last executing test programs: 48.320715515s ago: executing program 32 (id=118): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) 35.934580126s ago: executing program 33 (id=569): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x27f1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 34.734491383s ago: executing program 34 (id=610): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 29.66661509s ago: executing program 6 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 29.58638812s ago: executing program 6 (id=730): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r0, 0x0, 0x0, 0x80000) 29.536269895s ago: executing program 6 (id=731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="ca", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 29.468787473s ago: executing program 6 (id=735): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 29.05753094s ago: executing program 6 (id=740): unshare(0x6020400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) unshare(0x22020400) close_range(r0, 0xffffffffffffffff, 0x0) 28.216317166s ago: executing program 35 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 27.638724091s ago: executing program 6 (id=779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16, @ANYRESHEX=0x0], 0x6, 0x2c0, &(0x7f0000000940)="$eJzs3T9rJGUYAPBndjezqxabwkoEB7SwOi7X2myQHBxupWyhFnp4dyDZRUgg4B8cU9naWPoJBMHOL2HjJ1CwFe1MERiZ2Rl3s+4fV7NGvd+vyZN33uf9lzcJKebJ289Ojh9k8ej8ox+i10uiNYhBXCSxH61ofBJXDD4LAOC/7KIo4pdiapu8JCJ6u1sWALBDW//+/3rnSwIAduy119945XA4PHo1y3pxd/Lp2aj8y778OH1++CjejXE8jNvRj8uI4nfT+G5RFHknK+3HC5P8bFRmTt76th7/8KeIKv8g+rFfNV3Nvzc8OqjSszQimvy8XMeT9fyDMv9O9OPpJfPfGx7dmeZnc/PnMUrjxefn1n8r+vHdO/FejONBtYhZ/scHWfZy8fmvH75ZLq/MT/KzUbfqN1O0F8+uu/svDwAAAAAAAAAAAAAAAAAAAAAA/1O36to53ajq95RNdf2d9mX5yV5kjfn6PnlTHyhpBpqrD5RGUeRFfNHU17mdZVlRd5zld+KZTnRuZtcAAAAAAAAAAAAAAAAAAADw73L6/gfH98fjhyfXEjTVAJrX+v/qOIO5ludifefubK5WHa4ZOdpNnyRi1TKS8ljKTVzTsWwKnli15i+/2nbA3uY+e+vOZxp04u/tq7ldx/eT5WfYjaal11ySb+b7pFEF3/+8aa501aNiyfW7WDlOWgatxUf9q53bm/eePlUF+Zo+kaz7vnjpx+nJ1S3J4i7S6lSXpu/VwVz6wt3Y6j7/8WdFoloHAAAAAAAAAAAAAAAAAADs1Oyl3yUPz9emtoruzpYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+o2f//3yLI6+Q/0TmNk9Mb3iIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPgd8CAAD//1pUXmc=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 27.637085052s ago: executing program 36 (id=779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16, @ANYRESHEX=0x0], 0x6, 0x2c0, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 22.679315176s ago: executing program 2 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) 22.655590919s ago: executing program 2 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 22.636579661s ago: executing program 2 (id=915): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x11dc0, &(0x7f00000001c0)={@broadcast, @local, @val={@void}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "57b519f9c9a5a3a1c53ac8dcaa456fc53a9351ab07d33c58b244f306dd61e53cf4a3f358968cc44f455ec4b9d42e49ab58ef1eba67d61b8c7167b978fdde608c"}}}}, 0x0) 22.608628644s ago: executing program 2 (id=916): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@debug}, {@nombcache}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 22.3840987s ago: executing program 2 (id=919): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64], 0x1, 0x36e, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000480), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 21.642348294s ago: executing program 2 (id=927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 21.615040308s ago: executing program 37 (id=927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 18.646172636s ago: executing program 7 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 18.573056564s ago: executing program 7 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000046"], 0xfdef) 18.444891519s ago: executing program 7 (id=970): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') 18.354982789s ago: executing program 7 (id=973): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@debug}, {@nombcache}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 18.043990775s ago: executing program 3 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000046"], 0xfdef) 17.966752473s ago: executing program 7 (id=982): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 17.72743627s ago: executing program 3 (id=989): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 17.660303198s ago: executing program 4 (id=991): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) shutdown(r1, 0x2) 17.637567851s ago: executing program 3 (id=1003): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000000)=ANY=[]) 17.527589083s ago: executing program 4 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r2, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) 17.422642395s ago: executing program 7 (id=996): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd8c, 0x4, 0x4, 0xd0, 0x4, 0x200, 0xfff, 0x5, 0x5, 0x9, 0x5, 0x1, 0xd, 0x8, 0x6, 0x6, 0x9, 0xafad, 0xab8a, 0x6, 0xe2, 0xfa, 0x40000000, 0x100, 0x14, 0x7, 0x8, 0xa, 0x8, 0x1, 0x2, 0x2, 0x40, 0xdc, 0x3, 0x8, 0x7, 0x2, 0x0, 0x7ff, 0x1, 0x88c, 0x1, 0xd4, 0x5, 0x1ff, 0x27e1e31, 0x8, 0xe, 0xffffff5d, 0x436, 0xf3, 0x4, 0x7, 0x7, 0x2, 0x10000000, 0x5a, 0x43b2, 0x80000001, 0x2b7, 0x7, 0x9ca, 0xb, 0x8, 0x9, 0x1ff, 0x9, 0x6, 0x8, 0x91, 0x8, 0xffffffff, 0xe3c, 0xb50, 0x10000, 0xe, 0x10000000, 0x9, 0x6, 0xffff, 0x1, 0x40, 0x5, 0x2, 0xe8d, 0x8, 0x7ea, 0x5, 0x5, 0x9, 0x2, 0x3, 0x3, 0x85d0, 0xf, 0x5092, 0x6, 0x3ff, 0x5, 0x97, 0x7, 0x6, 0xfce3, 0x0, 0xffffff7f, 0x8, 0xfffff6e3, 0x4, 0x7, 0x178e, 0xb, 0x86, 0x7, 0x7fff, 0x3, 0xfffffbff, 0xff, 0xa1, 0x8210, 0x6, 0x400, 0x7f, 0x800, 0x0, 0xf, 0x3, 0x1ff, 0x5, 0x401, 0x2, 0xf, 0xfe8, 0x5, 0x40, 0xd7, 0x1000, 0x8, 0xe, 0x0, 0x4b5, 0x0, 0xf, 0x400, 0x6, 0xfffffe01, 0x8, 0x6, 0x4, 0x9, 0x0, 0x0, 0x6, 0x4, 0x7fff8, 0x8, 0x8, 0x3, 0x8, 0x8814, 0xfffffffa, 0x9, 0x10, 0x535, 0x6, 0x6, 0x0, 0x0, 0x1, 0x401, 0x9, 0x3d9a, 0xbf, 0x8, 0xfffffffa, 0xfffffffa, 0x54, 0xcdb, 0xfffff801, 0x38, 0x65, 0x9, 0x7fffffff, 0x8, 0x7, 0x0, 0xffffffff, 0x5, 0xc0, 0x8, 0x6, 0x81, 0xe, 0xca, 0xd898, 0xd0, 0x7fffffff, 0xe6ef, 0x77456aa6, 0x1, 0x5, 0x9, 0x8, 0x6, 0x0, 0x38f, 0x8, 0x7, 0x7fff, 0x5, 0x1, 0x49, 0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0, 0x7, 0x10, 0xfff, 0x7, 0x6, 0xfffff44a, 0xf5a0, 0x8, 0x3, 0xbed8, 0xe5, 0x7386, 0x7, 0x16e, 0x31, 0x8, 0x1000, 0xe, 0x1, 0xf88c, 0x8, 0x81, 0x3ff, 0xbb5e, 0x0, 0x4, 0x9, 0x80, 0x2, 0x3, 0x8, 0x2, 0x7, 0x9, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x7, 0x8, 0x0, 0x2, 0x3ff, 0xfff, 0x8, 0x10000, 0x37e, 0xd1, 0x7ff, 0x5, 0x7, 0xff, 0x6c0, 0x2, 0xa, 0xfbc, 0x0, 0x1, 0x2, 0x0, 0x80, 0x9, 0x9, 0x4, 0x10001, 0x7fff, 0x5, 0x0, 0x7, 0x7, 0x653, 0x10000, 0x7, 0x6, 0x2, 0x8, 0x600, 0xa, 0x2, 0x5, 0x7fff, 0x9, 0x1, 0x7, 0x1, 0x44, 0x4, 0x4, 0x8, 0x3, 0x2, 0x3ca4, 0x8, 0x5, 0x0, 0x5, 0x5, 0x4, 0x8, 0x9fb, 0x8, 0xff, 0x80, 0x2, 0x5, 0x1, 0x80000000, 0xaf7, 0x1da7b2b0, 0x1, 0x3ff, 0xd, 0x2, 0x81, 0x7, 0x6, 0x1ff, 0xd148, 0x2, 0x5, 0x7f2fe426, 0x2, 0xfffffffe, 0xfffffff8, 0x9, 0x80000000, 0x4, 0x9, 0x98, 0x3, 0x4, 0x8, 0xa7, 0x4, 0x9, 0xd4b, 0x8001, 0x9, 0xc, 0x9, 0x1, 0x7f, 0x4, 0x7, 0x5, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0xf4, 0x5, 0x47, 0x5, 0x8001, 0x8, 0xb2f, 0x4, 0x7b8f2e49, 0x0, 0x200, 0x14c, 0xfffffff8, 0x4, 0x100, 0xe9, 0x5, 0x4, 0x1, 0x8, 0x0, 0x1000, 0x6, 0x6, 0xf, 0xfffff000, 0x9, 0xff, 0xfffffffd, 0x3dc, 0x6, 0x1, 0x1, 0x2, 0x3, 0x8, 0xdf, 0x200, 0xe9, 0x4, 0x4, 0x7fffffff, 0x5, 0x1, 0x81, 0x0, 0x8, 0x1, 0x6, 0x7, 0x5, 0xfffffbff, 0x2, 0x4d6a, 0x401, 0x5, 0xfff, 0x9, 0x2, 0xd43, 0x9, 0x1ff, 0x1, 0xc2, 0xf, 0x80, 0x7, 0xffffff1d, 0x6, 0xfffffff7, 0x8, 0x9, 0x0, 0xcb73, 0x80, 0x8, 0x5, 0x9, 0x80000001, 0x7, 0x85, 0x4, 0x0, 0x200, 0x7f, 0x1, 0x6, 0x9, 0x8, 0x40, 0x4000000, 0x40, 0x4, 0xaf3, 0x9, 0x2, 0x6b7d, 0xffffffff, 0x200, 0x6, 0x7, 0x7ff, 0x200, 0xa3, 0x101, 0xa, 0x164e, 0x7fffffff, 0x76ca, 0x6, 0xff, 0x9, 0x26c, 0x53b05f62, 0x8ad, 0x5, 0xa, 0x6, 0x5, 0x200, 0x2, 0x8, 0x80, 0x5, 0x5, 0xfff, 0xc, 0x1, 0x1, 0x7ff, 0x8, 0x4, 0x0, 0x2, 0x100, 0x1, 0x8001, 0x8, 0xfffffff8, 0x6, 0x1, 0xa3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x3, 0x1a000, 0x4, {0x7, 0x3, 0xc4, 0x6, 0x2, 0x101}, {0x5, 0x0, 0x2, 0x2000, 0x0, 0x30a1}, 0x8000000, 0x5, 0x3}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.422287345s ago: executing program 38 (id=996): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd8c, 0x4, 0x4, 0xd0, 0x4, 0x200, 0xfff, 0x5, 0x5, 0x9, 0x5, 0x1, 0xd, 0x8, 0x6, 0x6, 0x9, 0xafad, 0xab8a, 0x6, 0xe2, 0xfa, 0x40000000, 0x100, 0x14, 0x7, 0x8, 0xa, 0x8, 0x1, 0x2, 0x2, 0x40, 0xdc, 0x3, 0x8, 0x7, 0x2, 0x0, 0x7ff, 0x1, 0x88c, 0x1, 0xd4, 0x5, 0x1ff, 0x27e1e31, 0x8, 0xe, 0xffffff5d, 0x436, 0xf3, 0x4, 0x7, 0x7, 0x2, 0x10000000, 0x5a, 0x43b2, 0x80000001, 0x2b7, 0x7, 0x9ca, 0xb, 0x8, 0x9, 0x1ff, 0x9, 0x6, 0x8, 0x91, 0x8, 0xffffffff, 0xe3c, 0xb50, 0x10000, 0xe, 0x10000000, 0x9, 0x6, 0xffff, 0x1, 0x40, 0x5, 0x2, 0xe8d, 0x8, 0x7ea, 0x5, 0x5, 0x9, 0x2, 0x3, 0x3, 0x85d0, 0xf, 0x5092, 0x6, 0x3ff, 0x5, 0x97, 0x7, 0x6, 0xfce3, 0x0, 0xffffff7f, 0x8, 0xfffff6e3, 0x4, 0x7, 0x178e, 0xb, 0x86, 0x7, 0x7fff, 0x3, 0xfffffbff, 0xff, 0xa1, 0x8210, 0x6, 0x400, 0x7f, 0x800, 0x0, 0xf, 0x3, 0x1ff, 0x5, 0x401, 0x2, 0xf, 0xfe8, 0x5, 0x40, 0xd7, 0x1000, 0x8, 0xe, 0x0, 0x4b5, 0x0, 0xf, 0x400, 0x6, 0xfffffe01, 0x8, 0x6, 0x4, 0x9, 0x0, 0x0, 0x6, 0x4, 0x7fff8, 0x8, 0x8, 0x3, 0x8, 0x8814, 0xfffffffa, 0x9, 0x10, 0x535, 0x6, 0x6, 0x0, 0x0, 0x1, 0x401, 0x9, 0x3d9a, 0xbf, 0x8, 0xfffffffa, 0xfffffffa, 0x54, 0xcdb, 0xfffff801, 0x38, 0x65, 0x9, 0x7fffffff, 0x8, 0x7, 0x0, 0xffffffff, 0x5, 0xc0, 0x8, 0x6, 0x81, 0xe, 0xca, 0xd898, 0xd0, 0x7fffffff, 0xe6ef, 0x77456aa6, 0x1, 0x5, 0x9, 0x8, 0x6, 0x0, 0x38f, 0x8, 0x7, 0x7fff, 0x5, 0x1, 0x49, 0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0, 0x7, 0x10, 0xfff, 0x7, 0x6, 0xfffff44a, 0xf5a0, 0x8, 0x3, 0xbed8, 0xe5, 0x7386, 0x7, 0x16e, 0x31, 0x8, 0x1000, 0xe, 0x1, 0xf88c, 0x8, 0x81, 0x3ff, 0xbb5e, 0x0, 0x4, 0x9, 0x80, 0x2, 0x3, 0x8, 0x2, 0x7, 0x9, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x7, 0x8, 0x0, 0x2, 0x3ff, 0xfff, 0x8, 0x10000, 0x37e, 0xd1, 0x7ff, 0x5, 0x7, 0xff, 0x6c0, 0x2, 0xa, 0xfbc, 0x0, 0x1, 0x2, 0x0, 0x80, 0x9, 0x9, 0x4, 0x10001, 0x7fff, 0x5, 0x0, 0x7, 0x7, 0x653, 0x10000, 0x7, 0x6, 0x2, 0x8, 0x600, 0xa, 0x2, 0x5, 0x7fff, 0x9, 0x1, 0x7, 0x1, 0x44, 0x4, 0x4, 0x8, 0x3, 0x2, 0x3ca4, 0x8, 0x5, 0x0, 0x5, 0x5, 0x4, 0x8, 0x9fb, 0x8, 0xff, 0x80, 0x2, 0x5, 0x1, 0x80000000, 0xaf7, 0x1da7b2b0, 0x1, 0x3ff, 0xd, 0x2, 0x81, 0x7, 0x6, 0x1ff, 0xd148, 0x2, 0x5, 0x7f2fe426, 0x2, 0xfffffffe, 0xfffffff8, 0x9, 0x80000000, 0x4, 0x9, 0x98, 0x3, 0x4, 0x8, 0xa7, 0x4, 0x9, 0xd4b, 0x8001, 0x9, 0xc, 0x9, 0x1, 0x7f, 0x4, 0x7, 0x5, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0xf4, 0x5, 0x47, 0x5, 0x8001, 0x8, 0xb2f, 0x4, 0x7b8f2e49, 0x0, 0x200, 0x14c, 0xfffffff8, 0x4, 0x100, 0xe9, 0x5, 0x4, 0x1, 0x8, 0x0, 0x1000, 0x6, 0x6, 0xf, 0xfffff000, 0x9, 0xff, 0xfffffffd, 0x3dc, 0x6, 0x1, 0x1, 0x2, 0x3, 0x8, 0xdf, 0x200, 0xe9, 0x4, 0x4, 0x7fffffff, 0x5, 0x1, 0x81, 0x0, 0x8, 0x1, 0x6, 0x7, 0x5, 0xfffffbff, 0x2, 0x4d6a, 0x401, 0x5, 0xfff, 0x9, 0x2, 0xd43, 0x9, 0x1ff, 0x1, 0xc2, 0xf, 0x80, 0x7, 0xffffff1d, 0x6, 0xfffffff7, 0x8, 0x9, 0x0, 0xcb73, 0x80, 0x8, 0x5, 0x9, 0x80000001, 0x7, 0x85, 0x4, 0x0, 0x200, 0x7f, 0x1, 0x6, 0x9, 0x8, 0x40, 0x4000000, 0x40, 0x4, 0xaf3, 0x9, 0x2, 0x6b7d, 0xffffffff, 0x200, 0x6, 0x7, 0x7ff, 0x200, 0xa3, 0x101, 0xa, 0x164e, 0x7fffffff, 0x76ca, 0x6, 0xff, 0x9, 0x26c, 0x53b05f62, 0x8ad, 0x5, 0xa, 0x6, 0x5, 0x200, 0x2, 0x8, 0x80, 0x5, 0x5, 0xfff, 0xc, 0x1, 0x1, 0x7ff, 0x8, 0x4, 0x0, 0x2, 0x100, 0x1, 0x8001, 0x8, 0xfffffff8, 0x6, 0x1, 0xa3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x3, 0x1a000, 0x4, {0x7, 0x3, 0xc4, 0x6, 0x2, 0x101}, {0x5, 0x0, 0x2, 0x2000, 0x0, 0x30a1}, 0x8000000, 0x5, 0x3}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.387883519s ago: executing program 3 (id=997): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@debug}, {@nombcache}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 17.164211115s ago: executing program 3 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r0, &(0x7f0000000040)=""/172, 0xac, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="34000000110001e900000109e5ff00006c45b2fc", @ANYRES32=r3], 0x34}, 0x1, 0x1000000}, 0x80) 17.163971515s ago: executing program 4 (id=1001): socket$netlink(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000015"], 0xa8}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 17.097325932s ago: executing program 4 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0xa007}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000046"], 0xfdef) 16.505648219s ago: executing program 4 (id=1013): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@debug}, {@nombcache}, {@bh}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) 16.450875626s ago: executing program 9 (id=1014): socket$netlink(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e000015"], 0xa8}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 16.370019885s ago: executing program 9 (id=1016): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@newlink={0x38, 0x10, 0x439, 0x70bd27, 0xffffffe9, {0x0, 0x0, 0xe403, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c1}, 0x4008040) 16.042609402s ago: executing program 4 (id=1018): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 14.508918ms ago: executing program 8 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 14.211698ms ago: executing program 1 (id=1220): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 12.526129ms ago: executing program 0 (id=1227): getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0xfffffd9e, 0x66, 0x0, 0x0, 0x0, 0x0, 0xc24, 0x1a44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4028, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) rmdir(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") 0s ago: executing program 5 (id=1221): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) kernel console output (not intermixed with test programs): ed mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.404354][ T4970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.415427][ T4970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.423333][ T5414] loop1: detected capacity change from 0 to 1024 [ 53.424409][ T4970] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.438530][ T4970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.447370][ T4970] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.456157][ T4970] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.483414][ T5414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.495888][ T5414] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.532176][ T5076] veth0_vlan: entered promiscuous mode [ 53.543176][ T5076] veth1_vlan: entered promiscuous mode [ 53.558867][ T5427] syz.2.680[5427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.559006][ T5427] syz.2.680[5427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.571109][ T5427] syz.2.680[5427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.574690][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.609680][ T5076] veth0_macvtap: entered promiscuous mode [ 53.617382][ T5076] veth1_macvtap: entered promiscuous mode [ 53.627082][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.637590][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.647493][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.658127][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.668072][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.678952][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.690067][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.698310][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.708896][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.718864][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.729439][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.739342][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.749819][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.760493][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.792797][ T5076] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.801687][ T5076] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.806138][ T5439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'. [ 53.810417][ T5076] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.819603][ T5439] unsupported nlmsg_type 40 [ 53.828044][ T5076] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.141061][ T5497] loop4: detected capacity change from 0 to 2048 [ 54.203931][ T5497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.327340][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.544963][ T5568] loop4: detected capacity change from 0 to 128 [ 54.564042][ T5568] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.579875][ T5568] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.616933][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.641757][ T5574] loop6: detected capacity change from 0 to 512 [ 54.666784][ T5578] loop4: detected capacity change from 0 to 512 [ 54.685066][ T5574] EXT4-fs (loop6): too many log groups per flexible block group [ 54.691558][ T5578] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.708: casefold flag without casefold feature [ 54.692837][ T5574] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 54.707794][ T5578] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.708: couldn't read orphan inode 15 (err -117) [ 54.732574][ T5574] EXT4-fs (loop6): mount failed [ 54.739265][ T5578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.800177][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.941078][ T5615] ALSA: seq fatal error: cannot create timer (-22) [ 54.952119][ T5619] syz.7.718[5619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.952210][ T5619] syz.7.718[5619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.970439][ T5619] syz.7.718[5619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.011723][ T5619] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 55.201152][ T5645] netlink: 64 bytes leftover after parsing attributes in process `syz.7.727'. [ 55.333882][ T5667] loop6: detected capacity change from 0 to 512 [ 55.384019][ T5667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.411794][ T5667] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.527315][ T5667] loop6: detected capacity change from 512 to 0 [ 55.533851][ T5692] syz.6.735: attempt to access beyond end of device [ 55.533851][ T5692] loop6: rw=4096, sector=66556, nr_sectors = 4 limit=0 [ 55.554153][ T5696] loop4: detected capacity change from 0 to 512 [ 55.557598][ T5692] EXT4-fs warning (device loop6): ext4_resize_fs:2019: can't read last block, resize aborted [ 55.571930][ T5696] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.574345][ T5692] syz.6.735: attempt to access beyond end of device [ 55.574345][ T5692] loop6: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 55.595006][ T5692] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 55.611616][ T5692] EXT4-fs error (device loop6) in ext4_update_primary_sb:90: IO failure [ 55.628665][ T5692] EXT4-fs (loop6): previous I/O error to superblock detected [ 55.636965][ T5692] syz.6.735: attempt to access beyond end of device [ 55.636965][ T5692] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 55.650327][ T5692] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 55.659149][ T5692] EXT4-fs (loop6): I/O error while writing superblock [ 55.666069][ T5692] EXT4-fs (loop6): Failed to update primary superblock [ 55.671089][ T5696] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.738: invalid indirect mapped block 4294967295 (level 0) [ 55.716744][ T4970] syz-executor: attempt to access beyond end of device [ 55.716744][ T4970] loop6: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 55.740465][ T5696] EXT4-fs (loop4): Remounting filesystem read-only [ 55.744341][ T28] kworker/u8:1: attempt to access beyond end of device [ 55.744341][ T28] loop6: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 55.760752][ T28] kworker/u8:1: attempt to access beyond end of device [ 55.760752][ T28] loop6: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 55.770530][ T5696] EXT4-fs (loop4): 1 orphan inode deleted [ 55.774380][ T28] kworker/u8:1: attempt to access beyond end of device [ 55.774380][ T28] loop6: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 55.780082][ T5696] EXT4-fs (loop4): 1 truncate cleaned up [ 55.793565][ T28] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4526: inode #18: block 35: comm kworker/u8:1: unable to read itable block [ 55.813196][ T28] kworker/u8:1: attempt to access beyond end of device [ 55.813196][ T28] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 55.826721][ T28] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 55.835077][ T28] EXT4-fs (loop6): I/O error while writing superblock [ 55.843134][ T4970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.853065][ T5696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.865948][ T4970] syz-executor: attempt to access beyond end of device [ 55.865948][ T4970] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 55.879440][ T4970] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 55.887834][ T5696] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 55.895210][ T4970] EXT4-fs (loop6): I/O error while writing superblock [ 55.914113][ T5696] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.928119][ T5669] kmmpd-loop6: attempt to access beyond end of device [ 55.928119][ T5669] loop6: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 55.941649][ T5669] Buffer I/O error on dev loop6, logical block 12, lost sync page write [ 56.105698][ T5736] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5736 comm=syz.4.748 [ 56.170409][ T5749] loop1: detected capacity change from 0 to 128 [ 56.238392][ T3320] VFS: Lookup of '. ' in vfat loop1 would have caused loop [ 56.259211][ T3320] VFS: Lookup of '. ' in vfat loop1 would have caused loop [ 56.768154][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 56.787964][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 56.851384][ T5842] loop2: detected capacity change from 0 to 2048 [ 56.862281][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.869459][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.876145][ T5842] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 56.876759][ T5803] bridge_slave_0: entered allmulticast mode [ 56.886300][ T5842] System zones: 0-7 [ 56.891578][ T5803] bridge_slave_0: entered promiscuous mode [ 56.896150][ T5842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.902751][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.919411][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.938232][ T5803] bridge_slave_1: entered allmulticast mode [ 56.945048][ T5803] bridge_slave_1: entered promiscuous mode [ 56.968818][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.996037][ T5851] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.997767][ T5850] loop2: detected capacity change from 0 to 128 [ 57.005960][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.010500][ T5850] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.030663][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.048194][ T5850] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.095832][ T5803] team0: Port device team_slave_0 added [ 57.112890][ T5803] team0: Port device team_slave_1 added [ 57.155013][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.162074][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.188131][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.219609][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 57.221531][ T5870] loop2: detected capacity change from 0 to 512 [ 57.228521][ T5869] netlink: 'syz.4.782': attribute type 3 has an invalid length. [ 57.248765][ T5870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.271269][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.278323][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.304326][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.328293][ T5870] EXT4-fs (loop2): 1 truncate cleaned up [ 57.335938][ T5870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.353572][ T5803] hsr_slave_0: entered promiscuous mode [ 57.360125][ T5803] hsr_slave_1: entered promiscuous mode [ 57.366316][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.373904][ T5803] Cannot create hsr debugfs directory [ 57.402165][ T5880] loop4: detected capacity change from 0 to 512 [ 57.417831][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.447102][ T5880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.468223][ T5880] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.493528][ T5880] Process accounting resumed [ 57.518762][ T5880] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 57.577241][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 57.577302][ T29] audit: type=1400 audit(1730491812.343:1330): avc: denied { execute_no_trans } for pid=5899 comm="syz.2.788" path=2F6D656D66643A5B0BDB7E89BAC2378B0A58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.617275][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.628235][ T5902] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.654554][ T29] audit: type=1400 audit(1730491812.393:1331): avc: denied { write } for pid=5901 comm="+}[@" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.666066][ T5803] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 57.701836][ T5803] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 57.721946][ T5803] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 57.759338][ T5803] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 57.760792][ T29] audit: type=1400 audit(1730491812.523:1332): avc: denied { bind } for pid=5914 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.785484][ T29] audit: type=1400 audit(1730491812.523:1333): avc: denied { name_bind } for pid=5914 comm="syz.2.792" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 57.807252][ T29] audit: type=1400 audit(1730491812.523:1334): avc: denied { node_bind } for pid=5914 comm="syz.2.792" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 57.829307][ T29] audit: type=1400 audit(1730491812.543:1335): avc: denied { write } for pid=5914 comm="syz.2.792" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.850782][ T29] audit: type=1400 audit(1730491812.543:1336): avc: denied { connect } for pid=5914 comm="syz.2.792" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.872393][ T29] audit: type=1400 audit(1730491812.543:1337): avc: denied { name_connect } for pid=5914 comm="syz.2.792" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 57.894438][ T29] audit: type=1400 audit(1730491812.543:1338): avc: denied { create } for pid=5914 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.960966][ T5923] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 58.001441][ T29] audit: type=1326 audit(1730491812.763:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.7.