 limit=256 [ 181.959886][ T8515] kworker/u8:20: attempt to access beyond end of device [ 181.959886][ T8515] loop4: rw=1, sector=8024, nr_sectors = 3520 limit=256 [ 181.982458][ T8515] kworker/u8:20: attempt to access beyond end of device [ 181.982458][ T8515] loop4: rw=1, sector=11544, nr_sectors = 2088 limit=256 [ 182.001461][ T8515] kworker/u8:20: attempt to access beyond end of device [ 182.001461][ T8515] loop4: rw=1, sector=13632, nr_sectors = 3304 limit=256 [ 182.038130][ T8515] kworker/u8:20: attempt to access beyond end of device [ 182.038130][ T8515] loop4: rw=1, sector=16936, nr_sectors = 3544 limit=256 [ 182.058795][ T8515] kworker/u8:20: attempt to access beyond end of device [ 182.058795][ T8515] loop4: rw=1, sector=20480, nr_sectors = 2048 limit=256 [ 182.078730][ T8515] kworker/u8:20: attempt to access beyond end of device [ 182.078730][ T8515] loop4: rw=1, sector=22528, nr_sectors = 2048 limit=256 [ 182.209790][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.219212][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.344696][T12068] syzkaller1: entered promiscuous mode [ 182.350599][T12068] syzkaller1: entered allmulticast mode [ 182.369954][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 182.595934][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 183.015199][T12116] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 183.296330][T12131] syz.0.2940[12131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.296476][T12131] syz.0.2940[12131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.310587][T12131] syz.0.2940[12131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.399507][T12138] loop1: detected capacity change from 0 to 2048 [ 183.496209][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 183.496226][ T29] audit: type=1400 audit(1728076478.047:5277): avc: denied { unmount } for pid=10459 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 183.727313][T12146] veth0_vlan: left promiscuous mode [ 183.733282][T12146] veth0_vlan: entered promiscuous mode [ 183.790438][T12153] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 183.792117][ T29] audit: type=1400 audit(1728076478.337:5278): avc: denied { mount } for pid=12155 comm="syz.1.2960" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 183.893077][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 183.961092][T12161] syz.4.2952[12161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.961200][T12161] syz.4.2952[12161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.978634][T12161] syz.4.2952[12161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.027307][T12172] loop1: detected capacity change from 0 to 2048 [ 184.066751][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 184.068511][T12179] loop4: detected capacity change from 0 to 128 [ 184.082487][T12172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.084011][T12179] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.107994][T12179] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.172579][T11444] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.189647][T12183] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2956: bg 0: block 234: padding at end of block bitmap is not set [ 184.236685][T12183] EXT4-fs (loop1): Remounting filesystem read-only [ 184.284229][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.473744][T12197] loop1: detected capacity change from 0 to 512 [ 184.499956][T12197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.517063][T12197] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.586601][ T29] audit: type=1400 audit(1728076479.137:5279): avc: denied { append } for pid=12195 comm="syz.1.2975" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 184.587145][T12197] Process accounting resumed [ 184.631618][T12197] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 184.694623][T12219] loop4: detected capacity change from 0 to 2048 [ 184.714974][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.766376][T12223] loop1: detected capacity change from 0 to 1024 [ 184.807929][T12170] 9pnet_fd: p9_fd_create_tcp (12170): problem connecting socket to 127.0.0.1 [ 184.808723][T12223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.860990][T10459] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.862486][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.880501][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.896425][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'. [ 184.985678][T12245] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 185.051502][T12254] team0: Port device team_slave_0 removed [ 185.121242][T12261] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2993'. [ 185.233646][ T29] audit: type=1326 