last executing test programs: 6.070169089s ago: executing program 4 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 6.039121691s ago: executing program 4 (id=2733): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {0x0}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) 6.038243531s ago: executing program 4 (id=2735): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x2000, @fd=r2, 0xfff, 0x0}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 5.997156964s ago: executing program 4 (id=2736): keyctl$reject(0x14, 0x0, 0x7fffffffefff, 0x3, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r0) keyctl$read(0xb, r0, &(0x7f00000017c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000380)=""/223) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x8026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000f40)=ANY=[@ANYRES64=r3, @ANYRES8, @ANYRES64=r5, @ANYRES64=r4, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT=r6, @ANYRES8, @ANYRES64=r7], 0x0, 0x0, &(0x7f0000000000)) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) sendfile(r9, r9, 0x0, 0x100000000) 4.953043482s ago: executing program 2 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) 4.932908833s ago: executing program 2 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x418601, 0x0) flock(r2, 0x2) 4.890696667s ago: executing program 2 (id=2745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {0x0}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) 4.890499267s ago: executing program 2 (id=2746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2, 0x3, 0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x2000, @fd=r1, 0xfff, 0x0}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 4.849972529s ago: executing program 2 (id=2747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x0) 4.834646471s ago: executing program 2 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) 2.709965438s ago: executing program 4 (id=2769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000088000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd10, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x2a5, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc08c5334, &(0x7f0000000480)) tkill(r2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 2.130926271s ago: executing program 4 (id=2779): keyctl$reject(0x14, 0x0, 0x7fffffffefff, 0x3, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r0) keyctl$read(0xb, r0, &(0x7f00000017c0)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000380)=""/223) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000030c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x8026, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000f40)=ANY=[@ANYRES64=r3, @ANYRES8, @ANYRES64=r5, @ANYRES64=r4, @ANYRES32, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESOCT=r6, @ANYRES8, @ANYRES64=r7], 0x0, 0x0, &(0x7f0000000000)) r9 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) sendfile(r9, r9, 0x0, 0x100000000) 2.124615332s ago: executing program 0 (id=2780): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x400000000010, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) io_uring_setup(0x4822, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fcntl$getflags(r0, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000060000000000000073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) pipe(&(0x7f0000000040)) unshare(0x68060200) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x490}, 0x8004) 2.047772327s ago: executing program 0 (id=2781): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) syz_io_uring_setup(0x4603, &(0x7f00000006c0), 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000240)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x3, 0x362, [], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x338) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000500)='./file0\x00', 0x2010048, &(0x7f0000001740)=ANY=[], 0xd, 0x2a9, &(0x7f0000000240)="$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") lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r6, &(0x7f0000000700)=""/147) 1.505306798s ago: executing program 1 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) 1.487802759s ago: executing program 1 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000209010400000000000000000a00000a080003400000000308000540000000040900010073796e31e03dd7c1c9f60800000000080005400000001d0900010073"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003e5c0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x1, 0x0, &(0x7f0000000080)=0x0) timer_delete(r2) 1.159773674s ago: executing program 3 (id=2795): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000130000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r2 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x2000, @fd=r2, 0xfff, 0x0}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.128435506s ago: executing program 0 (id=2796): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) 1.064428851s ago: executing program 3 (id=2797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580), 0x0, 0x0, 0x0) 1.008022565s ago: executing program 3 (id=2798): io_setup(0xd, &(0x7f00000001c0)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_submit(r0, 0x1, &(0x7f0000002b00)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 978.331647ms ago: executing program 3 (id=2799): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="e19a86aa6884dff9fd1605", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x20004000) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080006004802000005000b"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a3000000000090003"], 0x74}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x597, &(0x7f0000000900)="$eJzs3c9rG8ceAPDvyj8S2+HFgRDee4dHIIeXkEaO7f5IodD0WNrQQHtPha2YYDkKlh1iN9Dk0Fx6KaFQSgOlf0DvPYZeeuxfEWhDQwmmPZSCy8orR7Zsy5blSIk+H1h7ZmdXM6PdGc1oV2wAPetk+icX8Z+I+CKJOFqX1h9Z4sm17Vae3p5KlyRWVz/8PYkkW1fbPsn+j2SRf0fEj59FnM015ltZWp4tlErF+Sw+tjB3Y6yytHzu2lxhpjhTvD4xOXnhtcmJN994vaV6JZtXDEacufzn1x88fPfC56dWvvr+8bH7SVyMI1lyfT324U595GTh7yw0EBc3bTjehsy6ScP73dyZgygHe9OXtfOBSPuAo9GXtXrg5fdpRKwCPSrR/qFH1cYBtbl9m+bBL4wn76xNgBrr37/23Ugcrs6NhleSDTOjdL472ob80zx++PXB/XSJnb+HGGoSB9iTO3cj4nx/f2P/l2T9X+vOV7883tnmPHrt8wc66WE6/nllq/FPbn38kxoe3LjfyBZttxXN23/ucRuy2VY6/ntry/Hvetc12pfFctUx30By9VqpeD4i/hURp2PgUBrf6XrOhZVHq9ul1Y//0iXNvzYWzMrxuP/Qxn2mCwuF/dS53pO7Ef/dcvybrB//ZIvxb/peXN5lHieKD/63XVrz+h+s1e8i/r/l8X92RSvZ+frkWPV8GKudFY3+uHfi5+3y73T90+M/vHP9R5P667WVvefx7eG/itultXr+DyYfVcO1bulWYWFhfjxiMHm/cf3Es31r8dr2af1Pn9q5/1s7/zdeGUsnXx/vsv73jt/bdtNuOP7Tezr+ew88eu+Tb7bLf3fH/9Vq/3k6W7Ob/m+3BdzXmwcAAAAAAABdJhcRRyLJ5dfDuVw+v3Z/x/EYzpXKlYWzV8uL16ej+lvZ0RjI1a50H627H2I8ux+2Fp/YFJ+MiGMR8WXfUDWenyqXpjtdeQAAAAAAAAAAAAAAAAAAAOgSI42////tpyztl75mezfdAOh21QcbHOp0KYBOaPrI/3Y86QnoSk3bP/DS0v6hd2n/0Lu0f+hdG9r/QOfKATx/Pv+hd7XS/ocOoBzA8+fzHwAAAAAAAAAAAAAAAAAAAAAAAAAAANrq8qVL6bK68vT2VBqfvrm0OFu+eW66WJnNzy1O5afK8zfyM+XyTKmYnyrPNXu9Url8Y3wiFm+NLRQrC2OVpeUrc+XF60NXrs0VZopXip4uAgAAAAAAAAAAAAAAAAAAAI0qS8uzhVKpON9SoG9/u78ggbejK4pxkBVc09Lu/d1SiwMK5Ee6ohi7COSinS/Y4Y4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr8EwAA///a6TVl") syz_io_uring_setup(0x1e4e, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)) r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 920.342761ms ago: executing program 3 (id=2800): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f375000100000001000000c23c00fe80000800009ff57b80000000000000000000002d00ac"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000000181000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 855.854016ms ago: executing program 3 (id=2801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="c58e0eb1cc", @ANYBLOB="1efd46cb5c9f7b9c245d33e7f5ddd7e0bcdbaa0b1dd3e25e09f53e90b1b0b4e2d09720b17b8cc12c77409e6e5cc67bbd5ce3c41b333da43fa419939890299b0a58f9a60907cee690eb89a1215296191d5f1381f99d2b5d66e47f2de72a80842620dfe993c684722b0f85b012", @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffff, 0x6e0, 0x1, 0x0, 0x7, 0x2401}) recvmsg$kcm(r4, &(0x7f0000000c80)={&(0x7f0000000640)=@generic, 0x80, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000a40)=""/85, 0x55}, {&(0x7f0000000980)=""/57, 0x39}, {&(0x7f0000000ac0)=""/163, 0xa3}], 0x6, &(0x7f0000000c00)=""/85, 0x55}, 0x2100) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000340)="012b7e021f6feb4af46acbbc856341e9c1f96be37bc1a3d3c1a33dd65cdbbc8e3775ba6b7d5aaf61ccde05d921a2d28b5405734445d3dee0481dd61c924325ca0a1a8be23af6d0f34b07f978e1685c621bd2cff30ac2876ec6044d07e88aab1a0b51850b", 0x64}, {&(0x7f00000004c0)="149ede40a3e8ca4a2b8eedc39a5b717f251cd6c84663fa792169adb1f30b388160ba8fb57c48494ff18cc606084622457d1979ada52e33b40d4afb50392f4cb34b61edf5fb622d86761ced42398e8fc2f09ea6b49216834e2353bf74f4876f4a6c709070e61bac52f08dcd13750ba118b7fa01a2342832b68134ebe44672317074c864bfc2bd5b251df9718db2bce8b28d5aa8515280ed6813f4f7983e41cc3be2f86dd6860f98895ca45cf14532fa726f70ad9fcc057cca1e3fd81ca785cba71e5a867c955080c05db69231964ceec4b45196d4594370b1cd3bb95d64bab09d", 0xe0}, {&(0x7f00000003c0)="a7b2372c46cbe8999aaacad37892df4e8cd0355e2f1fb2a6d876b6bcf06c9957530d61f7b16ef922e7b165771205067b8fa29c66288910a435a66604b9fce43ea75b528da2b4db79c730eeb136622285621a51cf34071afab063877f9db96264308919032d9e1965f8db6c93d0bf3346013cd0fc52a3451d8d7181bc5c3904c514c0732039c0170f76a24cdd12af1966af3c14b2c69c71968d4384221a65928c5e9f1961d06ea0f43751886cdc948b0bec", 0xb1}, {&(0x7f0000000280)="cdaa85b081fa41d791b0c3a73a42bfb7fe0810ae708cdb15c6573fad09468b2b9ab75bbb7f0ed8e1c7941e66d8653f2d81be688e", 0x34}], 0x4, 0x0, 0x0, 0x40890}, 0x8044) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="fc6f"]) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000cc0)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000d00)={0x1, 0x0, 0x0, r8, 0x8}, 