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2518e719 code=0x7ffc0000 [ 58.012020][ T5932] sd 0:0:1:0: device reset [ 58.066065][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 58.132479][ T5940] loop2: detected capacity change from 0 to 512 [ 58.156021][ T5941] loop7: detected capacity change from 0 to 2048 [ 58.162849][ T5940] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.176746][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.212723][ T5941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.240436][ T5940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.244395][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.266363][ T5941] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.275384][ T5803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.291487][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.302188][ T5941] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 58.306017][ T5940] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.800: corrupted inode contents [ 58.314934][ T5941] EXT4-fs (loop7): This should not happen!! Data will be lost [ 58.314934][ T5941] [ 58.337133][ T5941] EXT4-fs (loop7): Total free blocks count 0 [ 58.343166][ T5941] EXT4-fs (loop7): Free/Dirty block details [ 58.349138][ T5941] EXT4-fs (loop7): free_blocks=2415919104 [ 58.354910][ T5941] EXT4-fs (loop7): dirty_blocks=16 [ 58.355076][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.360035][ T5941] EXT4-fs (loop7): Block reservation details [ 58.360052][ T5941] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 58.363468][ T5956] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 58.367161][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.403513][ T5940] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #2: comm syz.2.800: mark_inode_dirty error [ 58.424071][ T5873] bridge_slave_0: entered allmulticast mode [ 58.426407][ T5940] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #2: comm syz.2.800: corrupted inode contents [ 58.431306][ T5873] bridge_slave_0: entered promiscuous mode [ 58.451310][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.458521][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.476886][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.484040][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.518575][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.525784][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.548397][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.559446][ T5873] bridge_slave_1: entered allmulticast mode [ 58.566340][ T5873] bridge_slave_1: entered promiscuous mode [ 58.607124][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.625989][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.649460][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.687072][ T5873] team0: Port device team_slave_0 added [ 58.693843][ T5873] team0: Port device team_slave_1 added [ 58.716680][ T5984] loop4: detected capacity change from 0 to 1024 [ 58.723760][ T5984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.754504][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.761541][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.787542][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.800001][ T5984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 58.811240][ T5984] System zones: 0-1, 3-12 [ 58.824560][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.831558][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.836303][ T5984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.858600][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.926621][ T5873] hsr_slave_0: entered promiscuous mode [ 58.934606][ T5873] hsr_slave_1: entered promiscuous mode [ 58.943676][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.951590][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.951863][ T5873] Cannot create hsr debugfs directory [ 59.102616][ T6017] mmap: syz.4.824 (6017): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 59.116349][ T6015] netlink: 'syz.7.823': attribute type 10 has an invalid length. [ 59.124917][ T6015] geneve1: entered promiscuous mode [ 59.135467][ T6015] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 59.189034][ T5803] veth0_vlan: entered promiscuous mode [ 59.198296][ T5803] veth1_vlan: entered promiscuous mode [ 59.214904][ T5803] veth0_macvtap: entered promiscuous mode [ 59.242567][ T5803] veth1_macvtap: entered promiscuous mode [ 59.292130][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 59.293854][ T5873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 59.312266][ T5873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 59.322748][ T5873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 59.333843][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.344480][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.354361][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.364912][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.374773][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.385324][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.395160][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.405621][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.417285][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.424759][ T6028] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 59.441269][ T6034] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 59.455930][ T5873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 59.494962][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.505542][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.515467][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.526056][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.536082][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.537580][ T6040] loop4: detected capacity change from 0 to 128 [ 59.546552][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.546572][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.573217][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.584585][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.600579][ T5803] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.603900][ T6040] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.609488][ T5803] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.628665][ T5803] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.637527][ T5803] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.677047][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.689580][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.701224][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.708501][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.741374][ T6045] IPVS: Error connecting to the multicast addr [ 59.749912][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.757038][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.807752][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.808209][ T6052] loop8: detected capacity change from 0 to 512 [ 59.871601][ T6058] syz.4.838[6058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.871790][ T6058] syz.4.838[6058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.887705][ T6058] syz.4.838[6058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.893160][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.938490][ T6052] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.007123][ T6077] loop2: detected capacity change from 0 to 512 [ 60.014707][ T6077] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.104111][ T6077] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.843: iget: bad i_size value: -6917529027641081756 [ 60.137911][ T6077] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.843: couldn't read orphan inode 17 (err -117) [ 60.227123][ T6096] loop4: detected capacity change from 0 to 128 [ 60.278817][ T6096] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 60.362441][ T50] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 60.401884][ T5873] veth0_vlan: entered promiscuous mode [ 60.423649][ T5873] veth1_vlan: entered promiscuous mode [ 60.457768][ T5873] veth0_macvtap: entered promiscuous mode [ 60.465142][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 60.491226][ T5873] veth1_macvtap: entered promiscuous mode [ 60.520578][ T6119] netlink: 80 bytes leftover after parsing attributes in process `syz.4.856'. [ 60.540100][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 60.548393][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 60.558395][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.568951][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.578902][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.589366][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.599429][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.610162][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.620123][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.630616][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.640525][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.651070][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.666143][ T9] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 60.674878][ T9] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 60.705210][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.727671][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.738342][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.748291][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.759149][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.769061][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.779559][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.789459][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.800039][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.810348][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.820928][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.846509][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.906716][ T5873] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.915542][ T5873] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.924432][ T5873] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.933164][ T5873] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.217426][ T6171] loop9: detected capacity change from 0 to 1024 [ 61.224677][ T6171] EXT4-fs: Ignoring removed oldalloc option [ 61.238832][ T6171] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.661109][ T6211] ALSA: seq fatal error: cannot create timer (-22) [ 61.674101][ T6209] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 61.695991][ T6214] loop7: detected capacity change from 0 to 256 [ 61.756781][ T6219] netlink: 20 bytes leftover after parsing attributes in process `syz.9.899'. [ 61.811474][ T6214] FAT-fs (loop7): Directory bread(block 64) failed [ 61.873243][ T6214] FAT-fs (loop7): Directory bread(block 65) failed [ 61.896603][ T6214] FAT-fs (loop7): Directory bread(block 66) failed [ 61.903352][ T6214] FAT-fs (loop7): Directory bread(block 67) failed [ 61.941757][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 61.945467][ T6214] FAT-fs (loop7): Directory bread(block 68) failed [ 61.984805][ T6214] FAT-fs (loop7): Directory bread(block 69) failed [ 61.996281][ T6214] FAT-fs (loop7): Directory bread(block 70) failed [ 62.013141][ T6214] FAT-fs (loop7): Directory bread(block 71) failed [ 62.051230][ T6214] FAT-fs (loop7): Directory bread(block 72) failed [ 62.110853][ T6214] FAT-fs (loop7): Directory bread(block 73) failed [ 62.183620][ T6270] loop2: detected capacity change from 0 to 512 [ 62.209636][ T6270] EXT4-fs: Ignoring removed bh option [ 62.225600][ T6270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.246385][ T6270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 62.266566][ T6270] EXT4-fs (loop2): 1 truncate cleaned up [ 62.304682][ T6270] loop2: detected capacity change from 512 to 64 [ 62.312420][ T6270] syz.2.916: attempt to access beyond end of device [ 62.312420][ T6270] loop2: rw=3, sector=76, nr_sectors = 4 limit=64 [ 62.331232][ T6270] syz.2.916: attempt to access beyond end of device [ 62.331232][ T6270] loop2: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 62.393477][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.429873][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.461218][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.492157][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.527578][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.558146][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.590732][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.622520][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.655711][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.684070][ T3322] EXT4-fs warning (device loop2): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 62.728224][ T6207] syz.7.897 (6207) used greatest stack depth: 7288 bytes left [ 62.756360][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 62.756378][ T29] audit: type=1400 audit(1730491817.500:1611): avc: denied { unmount } for pid=5076 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 62.784142][ T29] audit: type=1400 audit(1730491817.540:1612): avc: denied { read } for pid=6303 comm="syz.9.921" dev="nsfs" ino=4026533434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.851133][ T29] audit: type=1400 audit(1730491817.550:1613): avc: denied { open } for pid=6303 comm="syz.9.921" path="net:[4026533434]" dev="nsfs" ino=4026533434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 62.874377][ T29] audit: type=1400 audit(1730491817.550:1614): avc: denied { create } for pid=6303 comm="syz.9.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.894389][ T29] audit: type=1326 audit(1730491817.610:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.8.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 62.917878][ T29] audit: type=1326 audit(1730491817.610:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.8.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 62.941409][ T29] audit: type=1326 audit(1730491817.610:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.8.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 62.964763][ T29] audit: type=1326 audit(1730491817.610:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.8.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 62.988151][ T29] audit: type=1326 audit(1730491817.610:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.8.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 63.012058][ T29] audit: type=1326 audit(1730491817.610:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6307 comm="syz.8.