audit(1728076479.777:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.257259][ T29] audit: type=1326 audit(1728076479.777:5281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.280866][ T29] audit: type=1326 audit(1728076479.777:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.304458][ T29] audit: type=1326 audit(1728076479.777:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.328012][ T29] audit: type=1326 audit(1728076479.777:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.351622][ T29] audit: type=1326 audit(1728076479.777:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.375233][ T29] audit: type=1326 audit(1728076479.777:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.2.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdeab8dff9 code=0x7ffc0000 [ 185.466760][T12288] team0: Port device team_slave_0 removed [ 185.636806][T12295] netlink: 'syz.2.3007': attribute type 3 has an invalid length. [ 185.857775][T12320] veth0_vlan: left promiscuous mode [ 185.863596][T12320] veth0_vlan: entered promiscuous mode [ 185.915244][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.931756][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.357517][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'. [ 186.366791][T12336] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 186.409471][T12349] loop1: detected capacity change from 0 to 128 [ 186.421563][T12349] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.434265][T12349] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.481112][T10459] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.557950][T12347] veth0_vlan: left promiscuous mode [ 186.563690][T12347] veth0_vlan: entered promiscuous mode [ 186.636917][T12358] pim6reg1: entered promiscuous mode [ 186.642309][T12358] pim6reg1: entered allmulticast mode [ 186.868281][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 186.879429][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 186.939655][T12389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.955422][T12389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.897871][T12463] ================================================================== [ 187.906011][T12463] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_free_area [ 187.913533][T12463] [ 187.915880][T12463] read-write to 0xffffffff88bdd3ac of 4 bytes by task 10459 on cpu 0: [ 187.924056][T12463] pcpu_free_area+0x4dc/0x570 [ 187.928803][T12463] free_percpu+0x1c6/0xb30 [ 187.933256][T12463] xt_percpu_counter_free+0x63/0x80 [ 187.938482][T12463] cleanup_entry+0x195/0x1c0 [ 187.943106][T12463] __do_replace+0x470/0x580 [ 187.947646][T12463] do_ip6t_set_ctl+0x820/0x8c0 [ 187.952446][T12463] nf_setsockopt+0x195/0x1b0 [ 187.957070][T12463] ipv6_setsockopt+0x10f/0x130 [ 187.961870][T12463] tcp_setsockopt+0x93/0xb0 [ 187.966660][T12463] sock_common_setsockopt+0x64/0x80 [ 187.971915][T12463] __sys_setsockopt+0x1cc/0x240 [ 187.976779][T12463] __x64_sys_setsockopt+0x66/0x80 [ 187.981825][T12463] x64_sys_call+0x278d/0x2d60 [ 187.986534][T12463] do_syscall_64+0xc9/0x1c0 [ 187.991040][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.996947][T12463] [ 187.999273][T12463] read to 0xffffffff88bdd3ac of 4 bytes by task 12463 on cpu 1: [ 188.006914][T12463] pcpu_alloc_noprof+0x9a7/0x10c0 [ 188.012058][T12463] gro_cells_init+0x31/0x170 [ 188.016662][T12463] ip_tunnel_init+0x8b/0x180 [ 188.021272][T12463] ipgre_tunnel_init+0x388/0x3b0 [ 188.026217][T12463] register_netdevice+0x293/0xe30 [ 188.031249][T12463] __ip_tunnel_create+0x1c5/0x270 [ 188.036468][T12463] ip_tunnel_init_net+0x18a/0x3e0 [ 188.041536][T12463] ipgre_init_net+0x30/0x40 [ 188.046051][T12463] ops_init+0x1c9/0x260 [ 188.050217][T12463] setup_net+0x14d/0x600 [ 188.054460][T12463] copy_net_ns+0x290/0x430 [ 188.058880][T12463] create_new_namespaces+0x228/0x430 [ 188.064181][T12463] unshare_nsproxy_namespaces+0xe6/0x120 [ 188.069833][T12463] ksys_unshare+0x3c9/0x6e0 [ 188.074369][T12463] __x64_sys_unshare+0x1f/0x30 [ 188.079170][T12463] x64_sys_call+0x2c8d/0x2d60 [ 188.083884][T12463] do_syscall_64+0xc9/0x1c0 [ 188.088386][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.094289][T12463] [ 188.096657][T12463] value changed: 0x00000041 -> 0x00000042 [ 188.102372][T12463] [ 188.104687][T12463] Reported by Kernel Concurrency Sanitizer on: [ 188.110847][T12463] CPU: 1 UID: 0 PID: 12463 Comm: syz.2.3059 Tainted: G W 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 188.123091][T12463] Tainted: [W]=WARN [ 188.126900][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.137003][T12463] ================================================================== [ 188.153034][T12471] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 !