0xc) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="df3eb525380e30c8fe1d4f5dc1fa66fcd82cf86c77c3ca0bba238ec2362ff9f80b2fbc85050cc4144c1ba4f2cecd994574ff4af0daccf7e74ff0284662563466c51c286c210e5bd218a46b10eaa463b3cb0b5908e95fefb90eb81bf62510ee949a82499c3350cb7140e97711276d30979f530849f13c5bc3880d300d203aabfe957686e7b6ceb28d3f0ced07b5ee3573279a3a59"], 0x1c}}, 0x0) 575.359457ms ago: executing program 1 (id=2802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000088000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c710016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa73d897e3896d863081b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbd744e517e65ddab19e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f200004304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188541c300f5c1bf56705ba12d198e897186b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710f7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47cbb0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9ea410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be0a33c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06a6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c6062368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c5bed4b0d73dffb17a88aaad5921aee7dae6a2f3009d9cb434898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a64d903b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e7ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000000000000000006a728258ca3d846a000e80d5f43109a48ddc54cec5d7f78c80e010ed02ffc0846577cafcd9e0ad83149bfb08ba7b5b431311041deb5e5d65610ad6e8d6ed55e900071b4d37d9fadb17a0407e7251866b63faccfe936980f59ceaa9d6b6863024b482023799a4f30a225b560f320e89ed44130e78f8cf000ac3c743b08d4256f282fc36162ac4b59527a3b67560313914ff6ac4ac43cd0e79d6372da631de3fde6c29de3b43d3046df23019ecadd57f175a2443928b1bcb9be16f54936796c3b928dc07c70771622cef2fafeb239a3ca4"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd10, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x2a5, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc08c5334, &(0x7f0000000480)) tkill(r2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 159.617928ms ago: executing program 0 (id=2803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) 140.592749ms ago: executing program 0 (id=2804): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0)={0xb}, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000480), &(0x7f0000000600)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000d00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0xfea7) 102.182422ms ago: executing program 1 (id=2805): r0 = socket(0x10, 0x803, 0x4) sendto$inet6(r0, &(0x7f0000001480)="7800000018002507b9199b02ffff48000203be0402d6d8935a06022509b15c6869a92393eb253016a4160d0a0000000d0085a268d0bf46d32345653600648d040012000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160015000a00000f872e6972d8a8729b2e", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18110000", @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x0) r2 = accept4$packet(r1, 0x0, &(0x7f0000000340), 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f00000002c0)="c7376cbe14973cd60b930088e95da0cbaab0ff7026182af35cbe9847ac741e51fe9b978972fc22ec11aa95abaca3070082040ddd13bf606ec0b18bb201a6798ae5d9c883a43b95efe539a149021e4c6e7c131ff360bcbe59d26e7199a9dd1712e902b273e0e9b31f917b5976d02c0c569dbc6e85f2fec5e891dae509dcddfbb407b5e1e49b", &(0x7f0000001200)=""/4096}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, r9, 0x325, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000700)=@deltaction={0x8c, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x8c}}, 0x0) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01) r12 = fcntl$dupfd(r11, 0x0, r11) poll(&(0x7f0000000480)=[{r10}, {r7, 0xa080}, {r6, 0x1000}, {r2, 0x80}, {r7, 0x420}, {r12, 0x11}, {r0, 0x2000}, {r12, 0x1000}, {r4, 0x1}], 0x9, 0x40000) ioctl$EVIOCGRAB(r11, 0x40044590, &(0x7f0000000100)) write$char_usb(r11, &(0x7f0000000040)="e2", 0x1068) 59.459205ms ago: executing program 0 (id=2806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {0x0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) 58.337825ms ago: executing program 1 (id=2807): r0 = getpid() syz_pidfd_open(r0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="62589eee18d4b2318e40fa3fc48b182ba0bfd04b55931fb3817c755da393fb88e1ebd80a704486cc20885eb44d2a9bdba3ecad2d0a858495502a54412834f0d24094d0cf87c24b9bca1fafd1e00a5f31199b51c95851a575c9ca2cbe0cbe6c697a60946c89db96b0c070b6e20c58544b20cdcea1ae135ec37ece2dec7dfdd86b18c8b85dd6d5d8b5b36539f70e218ded14289e3ac7840ff40a0a08ab706c0226ba4dbb3bdb", 0xa5, 0x20000885, &(0x7f0000000180)={0x11, 0xf6, 0x0, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) statx(0xffffffffffffffff, 0x0, 0x1000, 0xfeff, 0x0) 0s ago: executing program 1 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x50, 0x2000, @fd=r0, 0xfff, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): romiscuous mode [ 156.137432][T10383] vhci_hcd: connection closed [ 156.137627][ T50] vhci_hcd: stop threads [ 156.140872][T10376] vhci_hcd: connection closed [ 156.142423][ T50] vhci_hcd: release socket [ 156.142435][ T50] vhci_hcd: disconnect device [ 156.157325][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.170984][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.180856][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.180964][ T8875] vhci_hcd: vhci_device speed not set [ 156.191257][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.196901][ T258] vhci_hcd: stop threads [ 156.206502][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.210612][ T258] vhci_hcd: release socket [ 156.210689][ T258] vhci_hcd: disconnect device [ 156.221002][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.221018][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.250518][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.260452][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.270892][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.280747][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.291165][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.302050][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.310979][T10268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.317823][ T8875] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 156.325787][ T8875] usb 1-1: enqueue for inactive port 0 [ 156.327617][T10268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.338071][ T8875] usb 1-1: enqueue for inactive port 0 [ 156.343541][ T8875] usb 1-1: enqueue for inactive port 0 [ 156.351456][T10268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.380478][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.391035][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.401018][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.411605][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.421407][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.431917][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.433916][ T8875] vhci_hcd: vhci_device speed not set [ 156.441738][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.457586][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.467390][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.477942][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.487825][T10181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.498262][T10181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.512438][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.519990][T10268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.534654][T10181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.543380][T10181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.552231][T10181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.560911][T10181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.609872][T10268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.624356][T10268] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.633409][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.640622][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.652957][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.660028][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.718438][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.779284][T10268] veth0_vlan: entered promiscuous mode [ 156.787695][T10268] veth1_vlan: entered promiscuous mode [ 156.802726][T10268] veth0_macvtap: entered promiscuous mode [ 156.809924][T10268] veth1_macvtap: entered promiscuous mode [ 156.819827][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.830265][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.840243][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.850698][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.860572][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.871042][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.880925][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.891346][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.901162][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.911566][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.921446][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.931882][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.941756][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.952161][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.962780][T10268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.972889][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.983353][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.993257][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.003775][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.013738][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.024252][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.034074][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.044535][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.050774][T10412] loop2: detected capacity change from 0 to 256 [ 157.054332][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.054348][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.080832][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.091283][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.101128][T10268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.111570][T10268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.119114][T10416] loop0: detected capacity change from 0 to 512 [ 157.129873][T10268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.138472][T10268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.147191][T10268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.155920][T10268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.164784][T10268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.241069][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2374'. [ 157.341641][T10428] loop4: detected capacity change from 0 to 256 [ 157.349154][T10428] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.353262][T10427] loop0: detected capacity change from 0 to 512 [ 157.377004][T10427] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.600223][T10435] loop1: detected capacity change from 0 to 256 [ 157.678688][T10431] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 157.723606][T10437] FAULT_INJECTION: forcing a failure. [ 157.723606][T10437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.736691][T10437] CPU: 1 UID: 0 PID: 10437 Comm: syz.1.2416 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 157.747476][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 157.757541][T10437] Call Trace: [ 157.760799][T10437] [ 157.763709][T10437] dump_stack_lvl+0xf2/0x150 [ 157.768287][T10437] dump_stack+0x15/0x20 [ 157.772463][T10437] should_fail_ex+0x229/0x230 [ 157.777245][T10437] should_fail+0xb/0x10 [ 157.781396][T10437] should_fail_usercopy+0x1a/0x20 [ 157.786455][T10437] _copy_to_user+0x1e/0xa0 [ 157.790856][T10437] simple_read_from_buffer+0xa0/0x110 [ 157.796209][T10437] proc_fail_nth_read+0xff/0x140 [ 157.801126][T10437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.806660][T10437] vfs_read+0x1a2/0x6e0 [ 157.810826][T10437] ? __rcu_read_unlock+0x4e/0x70 [ 157.815778][T10437] ? __fget_files+0x1da/0x210 [ 157.820457][T10437] ksys_read+0xeb/0x1b0 [ 157.824622][T10437] __x64_sys_read+0x42/0x50 [ 157.829203][T10437] x64_sys_call+0x27d3/0x2d60 [ 157.832760][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2418'. [ 157.833883][T10437] do_syscall_64+0xc9/0x1c0 [ 157.847299][T10437] ? clear_bhb_loop+0x55/0xb0 [ 157.852005][T10437] ? clear_bhb_loop+0x55/0xb0 [ 157.856673][T10437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.862559][T10437] RIP: 0033:0x7ff88ef188fc [ 157.867021][T10437] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 157.886644][T10437] RSP: 002b:00007ff88db97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.895050][T10437] RAX: ffffffffffffffda RBX: 00007ff88f0b5f80 RCX: 00007ff88ef188fc [ 157.903017][T10437] RDX: 000000000000000f RSI: 00007ff88db970a0 RDI: 0000000000000004 [ 157.911041][T10437] RBP: 00007ff88db97090 R08: 0000000000000000 R09: 0000000000000000 [ 157.919103][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.927080][T10437] R13: 0000000000000000 R14: 00007ff88f0b5f80 R15: 00007fff9b9982d8 [ 157.935053][T10437] [ 157.956078][T10444] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.965423][T10441] loop3: detected capacity change from 0 to 1024 [ 157.985645][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 157.985660][ T29] audit: type=1400 audit(1725112713.293:6972): avc: denied { setattr } for pid=10440 comm="syz.3.2418" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.055556][T10455] loop2: detected capacity change from 0 to 2048 [ 158.139947][ T29] audit: type=1326 audit(1725112713.440:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74da59eb9 code=0x7ffc0000 [ 158.163558][ T29] audit: type=1326 audit(1725112713.440:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74da59eb9 code=0x7ffc0000 [ 158.192194][T10461] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 158.195628][T10453] netlink: 'syz.3.2422': attribute type 27 has an invalid length. [ 158.202405][ T29] audit: type=1326 audit(1725112713.440:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb74da59eb9 code=0x7ffc0000 [ 158.233552][ T29] audit: type=1326 audit(1725112713.440:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74da59eb9 code=0x7ffc0000 [ 158.257085][ T29] audit: type=1326 audit(1725112713.440:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb74da59eb9 code=0x7ffc0000 [ 158.280725][ T29] audit: type=1326 audit(1725112713.440:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74da59eb9 code=0x7ffc0000 [ 158.304388][ T29] audit: type=1326 audit(1725112713.440:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb74da58757 code=0x7ffc0000 [ 158.328024][ T29] audit: type=1326 audit(1725112713.440:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb74da5b65a code=0x7ffc0000 [ 158.356449][ T29] audit: type=1326 audit(1725112713.542:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.2.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb74da58850 code=0x7ffc0000 [ 158.358605][T10461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 158.396726][T10461] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 158.409081][T10461] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.409081][T10461] [ 158.418749][T10461] EXT4-fs (loop2): Total free blocks count 0 [ 158.424726][T10461] EXT4-fs (loop2): Free/Dirty block details [ 158.430806][T10461] EXT4-fs (loop2): free_blocks=2415919104 [ 158.436581][T10461] EXT4-fs (loop2): dirty_blocks=32 [ 158.441759][T10461] EXT4-fs (loop2): Block reservation details [ 158.447829][T10461] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 158.457413][T10465] Direct I/O collision with buffered writes! File: /bus Comm: syz.2.2423 [ 158.492717][T10464] 9pnet_fd: Insufficient options for proto=fd [ 158.517813][T10469] loop4: detected capacity change from 0 to 2048 [ 158.528099][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.535377][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.547114][T10469] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2427: bad orphan inode 8192 [ 158.605572][T10476] loop0: detected capacity change from 0 to 1024 [ 158.623988][T10476] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2424: bad orphan inode 1536 [ 158.645609][T10453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.657202][T10453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.698864][T10453] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.708016][T10453] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.716934][T10453] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.726068][T10453] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.759501][T10472] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 158.767732][T10472] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 158.778593][T10475] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 158.805191][T10480] loop3: detected capacity change from 0 to 256 [ 158.913257][T10489] loop4: detected capacity change from 0 to 512 [ 158.957664][T10486] 9pnet_fd: Insufficient options for proto=fd [ 158.972038][T10495] FAULT_INJECTION: forcing a failure. [ 158.972038][T10495] name failslab, interval 1, probability 0, space 0, times 0 [ 158.984778][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.3.2432 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 158.995601][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 159.005743][T10495] Call Trace: [ 159.009057][T10495] [ 159.011980][T10495] dump_stack_lvl+0xf2/0x150 [ 159.016575][T10495] dump_stack+0x15/0x20 [ 159.020733][T10495] should_fail_ex+0x229/0x230 [ 159.021180][T10499] loop4: detected capacity change from 0 to 128 [ 159.025405][T10495] ? do_blk_trace_setup+0x119/0x4d0 [ 159.025430][T10495] should_failslab+0x8f/0xb0 [ 159.032237][T10499] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 159.036818][T10495] __kmalloc_cache_noprof+0x4b/0x2a0 [ 159.036851][T10495] do_blk_trace_setup+0x119/0x4d0 [ 159.060704][T10495] ? rep_movs_alternative+0x4a/0x70 [ 159.065970][T10495] blk_trace_setup+0xad/0x140 [ 159.070683][T10495] sg_ioctl+0x6d4/0x1870 [ 159.074963][T10495] ? __pfx_sg_ioctl+0x10/0x10 [ 159.079642][T10495] __se_sys_ioctl+0xd3/0x150 [ 159.084224][T10495] __x64_sys_ioctl+0x43/0x50 [ 159.088802][T10495] x64_sys_call+0x15cc/0x2d60 [ 159.093608][T10495] do_syscall_64+0xc9/0x1c0 [ 159.098103][T10495] ? clear_bhb_loop+0x55/0xb0 [ 159.102817][T10495] ? clear_bhb_loop+0x55/0xb0 [ 159.107542][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.113478][T10495] RIP: 0033:0x7efd12b89eb9 [ 159.117924][T10495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.137659][T10495] RSP: 002b:00007efd11807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.146065][T10495] RAX: ffffffffffffffda RBX: 00007efd12d25f80 RCX: 00007efd12b89eb9 [ 159.154024][T10495] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000004 [ 159.161980][T10495] RBP: 00007efd11807090 R08: 0000000000000000 R09: 0000000000000000 [ 159.170009][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.177990][T10495] R13: 0000000000000000 R14: 00007efd12d25f80 R15: 00007ffc441e2ad8 [ 159.186041][T10495] [ 159.310016][T10512] loop4: detected capacity change from 0 to 512 [ 159.316812][T10512] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.323666][T10512] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 159.333336][T10512] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 