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 63.056110][ T6313] syz.9.923[6313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.056180][ T6313] syz.9.923[6313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.088672][ T6313] syz.9.923[6313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.136428][ T6297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.219565][ T6297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.236437][ T6322] loop9: detected capacity change from 0 to 1024 [ 63.249519][ T6324] loop8: detected capacity change from 0 to 1024 [ 63.264623][ T6322] EXT4-fs: Ignoring removed oldalloc option [ 63.270580][ T6322] EXT4-fs: Ignoring removed nobh option [ 63.276423][ T6322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.292815][ T6329] loop7: detected capacity change from 0 to 512 [ 63.311241][ T6329] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.321288][ T6324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=884ec118, mo2=0002] [ 63.342259][ T6324] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 63.354936][ T6297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.366481][ T6329] EXT4-fs error (device loop7): ext4_orphan_get:1388: inode #17: comm syz.7.932: iget: bad i_size value: -6917529027641081756 [ 63.395713][ T6329] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.932: couldn't read orphan inode 17 (err -117) [ 63.453219][ T6297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.471368][ T6348] netlink: 100 bytes leftover after parsing attributes in process `syz.4.939'. [ 63.767503][ T6297] bond0 (unregistering): Released all slaves [ 63.833937][ T6297] hsr_slave_0: left promiscuous mode [ 63.843022][ T6297] hsr_slave_1: left promiscuous mode [ 63.859807][ T6297] veth1_macvtap: left promiscuous mode [ 63.865477][ T6297] veth0_macvtap: left promiscuous mode [ 63.871060][ T6297] veth1_vlan: left promiscuous mode [ 63.876480][ T6297] veth0_vlan: left promiscuous mode [ 63.958572][ T6378] loop9: detected capacity change from 0 to 128 [ 63.980833][ T6378] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.079056][ T6381] loop9: detected capacity change from 0 to 512 [ 64.093994][ T6381] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.949: corrupted in-inode xattr: invalid ea_ino [ 64.109528][ T6381] EXT4-fs error (device loop9): ext4_orphan_get:1393: comm syz.9.949: couldn't read orphan inode 15 (err -117) [ 64.180785][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 64.277247][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.284420][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.294065][ T6325] bridge_slave_0: entered allmulticast mode [ 64.301724][ T6325] bridge_slave_0: entered promiscuous mode [ 64.309324][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.316495][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.326197][ T6325] bridge_slave_1: entered allmulticast mode [ 64.333096][ T6325] bridge_slave_1: entered promiscuous mode [ 64.350874][ T6389] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 64.376138][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.387079][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.437992][ T6325] team0: Port device team_slave_0 added [ 64.444929][ T6325] team0: Port device team_slave_1 added [ 64.464601][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.471655][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.497634][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.512659][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.519707][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.545683][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.585711][ T6325] hsr_slave_0: entered promiscuous mode [ 64.592093][ T6325] hsr_slave_1: entered promiscuous mode [ 64.919900][ T6325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.946553][ T6325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.966428][ T6325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.983932][ T6325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.005475][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.012695][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.020102][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.027231][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.062432][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.073399][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.093442][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.149407][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.174327][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.181420][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.208022][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.215212][ T6286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.257355][ T6325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.267835][ T6325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.301291][ T6401] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.411327][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.547916][ T6325] veth0_vlan: entered promiscuous mode [ 65.577270][ T6325] veth1_vlan: entered promiscuous mode [ 65.604621][ T6325] veth0_macvtap: entered promiscuous mode [ 65.619521][ T6325] veth1_macvtap: entered promiscuous mode [ 65.640530][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.651239][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.661171][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.671701][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.682971][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.693808][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.703666][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.714162][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.724035][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.734618][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.744583][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.755150][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.815390][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.831254][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.841843][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.851828][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.862297][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.872197][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.883221][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.893080][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.903588][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.913539][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.924119][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.934071][ T6325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.944574][ T6325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.958383][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.967508][ T6325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.976327][ T6325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.985245][ T6325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.993949][ T6325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.011081][ T6419] netlink: 132 bytes leftover after parsing attributes in process `syz.8.958'. [ 66.045730][ T6419] netlink: 'syz.8.958': attribute type 10 has an invalid length. [ 66.069982][ T6419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.155406][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.8.961'. [ 66.331031][ T6445] syz.3.969[6445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.331150][ T6445] syz.3.969[6445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.373521][ T6445] syz.3.969[6445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.387346][ T6451] loop8: detected capacity change from 0 to 128 [ 66.446020][ T6454] loop7: detected capacity change from 0 to 512 [ 66.465134][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'. [ 66.478647][ T6454] EXT4-fs: Ignoring removed bh option [ 66.501829][ T6459] syz.8.985[6459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.501933][ T6459] syz.8.985[6459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.513644][ T6454] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 66.513920][ T6459] syz.8.985[6459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.545950][ T6454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 66.654516][ T6454] EXT4-fs (loop7): 1 truncate cleaned up [ 66.736509][ T6454] loop7: detected capacity change from 512 to 64 [ 66.744160][ T6476] syz.7.973: attempt to access beyond end of device [ 66.744160][ T6476] loop7: rw=3, sector=76, nr_sectors = 4 limit=64 [ 66.749647][ T6481] netlink: 20 bytes leftover after parsing attributes in process `syz.4.980'. [ 66.758530][ T6476] syz.7.973: attempt to access beyond end of device [ 66.758530][ T6476] loop7: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 66.807144][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.820796][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.834408][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.848024][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.863408][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.865193][ T6486] ALSA: seq fatal error: cannot create timer (-22) [ 66.877155][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.897040][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.910754][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.924575][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.938192][ T5076] EXT4-fs warning (device loop7): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 66.978118][ T6490] loop8: detected capacity change from 0 to 256 [ 66.986243][ T6491] loop9: detected capacity change from 0 to 128 [ 67.062847][ T6493] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.098180][ T6490] FAT-fs (loop8): Directory bread(block 64) failed [ 67.106844][ T6490] FAT-fs (loop8): Directory bread(block 65) failed [ 67.113527][ T6490] FAT-fs (loop8): Directory bread(block 66) failed [ 67.143490][ T6490] FAT-fs (loop8): Directory bread(block 67) failed [ 67.154535][ T6490] FAT-fs (loop8): Directory bread(block 68) failed [ 67.161104][ T6490] FAT-fs (loop8): Directory bread(block 69) failed [ 67.169773][ T6490] FAT-fs (loop8): Directory bread(block 70) failed [ 67.177030][ T6490] FAT-fs (loop8): Directory bread(block 71) failed [ 67.183683][ T6490] FAT-fs (loop8): Directory bread(block 72) failed [ 67.194299][ T6490] FAT-fs (loop8): Directory bread(block 73) failed [ 67.205932][ T6503] loop3: detected capacity change from 0 to 128 [ 67.224355][ T6503] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 67.255467][ T6286] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.336374][ T6232] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 67.356494][ T6286] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.405677][ T6512] loop3: detected capacity change from 0 to 512 [ 67.412381][ T6512] EXT4-fs: Ignoring removed bh option [ 67.429772][ T6512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.442117][ T6512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 67.451439][ T6286] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.465227][ T6512] EXT4-fs (loop3): 1 truncate cleaned up [ 67.504309][ T6512] loop3: detected capacity change from 512 to 64 [ 67.511908][ T6512] syz.3.997: attempt to access beyond end of device [ 67.511908][ T6512] loop3: rw=3, sector=76, nr_sectors = 4 limit=64 [ 67.531101][ T6286] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.571479][ T6512] syz.3.997: attempt to access beyond end of device [ 67.571479][ T6512] loop3: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 67.608853][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.9.999'. [ 67.612296][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.631969][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.648952][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.711228][ T6286] bridge_slave_1: left allmulticast mode [ 67.717031][ T6286] bridge_slave_1: left promiscuous mode [ 67.722785][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.732606][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.751396][ T6286] bridge_slave_0: left allmulticast mode [ 67.757232][ T6286] bridge_slave_0: left promiscuous mode [ 67.762940][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.786310][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.803026][ T6537] syz.9.1005[6537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.845224][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.887003][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 67.887020][ T29] audit: type=1400 audit(1730491822.650:1778): avc: denied { override_creds } for pid=6540 comm="syz.9.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.893509][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.944445][ T6286] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 67.949383][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.970913][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 67.985732][ T6325] EXT4-fs warning (device loop3): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.013462][ T6286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.026676][ T6546] loop8: detected capacity change from 0 to 128 [ 68.037632][ T6286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.047275][ T6546] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 68.058553][ T6286] bond0 (unregistering): Released all slaves [ 68.075023][ T6548] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 68.086004][ T6243] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 68.125591][ T6553] loop8: detected capacity change from 0 to 128 [ 68.157174][ T6553] EXT4-fs mount: 23 callbacks suppressed [ 68.157191][ T6553] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.176720][ T6286] hsr_slave_0: left promiscuous mode [ 68.178255][ T6553] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.192506][ T6286] hsr_slave_1: left promiscuous mode [ 68.199001][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.206467][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.215605][ T5803] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.225225][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.232708][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.251995][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 68.259723][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 68.267896][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 68.268810][ T6286] veth1_macvtap: left promiscuous mode [ 68.276639][ T9] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 68.281081][ T6286] veth0_macvtap: left promiscuous mode [ 68.296525][ T6286] veth1_vlan: left promiscuous mode [ 68.301799][ T6286] veth0_vlan: left promiscuous mode [ 68.315042][ T6560] loop4: detected capacity change from 0 to 512 [ 68.323019][ T6560] EXT4-fs: Ignoring removed bh option [ 68.330811][ T6560] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.347978][ T6560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 68.358508][ T6560] EXT4-fs (loop4): 1 truncate cleaned up [ 68.378163][ T6560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.458420][ T6560] loop4: detected capacity change from 512 to 64 [ 68.466941][ T6286] team0 (unregistering): Port device team_slave_1 removed [ 68.474278][ T6568] syz.4.1013: attempt to access beyond end of device [ 68.474278][ T6568] loop4: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 68.488848][ T6286] team0 (unregistering): Port device team_slave_0 removed [ 68.499804][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.513733][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.529302][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.542925][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.557699][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.559441][ T6563] netlink: 'syz.8.1015': attribute type 10 has an invalid length. [ 68.575811][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.592640][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.606485][ T6563] geneve1: entered promiscuous mode [ 68.606512][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.619033][ T6563] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 68.625276][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.648375][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 68.751840][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 68.796699][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.803870][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.811504][ T6517] bridge_slave_0: entered allmulticast mode [ 68.818193][ T6517] bridge_slave_0: entered promiscuous mode [ 68.825826][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.832913][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.837891][ T6581] loop9: detected capacity change from 0 to 256 [ 68.840615][ T6517] bridge_slave_1: entered allmulticast mode [ 68.852880][ T6517] bridge_slave_1: entered promiscuous mode [ 68.879674][ T6581] FAT-fs (loop9): Directory bread(block 64) failed [ 68.887961][ T6581] FAT-fs (loop9): Directory bread(block 65) failed [ 68.897710][ T6581] FAT-fs (loop9): Directory bread(block 66) failed [ 68.909279][ T6581] FAT-fs (loop9): Directory bread(block 67) failed [ 68.920614][ T29] audit: type=1400 audit(1730491823.680:1779): avc: denied { create } for pid=6582 comm="syz.8.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.922850][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.940298][ T6581] FAT-fs (loop9): Directory bread(block 68) failed [ 68.956046][ T6581] FAT-fs (loop9): Directory bread(block 69) failed [ 68.962756][ T6581] FAT-fs (loop9): Directory bread(block 70) failed [ 68.974251][ T29] audit: type=1400 audit(1730491823.730:1780): avc: denied { setopt } for pid=6582 comm="syz.8.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.979551][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.993722][ T29] audit: type=1400 audit(1730491823.730:1781): avc: denied { bind } for pid=6582 comm="syz.8.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.022362][ T29] audit: type=1400 audit(1730491823.730:1782): avc: denied { write } for pid=6582 comm="syz.8.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.025641][ T6581] FAT-fs (loop9): Directory bread(block 71) failed [ 69.060009][ T6581] FAT-fs (loop9): Directory bread(block 72) failed [ 69.067964][ T6581] FAT-fs (loop9): Directory bread(block 73) failed [ 69.088571][ T6517] team0: Port device team_slave_0 added [ 69.096846][ T6517] team0: Port device team_slave_1 added [ 69.114210][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.121272][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.147304][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.189437][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.196467][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.222438][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.250610][ T6517] hsr_slave_0: entered promiscuous mode [ 69.256798][ T6517] hsr_slave_1: entered promiscuous mode [ 69.268692][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.276443][ T6517] Cannot create hsr debugfs directory [ 69.545004][ T6517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.553525][ T6517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.564568][ T6517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.584462][ T6517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.605632][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.612728][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.620031][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.627125][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.637003][ T6575] syz.9.1019 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 69.648091][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.9.1019 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 69.658895][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.668950][ T6575] Call Trace: [ 69.672239][ T6575] [ 69.675165][ T6575] dump_stack_lvl+0xf2/0x150 [ 69.679879][ T6575] dump_stack+0x15/0x20 [ 69.684039][ T6575] dump_header+0x83/0x2d0 [ 69.688378][ T6575] oom_kill_process+0x341/0x4c0 [ 69.693266][ T6575] out_of_memory+0x9af/0xbe0 [ 69.697912][ T6575] ? css_next_descendant_pre+0x11c/0x140 [ 69.703568][ T6575] mem_cgroup_out_of_memory+0x13e/0x190 [ 69.709176][ T6575] try_charge_memcg+0x51b/0x810 [ 69.714040][ T6575] charge_memcg+0x50/0xc0 [ 69.718456][ T6575] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 69.724477][ T6575] __read_swap_cache_async+0x236/0x480 [ 69.730014][ T6575] swap_cluster_readahead+0x276/0x3f0 [ 69.735473][ T6575] swapin_readahead+0xe4/0x6f0 [ 69.740265][ T6575] ? __filemap_get_folio+0x420/0x5b0 [ 69.745577][ T6575] ? swap_cache_get_folio+0x77/0x210 [ 69.751026][ T6575] do_swap_page+0x31e/0x2550 [ 69.755693][ T6575] ? cgroup_rstat_updated+0x99/0x550 [ 69.760991][ T6575] ? __rcu_read_lock+0x36/0x50 [ 69.765764][ T6575] ? __pfx_default_wake_function+0x10/0x10 [ 69.771592][ T6575] handle_mm_fault+0x8c5/0x2a80 [ 69.776487][ T6575] exc_page_fault+0x3b9/0x650 [ 69.781211][ T6575] asm_exc_page_fault+0x26/0x30 [ 69.786142][ T6575] RIP: 0033:0x7f3b56756040 [ 69.790571][ T6575] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 69.810273][ T6575] RSP: 002b:00007fffdb047e08 EFLAGS: 00010246 [ 69.816347][ T6575] RAX: 0000000000000000 RBX: 00007f3b568e5f80 RCX: 00007f3b56760805 [ 69.824346][ T6575] RDX: 00007fffdb047e50 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.832393][ T6575] RBP: 00007f3b568e7a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 69.840390][ T6575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000010fcd [ 69.848360][ T6575] R13: 00007fffdb047f80 R14: 0000000000000fd2 R15: ffffffffffffffff [ 69.856363][ T6575] [ 69.859470][ T6575] memory: usage 307200kB, limit 307200kB, failcnt 347 [ 69.862298][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.866632][ T6575] memory+swap: usage 307516kB, limit 9007199254740988kB, failcnt 0 [ 69.879797][ T6325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.881371][ T6575] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 69.897537][ T6575] Memory cgroup stats for /syz9: [ 69.897699][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.898039][ T6575] cache 32768 [ 69.913097][ T6575] rss 0 [ 69.915923][ T6575] shmem 0 [ 69.918873][ T6575] mapped_file 0 [ 69.922360][ T6575] dirty 4096 [ 69.925655][ T6575] writeback 0 [ 69.928948][ T6575] workingset_refault_anon 56 [ 69.933546][ T6575] workingset_refault_file 2 [ 69.938104][ T6575] swap 323584 [ 69.941469][ T6575] swapcached 8192 [ 69.945152][ T6575] pgpgin 7218 [ 69.948623][ T6575] pgpgout 7208 [ 69.952238][ T6575] pgfault 10961 [ 69.955773][ T6575] pgmajfault 21 [ 69.959244][ T6575] inactive_anon 8192 [ 69.963145][ T6575] active_anon 0 [ 69.966666][ T6575] inactive_file 4096 [ 69.970563][ T6575] active_file 28672 [ 69.974412][ T6575] unevictable 0 [ 69.977887][ T6575] hierarchical_memory_limit 314572800 [ 69.983449][ T6575] hierarchical_memsw_limit 9223372036854771712 [ 69.989688][ T6575] total_cache 32768 [ 69.993511][ T6575] total_rss 0 [ 69.996826][ T6575] total_shmem 0 [ 70.000334][ T6575] total_mapped_file 0 [ 70.004384][ T6575] total_dirty 4096 [ 70.008108][ T6575] total_writeback 0 [ 70.011931][ T6575] total_workingset_refault_anon 56 [ 70.017073][ T6575] total_workingset_refault_file 2 [ 70.022108][ T6575] total_swap 323584 [ 70.026026][ T6575] total_swapcached 8192 [ 70.030205][ T6575] total_pgpgin 7218 [ 70.034244][ T6575] total_pgpgout 7208 [ 70.038177][ T6575] total_pgfault 10961 [ 70.042147][ T6575] total_pgmajfault 21 [ 70.046163][ T6575] total_inactive_anon 8192 [ 70.050644][ T6575] total_active_anon 0 [ 70.054658][ T6575] total_inactive_file 4096 [ 70.059078][ T6575] total_active_file 28672 [ 70.063396][ T6575] total_unevictable 0 [ 70.067423][ T6575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1019,pid=6575,uid=0 [ 70.082088][ T6575] Memory cgroup out of memory: Killed process 6575 (syz.9.1019) total-vm:89168kB, anon-rss:740kB, file-rss:15912kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 70.134284][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.158697][ T6297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.197186][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.232343][ T6297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.262877][ T6599] loop8: detected capacity change from 0 to 2048 [ 70.264161][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.276385][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.300008][ T6517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.310459][ T6517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.325562][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.332704][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.405958][ T6599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.441503][ T6599] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.445402][ T6297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.456615][ T6599] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 70.479182][ T6599] EXT4-fs (loop8): This should not happen!! Data will be lost [ 70.479182][ T6599] [ 70.489255][ T6599] EXT4-fs (loop8): Total free blocks count 0 [ 70.495418][ T6599] EXT4-fs (loop8): Free/Dirty block details [ 70.501400][ T6599] EXT4-fs (loop8): free_blocks=2415919104 [ 70.507448][ T6599] EXT4-fs (loop8): dirty_blocks=16 [ 70.512559][ T6599] EXT4-fs (loop8): Block reservation details [ 70.518625][ T6599] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 70.525951][ T6607] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 70.591321][ T6611] loop9: detected capacity change from 0 to 512 [ 70.595920][ T6297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.598325][ T6611] EXT4-fs: Ignoring removed bh option [ 70.614848][ T6611] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 70.617316][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 70.633020][ T6611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c019, mo2=0002] [ 70.642407][ T6611] EXT4-fs (loop9): 1 truncate cleaned up [ 70.648515][ T6611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.681110][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.708833][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.716019][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.723388][ T6589] bridge_slave_0: entered allmulticast mode [ 70.729545][ T6611] loop9: detected capacity change from 512 to 64 [ 70.730064][ T6621] syz.9.1026: attempt to access beyond end of device [ 70.730064][ T6621] loop9: rw=3, sector=76, nr_sectors = 4 limit=64 [ 70.736721][ T6589] bridge_slave_0: entered promiscuous mode [ 70.751107][ T6621] syz.9.1026: attempt to access beyond end of device [ 70.751107][ T6621] loop9: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 70.786840][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.793939][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.802144][ T6589] bridge_slave_1: entered allmulticast mode [ 70.807302][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.812682][ T6589] bridge_slave_1: entered promiscuous mode [ 70.829663][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.832267][ T6297] bridge_slave_1: left allmulticast mode [ 70.848920][ T6297] bridge_slave_1: left promiscuous mode [ 70.853873][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.854578][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.868287][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.888800][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.889006][ T6297] bridge_slave_0: left allmulticast mode [ 70.902521][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.907836][ T6297] bridge_slave_0: left promiscuous mode [ 70.923740][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.926805][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.942780][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.961322][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 70.975082][ T5873] EXT4-fs warning (device loop9): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 71.086920][ T6297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.097761][ T6297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.108207][ T6297] bond0 (unregistering): Released all slaves [ 71.167009][ T6297] hsr_slave_0: left promiscuous mode [ 71.178992][ T6297] hsr_slave_1: left promiscuous mode [ 71.185005][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.192397][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.200631][ T6297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.208150][ T6297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.217644][ T6297] veth1_macvtap: left promiscuous mode [ 71.223210][ T6297] veth0_macvtap: left promiscuous mode [ 71.228801][ T6297] veth1_vlan: left promiscuous mode [ 71.234140][ T6297] veth0_vlan: left promiscuous mode [ 71.318651][ T6297] team0 (unregistering): Port device team_slave_1 removed [ 71.329017][ T6297] team0 (unregistering): Port device team_slave_0 removed [ 71.355640][ T5873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.372034][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.386880][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.432108][ T6589] team0: Port device team_slave_0 added [ 71.444873][ T29] audit: type=1400 audit(1730491826.200:1783): avc: denied { write } for pid=6631 comm="syz.8.1038" path="socket:[14772]" dev="sockfs" ino=14772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.468989][ T6589] team0: Port device team_slave_1 added [ 71.505730][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.512718][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.538748][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.551020][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.558068][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.584187][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.644667][ T6589] hsr_slave_0: entered promiscuous mode [ 71.660057][ T6589] hsr_slave_1: entered promiscuous mode [ 71.677979][ T6517] veth0_vlan: entered promiscuous mode [ 71.684818][ T29] audit: type=1400 audit(1730491826.450:1784): avc: denied { write } for pid=6649 comm="+}[@" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.689385][ T6650] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.741942][ T6517] veth1_vlan: entered promiscuous mode [ 71.768275][ T6517] veth0_macvtap: entered promiscuous mode [ 71.781554][ T6517] veth1_macvtap: entered promiscuous mode [ 71.797395][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.807986][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.817861][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.828565][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.838465][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.848993][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.858881][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.869324][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.879163][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.889621][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.900844][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.923932][ T29] audit: type=1400 audit(1730491826.680:1785): avc: denied { setopt } for pid=6652 comm="syz.8.