159.341440][T10512] System zones: 1-12 [ 159.344786][T10508] netlink: 'syz.1.2438': attribute type 27 has an invalid length. [ 159.345833][T10512] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2440: corrupted in-inode xattr: e_value size too large [ 159.369536][T10512] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2440: couldn't read orphan inode 15 (err -117) [ 159.432358][T10508] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.439653][T10508] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.514059][T10508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.533955][T10508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.599515][T10508] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.608798][T10508] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.617920][T10508] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.626901][T10508] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.699582][T10517] loop1: detected capacity change from 0 to 512 [ 159.726371][T10521] loop1: detected capacity change from 0 to 256 [ 159.882653][T10531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2445'. [ 159.891726][T10531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.891842][T10530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.898911][T10531] IPv6: NLM_F_CREATE should be set when creating new route [ 159.898924][T10531] IPv6: NLM_F_CREATE should be set when creating new route [ 159.941202][T10530] loop0: detected capacity change from 0 to 2048 [ 159.943024][T10535] loop1: detected capacity change from 0 to 128 [ 159.954447][T10535] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 159.976998][T10530] Alternate GPT is invalid, using primary GPT. [ 159.983277][T10530] loop0: p1 p2 p3 [ 160.206693][T10543] netlink: 'syz.3.2451': attribute type 27 has an invalid length. [ 160.250642][T10546] loop3: detected capacity change from 0 to 512 [ 160.334112][T10552] 9pnet_fd: Insufficient options for proto=fd [ 160.364969][T10554] 9pnet_fd: Insufficient options for proto=fd [ 161.221946][T10570] loop3: detected capacity change from 0 to 512 [ 161.234697][T10570] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.369325][T10586] loop2: detected capacity change from 0 to 512 [ 161.387996][T10584] netlink: 'syz.3.2465': attribute type 27 has an invalid length. [ 161.531164][T10598] 9pnet_fd: Insufficient options for proto=fd [ 161.690504][T10603] loop1: detected capacity change from 0 to 512 [ 161.697173][T10603] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.704262][T10603] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 161.713995][T10603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 161.722791][T10609] loop0: detected capacity change from 0 to 512 [ 161.723857][T10603] System zones: 1-12 [ 161.733712][T10603] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2471: corrupted in-inode xattr: e_value size too large [ 161.749703][T10603] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2471: couldn't read orphan inode 15 (err -117) [ 161.762303][T10603] EXT4-fs mount: 37 callbacks suppressed [ 161.762316][T10603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.763250][T10609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.792642][T10609] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.819650][T10115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.878892][T10621] loop0: detected capacity change from 0 to 2048 [ 161.906328][T10621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.981206][T10621] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 161.994503][T10621] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 162.009649][T10621] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 162.022066][T10621] EXT4-fs (loop0): This should not happen!! Data will be lost [ 162.022066][T10621] [ 162.031857][T10621] EXT4-fs (loop0): Total free blocks count 0 [ 162.037991][T10621] EXT4-fs (loop0): Free/Dirty block details [ 162.043950][T10621] EXT4-fs (loop0): free_blocks=2415919104 [ 162.049802][T10621] EXT4-fs (loop0): dirty_blocks=32 [ 162.055001][T10621] EXT4-fs (loop0): Block reservation details [ 162.061144][T10621] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 162.068401][T10625] Direct I/O collision with buffered writes! File: /bus Comm: syz.0.2476 [ 162.142660][T10627] loop4: detected capacity change from 0 to 128 [ 162.149459][T10627] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 162.195796][T10631] netlink: 'syz.4.2479': attribute type 27 has an invalid length. [ 162.272468][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.279800][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.356727][T10631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.371577][T10631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.444199][T10631] macvlan1: left promiscuous mode [ 162.449314][T10631] macvlan1: left allmulticast mode [ 162.463832][T10631] macsec0: left promiscuous mode [ 162.468835][T10631] macsec0: left allmulticast mode [ 162.482924][T10631] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.491964][T10631] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.500880][T10631] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.509829][T10631] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.525459][T10631] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 162.532567][T10631] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 162.562288][T10644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59249 sclass=netlink_route_socket pid=10644 comm=syz.3.2485 [ 162.580884][T10644] vlan0: entered promiscuous mode [ 162.585939][T10644] vlan0: entered allmulticast mode [ 162.606347][T10181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.638591][T10653] loop3: detected capacity change from 0 to 128 [ 162.667947][T10651] loop1: detected capacity change from 0 to 512 [ 162.669883][T10653] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 162.685198][T10651] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.697917][T10651] EXT4-fs (loop1): 1 orphan inode deleted [ 162.703649][T10651] EXT4-fs (loop1): 1 truncate cleaned up [ 162.721172][T10651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.774016][T10181] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 162.789840][T10181] EXT4-fs (loop1): Remounting filesystem read-only [ 162.797599][T10181] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 162.807317][T10181] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 162.920143][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2481'. [ 163.485777][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 163.485792][ T29] audit: type=1326 audit(1725112718.378:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10645 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7fc00000 [ 163.530218][T10669] netlink: 'syz.4.2496': attribute type 27 has an invalid length. [ 163.551001][ T29] audit: type=1326 audit(1725112718.434:7059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 163.552973][T10672] loop4: detected capacity change from 0 to 256 [ 163.580810][ T29] audit: type=1326 audit(1725112718.434:7060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 163.604454][ T29] audit: type=1326 audit(1725112718.434:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 163.628055][ T29] audit: type=1326 audit(1725112718.434:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd911ee9ef3 code=0x7ffc0000 [ 163.651417][ T29] audit: type=1326 audit(1725112718.434:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd911ee899f code=0x7ffc0000 [ 163.674896][ T29] audit: type=1326 audit(1725112718.434:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd911ee9f47 code=0x7ffc0000 [ 163.698454][ T29] audit: type=1326 audit(1725112718.434:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd911ee8850 code=0x7ffc0000 [ 163.721968][ T29] audit: type=1326 audit(1725112718.434:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd911ee9abb code=0x7ffc0000 [ 163.745533][ T29] audit: type=1326 audit(1725112718.461:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10671 comm="syz.4.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd911ee8b4a code=0x7ffc0000 [ 163.835285][T10675] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 163.843578][T10675] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 163.858128][T10677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2499'. [ 163.859419][T10675] loop4: detected capacity change from 0 to 1024 [ 163.869350][T10677] macsec0: entered promiscuous mode [ 163.876941][T10675] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2498: bad orphan inode 1536 [ 163.878740][T10677] macsec0: entered allmulticast mode [ 163.894949][T10675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.918751][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.937845][T10683] loop4: detected capacity change from 0 to 512 [ 163.944468][T10683] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.952181][T10683] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 163.961094][T10683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 163.969331][T10683] System zones: 1-12 [ 163.973551][T10683] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2501: corrupted in-inode xattr: e_value size too large [ 163.987936][T10683] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2501: couldn't read orphan inode 15 (err -117) [ 164.001010][T10683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.337110][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2500'. [ 164.515223][T10694] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=10694 comm=syz.2.2502 [ 164.555351][T10696] syzkaller0: entered promiscuous mode [ 164.560907][T10696] syzkaller0: entered allmulticast mode [ 164.726223][T10704] 9pnet_fd: Insufficient options for proto=fd [ 164.789241][T10705] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.848367][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.958592][T10181] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.972655][T10709] 9pnet_fd: Insufficient options for proto=fd [ 164.981489][T10709] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.148155][ T11] bridge_slave_1: left allmulticast mode [ 165.153894][ T11] bridge_slave_1: left promiscuous mode [ 165.159693][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.167598][ T11] bridge_slave_0: left allmulticast mode [ 165.173329][ T11] bridge_slave_0: left promiscuous mode [ 165.179015][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.232536][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.242448][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.251912][ T11] bond0 (unregistering): Released all slaves [ 165.269275][T10728] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 165.277497][T10728] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 165.281021][T10713] chnl_net:caif_netlink_parms(): no params data found [ 165.293596][T10728] loop0: detected capacity change from 0 to 1024 [ 165.306911][T10728] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2515: bad orphan inode 1536 [ 165.318301][T10728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.336364][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.343697][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.351109][T10713] bridge_slave_0: entered allmulticast mode [ 165.352032][T10115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.357674][T10713] bridge_slave_0: entered promiscuous mode [ 165.375324][ T11] hsr_slave_0: left promiscuous mode [ 165.381067][ T11] hsr_slave_1: left promiscuous mode [ 165.387075][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.394720][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.431765][ T11] team0 (unregistering): Port device team_slave_1 removed [ 165.442058][ T11] team0 (unregistering): Port device team_slave_0 removed [ 165.476255][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.483436][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.490802][T10713] bridge_slave_1: entered allmulticast mode [ 165.497163][T10713] bridge_slave_1: entered promiscuous mode [ 165.515107][T10713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.525576][T10713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.543126][T10713] team0: Port device team_slave_0 added [ 165.549734][T10713] team0: Port device team_slave_1 added [ 165.565269][T10713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.572288][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.598522][T10713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.610464][T10713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.617402][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.643341][T10713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.670551][T10713] hsr_slave_0: entered promiscuous mode [ 165.676666][T10713] hsr_slave_1: entered promiscuous mode [ 165.682631][T10713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.690208][T10713] Cannot create hsr debugfs directory [ 165.948943][T10713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.958162][T10713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.966471][T10713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.977551][T10713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.998245][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2521'. [ 166.039776][T10713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.044287][T10756] loop3: detected capacity change from 0 to 2048 [ 166.051415][T10713] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.064060][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.071146][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.081156][T10756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.090456][T10713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.103533][T10713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.118172][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.125331][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.159978][T10713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.198317][T10767] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 166.210044][T10713] veth0_vlan: entered promiscuous mode [ 166.221106][T10713] veth1_vlan: entered promiscuous mode [ 166.232473][T10767] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 166.250213][T10767] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 166.258835][T10713] veth0_macvtap: entered promiscuous mode [ 166.262574][T10767] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.262574][T10767] [ 166.271201][T10713] veth1_macvtap: entered promiscuous mode [ 166.277840][T10767] EXT4-fs (loop3): Total free blocks count 0 [ 166.290067][T10767] EXT4-fs (loop3): Free/Dirty block details [ 166.296346][T10767] EXT4-fs (loop3): free_blocks=2415919104 [ 166.299446][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.302065][T10767] EXT4-fs (loop3): dirty_blocks=32 [ 166.312514][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.317585][T10767] EXT4-fs (loop3): Block reservation details [ 166.317597][T10767] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 166.339329][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.349750][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.359564][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.370089][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.379927][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.390375][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.399476][T10756] Direct I/O collision with buffered writes! File: /bus Comm: syz.3.2524 [ 166.400216][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.400232][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.402845][T10713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.452070][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.462540][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.472419][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.482853][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.492848][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.503279][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.513158][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.523627][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.533468][T10713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.543946][T10713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.558478][T10778] 9pnet_fd: Insufficient options for proto=fd [ 166.566138][T10713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.588347][T10713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.597100][T10713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.605806][T10713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.614541][T10713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.627778][T10780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.736272][T10783] 9pnet_fd: Insufficient options for proto=fd [ 166.772054][T10786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2523'. [ 166.792716][T10789] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 166.801028][T10789] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 166.804805][T10790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 166.832941][T10789] loop1: detected capacity change from 0 to 1024 [ 166.846148][T10789] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2528: bad orphan inode 1536 [ 166.856998][T10789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.878894][T10713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.926701][T10796] syzkaller0: entered promiscuous mode [ 166.932298][T10796] syzkaller0: entered allmulticast mode [ 167.434246][T10803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2533'. [ 167.479068][T10805] loop0: detected capacity change from 0 to 256 [ 167.485954][T10805] FAT-fs (loop0): bogus logical sector size 8 [ 167.492155][T10805] FAT-fs (loop0): Can't find a valid FAT filesystem [ 167.532192][T10811] loop0: detected capacity change from 0 to 128 [ 167.539035][T10811] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 167.765061][T10821] netlink: 'syz.0.2539': attribute type 27 has an invalid length. [ 167.825050][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.832345][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.914379][T10821] bond_slave_0: left promiscuous mode [ 167.919897][T10821] bond_slave_0: left allmulticast mode [ 167.961754][T10821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.992942][T10821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.129067][T10825] loop4: detected capacity change from 0 to 2048 [ 168.143646][T10821] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.152717][T10821] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.161795][T10821] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.170883][T10821] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.191352][T10825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.229126][T10825] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 168.253764][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2540'. [ 168.268599][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.592703][T10834] 9pnet_fd: Insufficient options for proto=fd [ 168.654759][T10835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 168.765145][T10839] loop2: detected capacity change from 0 to 256 [ 168.771839][T10839] FAT-fs (loop2): bogus logical sector size 8 [ 168.778047][T10839] FAT-fs (loop2): Can't find a valid FAT filesystem [ 168.797900][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2546'. [ 168.910224][T10844] loop2: detected capacity change from 0 to 512 [ 168.917008][T10844] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.928640][T10844] EXT4-fs (loop2): 1 orphan inode deleted [ 168.934372][T10844] EXT4-fs (loop2): 1 truncate cleaned up [ 168.940409][T10844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.991191][ T9743] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.311530][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 169.311544][ T29] audit: type=1326 audit(1725112723.750:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.341241][ T29] audit: type=1326 audit(1725112723.750:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.364804][ T29] audit: type=1326 audit(1725112723.750:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.388629][ T29] audit: type=1326 audit(1725112723.750:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.412103][ T29] audit: type=1326 audit(1725112723.750:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.435787][ T29] audit: type=1326 audit(1725112723.750:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.459253][ T29] audit: type=1326 audit(1725112723.750:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.482730][ T29] audit: type=1326 audit(1725112723.750:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.498895][T10852] chnl_net:caif_netlink_parms(): no params data found [ 169.506201][ T29] audit: type=1326 audit(1725112723.750:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.536440][ T29] audit: type=1326 audit(1725112723.750:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10850 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 169.583846][T10852] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.591006][T10852] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.598954][T10852] bridge_slave_0: entered allmulticast mode [ 169.605604][T10852] bridge_slave_0: entered promiscuous mode [ 169.614379][T10852] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.621547][T10852] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.629034][T10852] bridge_slave_1: entered allmulticast mode [ 169.635469][T10852] bridge_slave_1: entered promiscuous mode [ 169.648920][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.666543][T10852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.677346][T10852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.698491][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.710089][T10852] team0: Port device team_slave_0 added [ 169.716794][T10852] team0: Port device team_slave_1 added [ 169.731739][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.738703][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.764648][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.776599][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.783663][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.809618][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.823063][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.837419][T10877] netlink: 'syz.3.2553': attribute type 27 has an invalid length. [ 169.845620][T10877] vlan0: left promiscuous mode [ 169.850379][T10877] vlan0: left allmulticast mode [ 169.855328][T10877] macsec0: left promiscuous mode [ 169.860370][T10877] macsec0: left allmulticast mode [ 169.879738][T10852] hsr_slave_0: entered promiscuous mode [ 169.885842][T10852] hsr_slave_1: entered promiscuous mode [ 169.891940][T10852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.899561][T10852] Cannot create hsr debugfs directory [ 169.907734][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.975012][ T11] bridge_slave_1: left allmulticast mode [ 169.980912][ T11] bridge_slave_1: left promiscuous mode [ 169.986627][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.994600][ T11] bridge_slave_0: left allmulticast mode [ 170.000358][ T11] bridge_slave_0: left promiscuous mode [ 170.006052][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.118988][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.129542][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.140112][ T11] bond0 (unregistering): Released all slaves [ 170.198009][T10880] loop4: detected capacity change from 0 to 256 [ 170.204823][T10880] FAT-fs (loop4): bogus logical sector size 8 [ 170.210953][T10880] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.260876][T10884] loop4: detected capacity change from 0 to 512 [ 170.274244][ T11] hsr_slave_0: left promiscuous mode [ 170.282156][ T11] hsr_slave_1: left promiscuous mode [ 170.288129][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.295599][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.305122][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.312586][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.324393][ T11] veth1_macvtap: left promiscuous mode [ 170.329876][ T11] veth0_macvtap: left promiscuous mode [ 170.335449][ T11] veth1_vlan: left promiscuous mode [ 170.340749][ T11] veth0_vlan: left promiscuous mode [ 170.423218][ T11] team0 (unregistering): Port device team_slave_1 removed [ 170.434833][ T11] team0 (unregistering): Port device team_slave_0 removed [ 170.469044][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2560'. [ 170.480174][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 170.492415][T10895] macvtap1: entered promiscuous mode [ 170.497842][T10895] bond0: entered promiscuous mode [ 170.502890][T10895] bond_slave_0: entered promiscuous mode [ 170.505058][T10897] loop4: detected capacity change from 0 to 128 [ 170.508747][T10895] bond_slave_1: entered promiscuous mode [ 170.517411][T10897] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 170.520713][T10895] macvtap1: entered allmulticast mode [ 170.534940][T10895] bond0: entered allmulticast mode [ 170.540088][T10895] bond_slave_0: entered allmulticast mode [ 170.545884][T10895] bond_slave_1: entered allmulticast mode [ 170.555157][T10895] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 170.569700][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 170.576861][T10902] loop0: detected capacity change from 0 to 128 [ 170.585897][T10902] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 170.587403][T10898] bond0: left allmulticast mode [ 170.599940][T10898] bond_slave_0: left allmulticast mode [ 170.605525][T10898] bond_slave_1: left allmulticast mode [ 170.611026][T10898] bond0: left promiscuous mode [ 170.615863][T10898] bond_slave_0: left promiscuous mode [ 170.621349][T10898] bond_slave_1: left promiscuous mode [ 170.677968][T10904] loop4: detected capacity change from 0 to 256 [ 170.684713][T10904] FAT-fs (loop4): bogus logical sector size 8 [ 170.685426][T10852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.690803][T10904] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.709698][T10852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.718649][T10852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.722977][T10911] loop0: detected capacity change from 0 to 128 [ 170.734598][T10852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.742547][T10911] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.757530][T10912] loop4: detected capacity change from 0 to 512 [ 170.770257][T10911] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.781562][T10852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.794255][T10852] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.803824][ T258] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.810902][ T258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.831320][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.838403][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.859737][T10852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.870191][T10852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.915106][T10925] loop1: detected capacity change from 0 to 256 [ 171.081032][T10932] netlink: 'syz.4.2571': attribute type 27 has an invalid length. [ 171.098618][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.249836][T10852] veth0_vlan: entered promiscuous mode [ 171.270054][T10852] veth1_vlan: entered promiscuous mode [ 171.303505][T10852] veth0_macvtap: entered promiscuous mode [ 171.322120][T10852] veth1_macvtap: entered promiscuous mode [ 171.344967][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.355497][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.365393][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.375840][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.385683][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.396199][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.406072][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.416530][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.460034][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.472276][T10940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2567'. [ 171.485258][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.495773][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.505677][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.516171][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.526005][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.536521][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.546371][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.556829][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.567717][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.576152][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 171.585217][T10946] vxcan0: entered promiscuous mode [ 171.590428][T10946] vxcan0: entered allmulticast mode [ 171.596801][T10115] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.598487][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 