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.925301][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.954009][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.963938][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.974401][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.977159][ T29] audit: type=1400 audit(1730491826.720:1786): avc: denied { bind } for pid=6652 comm="syz.8.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.984256][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.003545][ T29] audit: type=1400 audit(1730491826.720:1787): avc: denied { name_bind } for pid=6652 comm="syz.8.1034" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 72.013959][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.045592][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.056052][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.065899][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.076446][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.089031][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.117503][ T6517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.126399][ T6517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.135175][ T6517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.143878][ T6517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.164459][ T6275] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.211692][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 72.237055][ T6275] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.307199][ T6275] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.323858][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.331105][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.340938][ T6635] bridge_slave_0: entered allmulticast mode [ 72.345990][ T6666] loop5: detected capacity change from 0 to 256 [ 72.347643][ T6635] bridge_slave_0: entered promiscuous mode [ 72.377949][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.385089][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.392761][ T6635] bridge_slave_1: entered allmulticast mode [ 72.401637][ T6635] bridge_slave_1: entered promiscuous mode [ 72.412504][ T6275] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.439318][ T6666] FAT-fs (loop5): Directory bread(block 64) failed [ 72.447255][ T6666] FAT-fs (loop5): Directory bread(block 65) failed [ 72.453900][ T6666] FAT-fs (loop5): Directory bread(block 66) failed [ 72.460909][ T6666] FAT-fs (loop5): Directory bread(block 67) failed [ 72.470856][ T6666] FAT-fs (loop5): Directory bread(block 68) failed [ 72.478514][ T6666] FAT-fs (loop5): Directory bread(block 69) failed [ 72.489416][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.511045][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.514519][ T6666] FAT-fs (loop5): Directory bread(block 70) failed [ 72.528214][ T6666] FAT-fs (loop5): Directory bread(block 71) failed [ 72.534918][ T6666] FAT-fs (loop5): Directory bread(block 72) failed [ 72.559687][ T6275] bridge_slave_1: left allmulticast mode [ 72.565437][ T6275] bridge_slave_1: left promiscuous mode [ 72.571150][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.584434][ T6666] FAT-fs (loop5): Directory bread(block 73) failed [ 72.597432][ T6275] bridge_slave_0: left allmulticast mode [ 72.603139][ T6275] bridge_slave_0: left promiscuous mode [ 72.608879][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.728516][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.741415][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.752286][ T6275] bond0 (unregistering): Released all slaves [ 72.797188][ T6275] IPVS: stopping master sync thread 6548 ... [ 72.804056][ T6635] team0: Port device team_slave_0 added [ 72.812628][ T6589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.825771][ T6275] hsr_slave_0: left promiscuous mode [ 72.831713][ T6275] hsr_slave_1: left promiscuous mode [ 72.838411][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.846031][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.855648][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.863179][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.876408][ T6275] veth1_macvtap: left promiscuous mode [ 72.882095][ T6275] veth0_macvtap: left promiscuous mode [ 72.887710][ T6275] veth1_vlan: left promiscuous mode [ 72.892976][ T6275] veth0_vlan: left promiscuous mode [ 72.995036][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 73.006867][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 73.052087][ T6635] team0: Port device team_slave_1 added [ 73.058493][ T6589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.080748][ T6589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.096606][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.103598][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.129577][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.142652][ T6589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.159232][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.166293][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.181111][ T6664] syz.5.1035 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 73.192249][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.217064][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.5.1035 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 73.227864][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.237941][ T6664] Call Trace: [ 73.241277][ T6664] [ 73.244344][ T6664] dump_stack_lvl+0xf2/0x150 [ 73.248941][ T6664] dump_stack+0x15/0x20 [ 73.253098][ T6664] dump_header+0x83/0x2d0 [ 73.257442][ T6664] oom_kill_process+0x341/0x4c0 [ 73.262307][ T6664] out_of_memory+0x9af/0xbe0 [ 73.266917][ T6664] ? css_next_descendant_pre+0x11c/0x140 [ 73.272571][ T6664] mem_cgroup_out_of_memory+0x13e/0x190 [ 73.278131][ T6664] try_charge_memcg+0x51b/0x810 [ 73.283016][ T6664] obj_cgroup_charge_pages+0xbd/0x1a0 [ 73.288408][ T6664] __memcg_kmem_charge_page+0x9d/0x170 [ 73.293881][ T6664] __alloc_pages_noprof+0x1bc/0x340 [ 73.299093][ T6664] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 73.304547][ T6664] alloc_pages_noprof+0xe1/0x100 [ 73.309587][ T6664] __vmalloc_node_range_noprof+0x72e/0xec0 [ 73.315570][ T6664] __kvmalloc_node_noprof+0x121/0x170 [ 73.321056][ T6664] ? ip_set_alloc+0x1f/0x30 [ 73.325565][ T6664] ip_set_alloc+0x1f/0x30 [ 73.329908][ T6664] hash_netiface_create+0x273/0x730 [ 73.335134][ T6664] ? __nla_parse+0x40/0x60 [ 73.339682][ T6664] ? __pfx_hash_netiface_create+0x10/0x10 [ 73.345528][ T6664] ip_set_create+0x359/0x8a0 [ 73.350126][ T6664] ? __pfx_memchr+0x1/0x10 [ 73.354676][ T6664] ? __nla_parse+0x40/0x60 [ 73.359112][ T6664] nfnetlink_rcv_msg+0x4a9/0x570 [ 73.364092][ T6664] netlink_rcv_skb+0x12c/0x230 [ 73.368914][ T6664] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 73.374383][ T6664] nfnetlink_rcv+0x16c/0x15c0 [ 73.379070][ T6664] ? kmem_cache_free+0xdc/0x2d0 [ 73.384091][ T6664] ? nlmon_xmit+0x51/0x60 [ 73.388452][ T6664] ? __kfree_skb+0x102/0x150 [ 73.393168][ T6664] ? consume_skb+0x49/0x160 [ 73.397738][ T6664] ? nlmon_xmit+0x51/0x60 [ 73.402204][ T6664] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 73.407551][ T6664] ? __dev_queue_xmit+0xb4c/0x2040 [ 73.412675][ T6664] ? ref_tracker_free+0x3a5/0x410 [ 73.417759][ T6664] ? __dev_queue_xmit+0x161/0x2040 [ 73.422910][ T6664] ? skb_clone+0x154/0x1f0 [ 73.427339][ T6664] ? __netlink_deliver_tap+0x495/0x4c0 [ 73.432847][ T6664] netlink_unicast+0x599/0x670 [ 73.437627][ T6664] netlink_sendmsg+0x5cc/0x6e0 [ 73.442417][ T6664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.447703][ T6664] __sock_sendmsg+0x140/0x180 [ 73.452384][ T6664] ____sys_sendmsg+0x312/0x410 [ 73.457232][ T6664] __sys_sendmsg+0x1d9/0x270 [ 73.461833][ T6664] ? futex_wait+0x18e/0x1c0 [ 73.466349][ T6664] __x64_sys_sendmsg+0x46/0x50 [ 73.471116][ T6664] x64_sys_call+0x2689/0x2d60 [ 73.475849][ T6664] do_syscall_64+0xc9/0x1c0 [ 73.480374][ T6664] ? clear_bhb_loop+0x55/0xb0 [ 73.485048][ T6664] ? clear_bhb_loop+0x55/0xb0 [ 73.489730][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.495707][ T6664] RIP: 0033:0x7f46147fe719 [ 73.500155][ T6664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.519790][ T6664] RSP: 002b:00007f4613477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.528357][ T6664] RAX: ffffffffffffffda RBX: 00007f46149b5f80 RCX: 00007f46147fe719 [ 73.536334][ T6664] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 73.544400][ T6664] RBP: 00007f461487132e R08: 0000000000000000 R09: 0000000000000000 [ 73.552371][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.560340][ T6664] R13: 0000000000000000 R14: 00007f46149b5f80 R15: 00007ffe4bbbd6a8 [ 73.568402][ T6664] [ 73.571532][ T6664] memory: usage 307200kB, limit 307200kB, failcnt 281 [ 73.579030][ T6664] memory+swap: usage 307508kB, limit 9007199254740988kB, failcnt 0 [ 73.587344][ T6664] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 73.594730][ T6664] Memory cgroup stats for /syz5: [ 73.596629][ T6664] cache 90112 [ 73.604948][ T6664] rss 4096 [ 73.607999][ T6664] shmem 0 [ 73.610945][ T6664] mapped_file 32768 [ 73.614790][ T6664] dirty 36864 [ 73.618095][ T6664] writeback 0 [ 73.621476][ T6664] workingset_refault_anon 35 [ 73.626177][ T6664] workingset_refault_file 1 [ 73.630689][ T6664] swap 315392 [ 73.634085][ T6664] swapcached 4096 [ 73.637756][ T6664] pgpgin 17230 [ 73.641202][ T6664] pgpgout 17207 [ 73.642047][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.644672][ T6664] pgfault 17480 [ 73.644683][ T6664] pgmajfault 30 [ 73.644693][ T6664] inactive_anon 4096 [ 73.644701][ T6664] active_anon 0 [ 73.644708][ T6664] inactive_file 36864 [ 73.660183][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.662173][ T6664] active_file 53248 [ 73.662182][ T6664] unevictable 0 [ 73.662190][ T6664] hierarchical_memory_limit 314572800 [ 73.662201][ T6664] hierarchical_memsw_limit 9223372036854771712 [ 73.662214][ T6664] total_cache 90112 [ 73.683444][ T6589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.683686][ T6664] total_rss 4096 [ 73.683697][ T6664] total_shmem 0 [ 73.689098][ T6589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.726887][ T6664] total_mapped_file 32768 [ 73.731207][ T6664] total_dirty 36864 [ 73.735041][ T6664] total_writeback 0 [ 73.738852][ T6664] total_workingset_refault_anon 35 [ 73.743956][ T6664] total_workingset_refault_file 1 [ 73.749017][ T6664] total_swap 315392 [ 73.752861][ T6664] total_swapcached 4096 [ 73.757063][ T6664] total_pgpgin 17230 [ 73.761017][ T6664] total_pgpgout 17207 [ 73.765058][ T6664] total_pgfault 17480 [ 73.769129][ T6664] total_pgmajfault 30 [ 73.773130][ T6664] total_inactive_anon 4096 [ 73.777584][ T6664] total_active_anon 0 [ 73.781572][ T6664] total_inactive_file 36864 [ 73.786115][ T6664] total_active_file 53248 [ 73.790603][ T6664] total_unevictable 0 [ 73.794696][ T6664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1035,pid=6663,uid=0 [ 73.809548][ T6664] Memory cgroup out of memory: Killed process 6663 (syz.5.1035) total-vm:89096kB, anon-rss:608kB, file-rss:15908kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 73.830358][ T6635] hsr_slave_0: entered promiscuous mode [ 73.839219][ T6635] hsr_slave_1: entered promiscuous mode [ 73.845352][ T6635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.852918][ T6635] Cannot create hsr debugfs directory [ 73.864121][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.871295][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.935321][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.942502][ T6286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.040473][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.068313][ T6635] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.127854][ T6635] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.172206][ T6589] veth0_vlan: entered promiscuous mode [ 74.181521][ T6589] veth1_vlan: entered promiscuous mode [ 74.200308][ T6635] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.223897][ T6589] veth0_macvtap: entered promiscuous mode [ 74.232157][ T6589] veth1_macvtap: entered promiscuous mode [ 74.233531][ T6679] loop5: detected capacity change from 0 to 2048 [ 74.247507][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 74.247523][ T29] audit: type=1400 audit(1730491829.010:1796): avc: denied { execute_no_trans } for pid=6680 comm="syz.8.1037" path=2F6D656D66643A5B0BDB7E89BAC2378B0A58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.253666][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.295414][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.305291][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.315759][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.325712][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.336177][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.346064][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.356537][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.356562][ T6684] loop8: detected capacity change from 0 to 512 [ 74.366361][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.366383][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.374881][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.397836][ T6679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.402517][ T6684] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 74.430958][ T6635] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.446294][ T6684] EXT4-fs (loop8): 1 truncate cleaned up [ 74.451150][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.452412][ T6684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.462576][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.476726][ T6679] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 74.484492][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.484515][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.492742][ T6679] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.503236][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.503257][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.535968][ T6679] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 74.542261][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.554670][ T6679] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.554670][ T6679] [ 74.565085][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.574728][ T6679] EXT4-fs (loop5): Total free blocks count 0 [ 74.584544][ T6589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.590530][ T6679] EXT4-fs (loop5): Free/Dirty block details [ 74.600925][ T6589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.602593][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.606858][ T6679] EXT4-fs (loop5): free_blocks=2415919104 [ 74.618159][ T6589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.623888][ T6679] EXT4-fs (loop5): dirty_blocks=16 [ 74.629640][ T6589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.638364][ T6679] EXT4-fs (loop5): Block reservation details [ 74.643471][ T6589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.652173][ T6679] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 74.658140][ T6589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.692809][ T29] audit: type=1400 audit(1730491829.450:1797): avc: denied { setattr } for pid=6683 comm="syz.8.1039" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.705223][ T6688] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 74.753854][ T6635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.762765][ T5803] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.762900][ T6635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.803897][ T29] audit: type=1326 audit(1730491829.560:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.827394][ T29] audit: type=1326 audit(1730491829.560:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.858052][ T6635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.866657][ T29] audit: type=1326 audit(1730491829.560:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.890282][ T29] audit: type=1326 audit(1730491829.560:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.913727][ T29] audit: type=1326 audit(1730491829.560:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.937243][ T29] audit: type=1326 audit(1730491829.590:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.960854][ T29] audit: type=1326 audit(1730491829.590:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 74.984513][ T29] audit: type=1326 audit(1730491829.590:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6690 comm="syz.8.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30267ee719 code=0x7ffc0000 [ 75.011814][ T6697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6697 comm=syz.8.1041 [ 75.014061][ T6635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.070997][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.084984][ T6635] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.099117][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.106281][ T6297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.119382][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.126510][ T6297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.149616][ T6699] loop5: detected capacity change from 0 to 512 [ 75.150570][ T6635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.166434][ T6635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.232027][ T6699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.244897][ T6699] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.263253][ T6635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.301555][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.343181][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'. [ 75.355251][ T6724] bridge_slave_1: left allmulticast mode [ 75.360932][ T6724] bridge_slave_1: left promiscuous mode [ 75.366762][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.381602][ T6724] bridge_slave_0: left allmulticast mode [ 75.387381][ T6724] bridge_slave_0: left promiscuous mode [ 75.393058][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.458767][ T6635] veth0_vlan: entered promiscuous mode [ 75.475885][ T6635] veth1_vlan: entered promiscuous mode [ 75.486413][ T6731] loop0: detected capacity change from 0 to 2048 [ 75.492236][ T6635] veth0_macvtap: entered promiscuous mode [ 75.505197][ T6635] veth1_macvtap: entered promiscuous mode [ 75.521521][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.527220][ T6731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.532131][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.554283][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.564791][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.574690][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.585264][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.595265][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.605963][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.615960][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.626746][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.636692][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.647331][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.658957][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.662170][ T6589] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.671007][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.685812][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.695818][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.706449][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.716405][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.726877][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.736740][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.747218][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.757244][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.767851][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.777731][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.788344][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.799866][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.812425][ T6635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.821258][ T6635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.830098][ T6635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.834798][ T6742] loop8: detected capacity change from 0 to 8192 [ 75.838888][ T6635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.871715][ T6742] syz.8.1055: attempt to access beyond end of device [ 75.871715][ T6742] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 75.885416][ T6742] Buffer I/O error on dev loop8, logical block 57847, async page read [ 75.893753][ T6742] syz.8.1055: attempt to access beyond end of device [ 75.893753][ T6742] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 75.907401][ T6742] Buffer I/O error on dev loop8, logical block 57847, async page read [ 75.916194][ T6742] syz.8.1055: attempt to access beyond end of device [ 75.916194][ T6742] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 75.929639][ T6742] Buffer I/O error on dev loop8, logical block 57847, async page read [ 75.939078][ T6742] syz.8.1055: attempt to access beyond end of device [ 75.939078][ T6742] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 75.952769][ T6742] Buffer I/O error on dev loop8, logical block 57847, async page read [ 76.021224][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1058'. [ 76.034608][ T6751] netlink: 'syz.5.1060': attribute type 3 has an invalid length. [ 76.149335][ T6766] loop5: detected capacity change from 0 to 2048 [ 76.185440][ T6766] loop5: p1 < > p2 p3 < p5 > p4 [ 76.190439][ T6766] loop5: partition table partially beyond EOD, truncated [ 76.199887][ T6776] netem: incorrect ge model size [ 76.204935][ T6776] netem: change failed [ 76.208972][ T6766] loop5: p1 start 4278190080 is beyond EOD, truncated [ 76.215842][ T6766] loop5: p2 start 16908800 is beyond EOD, truncated [ 76.228449][ T6766] loop5: p4 start 11326 is beyond EOD, truncated [ 76.234945][ T6766] loop5: p5 start 16908800 is beyond EOD, truncated [ 76.281571][ T6780] loop1: detected capacity change from 0 to 2048 [ 76.311538][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 76.315460][ T6780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.354088][ T6789] loop0: detected capacity change from 0 to 512 [ 76.358011][ T6780] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.380307][ T6795] bpf_get_probe_write_proto: 2 callbacks suppressed [ 76.380322][ T6795] syz.8.1077[6795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.383712][ T6789] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.1075: invalid block [ 76.387151][ T6795] syz.8.1077[6795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.398606][ T6780] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28 [ 76.410210][ T6795] syz.8.1077[6795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.421345][ T6780] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.421345][ T6780] [ 76.421365][ T6780] EXT4-fs (loop1): Total free blocks count 0 [ 76.437102][ T6789] EXT4-fs (loop0): Remounting filesystem read-only [ 76.445062][ T6780] EXT4-fs (loop1): Free/Dirty block details [ 76.455058][ T6789] EXT4-fs (loop0): 1 truncate cleaned up [ 76.460651][ T6780] EXT4-fs (loop1): free_blocks=2415919104 [ 76.467799][ T6789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.473065][ T6780] EXT4-fs (loop1): dirty_blocks=32 [ 76.501998][ T6780] EXT4-fs (loop1): Block reservation details [ 76.504585][ T6795] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1077'. [ 76.508024][ T6780] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 76.518015][ T6795] netlink: 'syz.8.1077': attribute type 10 has an invalid length. [ 76.544978][ T6789] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 76.551924][ T6789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.565563][ T6635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.644228][ T6805] netlink: 'syz.1.1081': attribute type 1 has an invalid length. [ 76.652020][ T6805] netlink: 'syz.1.1081': attribute type 2 has an invalid length. [ 76.721548][ T6811] SELinux: security_context_str_to_sid () failed with errno=-22 [ 76.821652][ T6820] loop1: detected capacity change from 0 to 512 [ 76.849264][ T6820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.867023][ T6820] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.888159][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1091'. [ 76.899484][ T6635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.933897][ T6832] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 77.042571][ T6840] loop1: detected capacity change from 0 to 2048 [ 77.096794][ T6840] Alternate GPT is invalid, using primary GPT. [ 77.103129][ T6840] loop1: p1 p2 p3 [ 77.150337][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 77.153336][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 77.163955][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 77.317114][ T6870] bond1: entered promiscuous mode [ 77.322244][ T6870] bond1: entered allmulticast mode [ 77.328081][ T6870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.340144][ T6870] bond1 (unregistering): Released all slaves [ 77.356588][ T6873] dummy0: entered promiscuous mode [ 77.362152][ T6873] macsec1: entered allmulticast mode [ 77.367565][ T6873] dummy0: entered allmulticast mode [ 77.375024][ T6873] dummy0: left allmulticast mode [ 77.379996][ T6873] dummy0: left promiscuous mode [ 77.543747][ T6885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1117'. [ 77.553950][ T6885] netlink: 'syz.0.1117': attribute type 10 has an invalid length. [ 77.567340][ T6885] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.594004][ T6888] loop5: detected capacity change from 0 to 512 [ 77.608420][ T6888] EXT4-fs: Ignoring removed oldalloc option [ 77.625384][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'. [ 77.626208][ T6888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.672469][ T6888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.698982][ T6888] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.750775][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.762367][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 77.865932][ T6916] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1131'. [ 77.882845][ T6916] netlink: 'syz.5.1131': attribute type 10 has an invalid length. [ 77.897023][ T6916] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.936658][ T6926] SELinux: security_context_str_to_sid () failed with errno=-22 [ 77.996915][ T6936] netlink: 'syz.8.1140': attribute type 1 has an invalid length. [ 78.004927][ T6936] netlink: 'syz.8.1140': attribute type 2 has an invalid length. [ 78.020304][ T6934] loop1: detected capacity change from 0 to 512 [ 78.033744][ T6934] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.1150: invalid block [ 78.039668][ T6938] loop5: detected capacity change from 0 to 512 [ 78.047066][ T6934] EXT4-fs (loop1): Remounting filesystem read-only [ 78.062670][ T6934] EXT4-fs (loop1): 1 truncate cleaned up [ 78.069301][ T6934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.082104][ T6934] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 78.089079][ T6934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.100174][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1143'. [ 78.124565][ T6938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.137342][ T6938] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.167039][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.263041][ T6960] netem: incorrect ge model size [ 78.268103][ T6960] netem: change failed [ 78.295057][ T6962] SELinux: security_context_str_to_sid () failed with errno=-22 [ 78.397780][ T6979] syz.5.1156[6979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.397846][ T6979] syz.5.1156[6979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.409478][ T6979] syz.5.1156[6979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.436280][ T6979] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1156'. [ 78.462145][ T6979] netlink: 'syz.5.1156': attribute type 10 has an invalid length. [ 