171.625679][T10852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.634593][T10852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.643298][T10852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.652178][T10852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.712308][T10949] 9pnet_fd: Insufficient options for proto=fd [ 171.745955][T10954] loop2: detected capacity change from 0 to 2048 [ 171.781930][T10958] loop4: detected capacity change from 0 to 512 [ 171.791336][T10954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.807578][T10963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 171.893224][T10965] 9pnet_fd: Insufficient options for proto=fd [ 171.976596][T10967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 171.990706][T10968] loop1: detected capacity change from 0 to 512 [ 171.997732][T10968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.010261][T10968] EXT4-fs (loop1): 1 orphan inode deleted [ 172.016252][T10968] EXT4-fs (loop1): 1 truncate cleaned up [ 172.022822][T10968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.083164][T10713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.645507][T10852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.696298][T10982] loop2: detected capacity change from 0 to 128 [ 172.703048][T10982] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 172.746607][T10984] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2588'. [ 172.779958][T10988] loop2: detected capacity change from 0 to 256 [ 172.797760][T10990] loop4: detected capacity change from 0 to 512 [ 173.013682][ T4639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.077348][ T4639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.133185][ T4639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.178915][T11000] chnl_net:caif_netlink_parms(): no params data found [ 173.189663][ T4639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.224850][T11000] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.232077][T11000] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.239628][T11000] bridge_slave_0: entered allmulticast mode [ 173.246113][T11000] bridge_slave_0: entered promiscuous mode [ 173.252949][T11000] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.260100][T11000] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.267301][T11000] bridge_slave_1: entered allmulticast mode [ 173.273869][T11000] bridge_slave_1: entered promiscuous mode [ 173.290745][T11000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.301262][T11000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.330497][T11000] team0: Port device team_slave_0 added [ 173.336350][ T4639] bridge_slave_1: left allmulticast mode [ 173.342112][ T4639] bridge_slave_1: left promiscuous mode [ 173.347886][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.355791][ T4639] bridge_slave_0: left allmulticast mode [ 173.361464][ T4639] bridge_slave_0: left promiscuous mode [ 173.367229][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.457089][ T4639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.467454][ T4639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.479277][ T4639] bond0 (unregistering): Released all slaves [ 173.488933][T11000] team0: Port device team_slave_1 added [ 173.509347][T11000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.516362][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.542355][T11000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.554539][T11000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.561631][T11000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.587769][T11000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.613030][ T4639] hsr_slave_0: left promiscuous mode [ 173.618774][ T4639] hsr_slave_1: left promiscuous mode [ 173.624480][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.631895][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.639391][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.646882][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.656334][ T4639] veth1_macvtap: left promiscuous mode [ 173.661880][ T4639] veth0_macvtap: left promiscuous mode [ 173.667434][ T4639] veth1_vlan: left promiscuous mode [ 173.672700][ T4639] veth0_vlan: left promiscuous mode [ 173.787517][ T4639] team0 (unregistering): Port device team_slave_1 removed [ 173.798489][ T4639] team0 (unregistering): Port device team_slave_0 removed [ 173.834834][T11000] hsr_slave_0: entered promiscuous mode [ 173.841364][T11000] hsr_slave_1: entered promiscuous mode [ 173.847832][T11000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.857099][T11000] Cannot create hsr debugfs directory [ 173.884811][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2599'. [ 173.894906][T11022] batadv0: entered promiscuous mode [ 173.900272][T11022] batadv0: entered allmulticast mode [ 173.928438][T11024] 9pnet_fd: Insufficient options for proto=fd [ 173.990452][T11026] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.021289][T11028] 9pnet_fd: Insufficient options for proto=fd [ 174.028801][T11028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.081233][T11031] loop2: detected capacity change from 0 to 2048 [ 174.093892][T11031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.245419][T11000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.253952][T11000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.262726][T11000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.271282][T11000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.304704][T11000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.316901][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.325969][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.333055][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.345334][ T258] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.352533][ T258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.413917][T11000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.476364][T11000] veth0_vlan: entered promiscuous mode [ 174.484868][T11000] veth1_vlan: entered promiscuous mode [ 174.500165][T11000] veth0_macvtap: entered promiscuous mode [ 174.507467][T11000] veth1_macvtap: entered promiscuous mode [ 174.518177][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.528653][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.538562][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.549059][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.559004][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.569440][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.579426][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.589948][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.600910][T11000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.610497][T11039] netlink: 'syz.0.2603': attribute type 27 has an invalid length. [ 174.619680][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.630197][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.640080][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.650632][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.660485][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.670927][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.681027][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.691514][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.702171][T11000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.711941][T11000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.720908][T11000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.729646][T11000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.738347][T11000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.792983][T11060] loop4: detected capacity change from 0 to 512 [ 174.809010][T11060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.821584][T11060] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.848041][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.850027][T11063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.885252][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 174.885267][ T29] audit: type=1326 audit(1725112728.901:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 174.917031][ T29] audit: type=1326 audit(1725112728.901:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 174.940597][ T29] audit: type=1326 audit(1725112728.901:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 174.964120][ T29] audit: type=1326 audit(1725112728.901:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 174.987639][ T29] audit: type=1326 audit(1725112728.901:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 175.011141][ T29] audit: type=1326 audit(1725112728.901:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 175.034733][ T29] audit: type=1326 audit(1725112728.901:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 175.058269][ T29] audit: type=1326 audit(1725112728.901:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 175.081754][ T29] audit: type=1326 audit(1725112728.901:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 175.105303][ T29] audit: type=1326 audit(1725112728.919:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.4.2608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd911ee9eb9 code=0x7ffc0000 [ 175.137671][T10852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.223631][T11071] 9pnet_fd: Insufficient options for proto=fd [ 175.230905][T11071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.259312][T11076] 9pnet_fd: Insufficient options for proto=fd [ 175.283579][T11079] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 175.291815][T11079] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 175.303811][T11083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2615'. [ 175.307761][T11079] loop3: detected capacity