78.489162][ T6989] netlink: 'syz.5.1160': attribute type 1 has an invalid length. [ 78.497353][ T6984] loop8: detected capacity change from 0 to 512 [ 78.526522][ T6990] loop1: detected capacity change from 0 to 2048 [ 78.537089][ T6984] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1024: comm syz.8.1158: invalid block [ 78.549194][ T6984] EXT4-fs (loop8): Remounting filesystem read-only [ 78.556867][ T6984] EXT4-fs (loop8): 1 truncate cleaned up [ 78.562876][ T6984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.575613][ T6984] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 78.582317][ T6990] loop1: p1 < > p2 p3 < p5 > p4 [ 78.587351][ T6990] loop1: partition table partially beyond EOD, truncated [ 78.595166][ T6984] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.604595][ T6990] loop1: p1 start 4278190080 is beyond EOD, truncated [ 78.611618][ T6990] loop1: p2 start 16908800 is beyond EOD, truncated [ 78.619600][ T6990] loop1: p4 start 11326 is beyond EOD, truncated [ 78.626056][ T6990] loop1: p5 start 16908800 is beyond EOD, truncated [ 78.642289][ T3017] loop1: p1 < > p2 p3 < p5 > p4 [ 78.647421][ T3017] loop1: partition table partially beyond EOD, truncated [ 78.669851][ T3017] loop1: p1 start 4278190080 is beyond EOD, truncated [ 78.676806][ T3017] loop1: p2 start 16908800 is beyond EOD, truncated [ 78.685681][ T3017] loop1: p4 start 11326 is beyond EOD, truncated [ 78.692078][ T3017] loop1: p5 start 16908800 is beyond EOD, truncated [ 78.724871][ T7009] netem: incorrect ge model size [ 78.726469][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 78.729877][ T7009] netem: change failed [ 78.796581][ T3573] udevd[3573]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 78.930313][ T7031] loop1: detected capacity change from 0 to 8192 [ 78.941730][ T7031] syz.1.1179: attempt to access beyond end of device [ 78.941730][ T7031] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 78.955224][ T7031] Buffer I/O error on dev loop1, logical block 57847, async page read [ 78.964265][ T7031] syz.1.1179: attempt to access beyond end of device [ 78.964265][ T7031] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 78.977714][ T7031] Buffer I/O error on dev loop1, logical block 57847, async page read [ 78.986044][ T7031] syz.1.1179: attempt to access beyond end of device [ 78.986044][ T7031] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 78.999545][ T7031] Buffer I/O error on dev loop1, logical block 57847, async page read [ 79.014685][ T7031] syz.1.1179: attempt to access beyond end of device [ 79.014685][ T7031] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 79.028196][ T7031] Buffer I/O error on dev loop1, logical block 57847, async page read [ 79.100918][ T7040] loop1: detected capacity change from 0 to 2048 [ 79.123791][ T7044] bridge_slave_1: left allmulticast mode [ 79.129564][ T7044] bridge_slave_1: left promiscuous mode [ 79.135362][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.150166][ T7044] bridge_slave_0: left allmulticast mode [ 79.155956][ T7044] bridge_slave_0: left promiscuous mode [ 79.161610][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.185690][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.247005][ T6635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.275255][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 79.275272][ T29] audit: type=1326 audit(1730491834.040:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.276221][ T7053] loop5: detected capacity change from 0 to 128 [ 79.305327][ T29] audit: type=1326 audit(1730491834.070:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.334859][ T29] audit: type=1326 audit(1730491834.070:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.358353][ T29] audit: type=1326 audit(1730491834.070:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.383764][ T29] audit: type=1326 audit(1730491834.140:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.384355][ T7053] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.407240][ T29] audit: type=1326 audit(1730491834.140:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.421399][ T7053] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.442611][ T29] audit: type=1326 audit(1730491834.140:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.442708][ T29] audit: type=1326 audit(1730491834.140:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.521727][ T29] audit: type=1326 audit(1730491834.140:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.545332][ T29] audit: type=1326 audit(1730491834.140:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.1.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34430ee719 code=0x7ffc0000 [ 79.569946][ T6517] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.612707][ T7064] loop8: detected capacity change from 0 to 128 [ 79.632109][ T7064] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.646241][ T7064] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.692640][ T7070] loop1: detected capacity change from 0 to 512 [ 79.718944][ T7070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.732863][ T7070] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.737257][ T5803] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.774033][ T6635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.787169][ T7081] loop0: detected capacity change from 0 to 512 [ 79.803186][ T7081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.836856][ T7081] EXT4-fs (loop0): 1 truncate cleaned up [ 79.842979][ T7081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.993089][ T7098] loop5: detected capacity change from 0 to 2048 [ 80.023196][ T6589] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.046338][ T7098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.151757][ T6517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.168922][ T7110] loop0: detected capacity change from 0 to 8192 [ 80.182000][ T7110] syz.0.1213: attempt to access beyond end of device [ 80.182000][ T7110] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 80.195501][ T7110] Buffer I/O error on dev loop0, logical block 57847, async page read [ 80.204112][ T7110] syz.0.1213: attempt to access beyond end of device [ 80.204112][ T7110] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 80.217673][ T7110] Buffer I/O error on dev loop0, logical block 57847, async page read [ 84.772856][ T6517] ================================================================== [ 84.781092][ T6517] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_block_update_hint_alloc [ 84.789831][ T6517] [ 84.792171][ T6517] read-write to 0xffffffff88be03ac of 4 bytes by task 7119 on cpu 1: [ 84.800262][ T6517] pcpu_block_update_hint_alloc+0x5db/0x6a0 [ 84.806206][ T6517] pcpu_alloc_area+0x488/0x4b0 [ 84.811033][ T6517] pcpu_alloc_noprof+0x4bb/0x10a0 [ 84.816164][ T6517] bpf_map_alloc_percpu+0xad/0x210 [ 84.821356][ T6517] prealloc_init+0x19f/0x470 [ 84.826022][ T6517] htab_map_alloc+0x630/0x8e0 [ 84.830746][ T6517] map_create+0x850/0xb70 [ 84.835118][ T6517] __sys_bpf+0x667/0x7a0 [ 84.839403][ T6517] __x64_sys_bpf+0x43/0x50 [ 84.843858][ T6517] x64_sys_call+0x2625/0x2d60 [ 84.848565][ T6517] do_syscall_64+0xc9/0x1c0 [ 84.853106][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.857958][ T7127] loop0: detected capacity change from 0 to 256 [ 84.859029][ T6517] [ 84.859038][ T6517] read to 0xffffffff88be03ac of 4 bytes by task 6517 on cpu 0: [ 84.875156][ T6517] pcpu_alloc_noprof+0x9b6/0x10a0 [ 84.880227][ T6517] xt_percpu_counter_alloc+0x79/0x110 [ 84.885630][ T6517] translate_table+0x921/0xf70 [ 84.890431][ T6517] do_ipt_set_ctl+0x7bd/0x8b0 [ 84.895152][ T6517] nf_setsockopt+0x195/0x1b0 [ 84.899770][ T6517] ip_setsockopt+0xea/0x100 [ 84.904296][ T6517] tcp_setsockopt+0x93/0xb0 [ 84.908819][ T6517] sock_common_setsockopt+0x64/0x80 [ 84.914037][ T6517] __sys_setsockopt+0x1cc/0x240 [ 84.918917][ T6517] __x64_sys_setsockopt+0x66/0x80 [ 84.923971][ T6517] x64_sys_call+0x278d/0x2d60 [ 84.928666][ T6517] do_syscall_64+0xc9/0x1c0 [ 84.933179][ T6517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.939090][ T6517] [ 84.941412][ T6517] value changed: 0x00000004 -> 0xfffffffc [ 84.947129][ T6517] [ 84.949450][ T6517] Reported by Kernel Concurrency Sanitizer on: [ 84.955599][ T6517] CPU: 0 UID: 0 PID: 6517 Comm: syz-executor Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 84.966455][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.976515][ T6517] ================================================================== [ 84.994227][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 84.994299][ T29] audit: type=1400 audit(1730491839.750:1971): avc: denied { write } for pid=3305 comm="syz-executor" path="pipe:[460]" dev="pipefs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 85.239483][ T6243] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.298214][ T6243] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.338661][ T6243] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.401796][ T6243] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.489855][ T6243] bridge_slave_1: left allmulticast mode [ 85.495572][ T6243] bridge_slave_1: left promiscuous mode [ 85.501311][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.509132][ T6243] bridge_slave_0: left allmulticast mode [ 85.515239][ T6243] bridge_slave_0: left promiscuous mode [ 85.520945][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.596918][ T6243] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 85.657343][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.667928][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.678709][ T6243] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 85.687465][ T6243] bond0 (unregistering): Released all slaves [ 85.739088][ T6243] hsr_slave_0: left promiscuous mode [ 85.744792][ T6243] hsr_slave_1: left promiscuous mode [ 85.750504][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.758161][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.766208][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.773620][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.783084][ T6243] veth1_macvtap: left promiscuous mode [ 85.788622][ T6243] veth0_macvtap: left promiscuous mode [ 85.794234][ T6243] veth1_vlan: left promiscuous mode [ 85.799471][ T6243] veth0_vlan: left promiscuous mode [ 85.881483][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 85.891991][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 86.238857][ T6243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.277733][ T6243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.327486][ T6243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.407417][ T6243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.492966][ T6243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.527295][ T6243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.588011][ T6243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.637529][ T6243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.714624][ T6243] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.756989][ T6243] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.817791][ T6243] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.877314][ T6243] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.932528][ T6243] bridge_slave_1: left allmulticast mode [ 86.938402][ T6243] bridge_slave_1: left promiscuous mode [ 86.944016][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.951732][ T6243] bridge_slave_0: left allmulticast mode [ 86.957418][ T6243] bridge_slave_0: left promiscuous mode [ 86.963026][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.147052][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.157466][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.167824][ T6243] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 87.177726][ T6243] bond0 (unregistering): Released all slaves [ 87.186694][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.197486][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.207997][ T6243] bond0 (unregistering): Released all slaves [ 87.217977][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.228321][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.238857][ T6243] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 87.247771][ T6243] bond0 (unregistering): Released all slaves [ 87.320726][ T6243] hsr_slave_0: left promiscuous mode [ 87.326559][ T6243] hsr_slave_1: left promiscuous mode [ 87.332318][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.339765][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.347487][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.354944][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.364148][ T6243] hsr_slave_0: left promiscuous mode [ 87.370061][ T6243] hsr_slave_1: left promiscuous mode [ 87.375980][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.383443][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.391221][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.398703][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.407977][ T6243] hsr_slave_0: left promiscuous mode [ 87.413628][ T6243] hsr_slave_1: left promiscuous mode [ 87.419432][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.426900][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.434699][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.442133][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.454738][ T6243] veth1_macvtap: left promiscuous mode [ 87.460227][ T6243] veth0_macvtap: left promiscuous mode [ 87.465857][ T6243] veth1_vlan: left promiscuous mode [ 87.471220][ T6243] veth0_vlan: left promiscuous mode [ 87.477057][ T6243] veth1_macvtap: left promiscuous mode [ 87.482643][ T6243] veth0_macvtap: left promiscuous mode [ 87.488274][ T6243] veth1_vlan: left promiscuous mode [ 87.493505][ T6243] veth0_vlan: left promiscuous mode [ 87.499341][ T6243] veth1_macvtap: left promiscuous mode [ 87.504938][ T6243] veth0_macvtap: left promiscuous mode [ 87.510593][ T6243] veth1_vlan: left promiscuous mode [ 87.516014][ T6243] veth0_vlan: left promiscuous mode [ 87.681199][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 87.691790][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 87.753943][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 87.763973][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 87.828599][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 87.839786][ T6243] team0 (unregistering): Port device team_slave_0 removed