change from 0 to 1024 [ 175.330204][T11079] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2613: bad orphan inode 1536 [ 175.331526][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 175.341328][T11079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.351950][T11087] macvtap1: entered promiscuous mode [ 175.366696][T11087] erspan0: entered promiscuous mode [ 175.372050][T11087] macvtap1: entered allmulticast mode [ 175.377413][T11087] erspan0: entered allmulticast mode [ 175.386512][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 175.396241][T11087] erspan0: left allmulticast mode [ 175.397336][T10268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.401275][T11087] erspan0: left promiscuous mode [ 175.442309][T11089] syzkaller0: entered promiscuous mode [ 175.447962][T11089] syzkaller0: entered allmulticast mode [ 175.476842][T11091] loop4: detected capacity change from 0 to 128 [ 175.487367][T11091] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 175.495218][T11091] FAT-fs (loop4): Filesystem has been set read-only [ 175.575715][T11095] loop3: detected capacity change from 0 to 2048 [ 175.589113][T11093] loop4: detected capacity change from 0 to 512 [ 175.596762][T11095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.617813][T11095] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 175.629485][T11093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.642530][T11093] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.672278][T11107] 9pnet_fd: Insufficient options for proto=fd [ 175.692612][T10268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.695101][T11109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2624'. [ 175.734167][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.738065][T11111] syzkaller0: entered promiscuous mode [ 175.748627][T11111] syzkaller0: entered allmulticast mode [ 175.827749][T11113] 9pnet_fd: Insufficient options for proto=fd [ 175.854181][T11119] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 175.862488][T11119] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 175.875286][T11119] loop4: detected capacity change from 0 to 1024 [ 175.889833][T11121] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.905924][T11119] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2627: bad orphan inode 1536 [ 175.914607][T11125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=11125 comm=syz.1.2630 [ 175.916996][T11119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.955447][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.035179][T11137] 9pnet_fd: Insufficient options for proto=fd [ 176.099522][T11139] loop4: detected capacity change from 0 to 2048 [ 176.112082][T11142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.137882][T11139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.181006][T11139] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 176.293607][T11146] 9pnet_fd: Insufficient options for proto=fd [ 176.308053][T11148] loop1: detected capacity change from 0 to 128 [ 176.310902][T11149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'. [ 176.315393][T11148] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 176.325281][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.355812][T11152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 176.361415][T11154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=11154 comm=syz.1.2641 [ 176.405636][T11151] syzkaller0: entered promiscuous mode [ 176.411164][T11151] syzkaller0: entered allmulticast mode [ 176.417298][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'. [ 176.427821][T11156] team0: entered promiscuous mode [ 176.432933][T11156] team_slave_0: entered promiscuous mode [ 176.438672][T11156] team_slave_1: entered promiscuous mode [ 176.444422][T11156] team0: entered allmulticast mode [ 176.449558][T11156] team_slave_0: entered allmulticast mode [ 176.455320][T11156] team_slave_1: entered allmulticast mode [ 176.508231][T11158] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 176.516531][T11158] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 176.536364][T11158] loop1: detected capacity change from 0 to 1024 [ 176.564874][T11158] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2643: bad orphan inode 1536 [ 176.575781][T11158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.603620][T11000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.671858][T11168] 9pnet_fd: Insufficient options for proto=fd [ 176.695536][T11170] loop3: detected capacity change from 0 to 256 [ 176.726904][T11179] loop4: detected capacity change from 0 to 512 [ 176.733376][T11179] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.740328][T11179] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 176.749500][T11179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 176.757524][T11179] System zones: 1-12 [ 176.761795][T11179] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2652: corrupted in-inode xattr: e_value size too large [ 176.787428][T11179] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2652: couldn't read orphan inode 15 (err -117) [ 176.823565][T11179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.930258][T11191] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 176.938580][T11191] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 176.951709][T11191] loop1: detected capacity change from 0 to 1024 [ 176.964830][T11191] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2655: bad orphan inode 1536 [ 176.975864][T11191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.997756][T11000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.210325][T11203] 9pnet_fd: Insufficient options for proto=fd [ 177.272428][T11205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 177.377215][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2658'. [ 177.609429][T11212] loop1: detected capacity change from 0 to 256 [ 177.642028][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.652198][T11214] loop0: detected capacity change from 0 to 2048 [ 177.669274][T11214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.757269][T11222] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 177.780511][T11224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2666'. [ 177.796416][T11225] loop4: detected capacity change from 0 to 512 [ 177.803060][T11222] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.822215][T11225] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.839115][T11222] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 177.851448][T11222] EXT4-fs (loop0): This should not happen!! Data will be lost [ 177.851448][T11222] [ 177.861120][T11222] EXT4-fs (loop0): Total free blocks count 0 [ 177.867144][T11222] EXT4-fs (loop0): Free/Dirty block details [ 177.873088][T11222] EXT4-fs (loop0): free_blocks=2415919104 [ 177.874071][T11227] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 177.878821][T11222] EXT4-fs (loop0): dirty_blocks=32 [ 177.886991][T11227] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 177.892049][T11222] EXT4-fs (loop0): Block reservation details [ 177.892063][T11222] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 177.915143][T11227] loop3: detected capacity change from 0 to 1024 [ 177.917537][T11225] EXT4-fs (loop4): 1 orphan inode deleted [ 177.926904][T11214] Direct I/O collision with buffered writes! File: /bus Comm: syz.0.2663 [ 177.927187][T11225] EXT4-fs (loop4): 1 truncate cleaned up [ 177.931640][T11225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.937236][T11227] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2667: bad orphan inode 1536 [ 177.964094][T11227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.024176][T10268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.046768][ T9779] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.299064][T11246] chnl_net:caif_netlink_parms(): no params data found [ 178.339882][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.347029][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.354531][T11246] bridge_slave_0: entered allmulticast mode [ 178.360911][T11246] bridge_slave_0: entered promiscuous mode [ 178.368200][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.375342][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.382665][T11246] bridge_slave_1: entered allmulticast mode [ 178.389435][T11246] bridge_slave_1: entered promiscuous mode [ 178.403811][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2670'. [ 178.414596][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.425508][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.452750][T11246] team0: Port device team_slave_0 added [ 178.458864][ T4639] bridge_slave_1: left allmulticast mode [ 178.464510][ T4639] bridge_slave_1: left promiscuous mode [ 178.470269][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.478065][ T4639] bridge_slave_0: left allmulticast mode [ 178.483769][ T4639] bridge_slave_0: left promiscuous mode [ 178.489460][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.581983][ T4639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.594554][ T4639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.604366][ T4639] bond0 (unregistering): Released all slaves [ 178.615259][T11246] team0: Port device team_slave_1 added [ 178.633380][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.640351][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.646104][T11264] loop1: detected capacity change from 0 to 512 [ 178.666450][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.685684][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.688173][T11264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.692655][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.706771][T11264] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.730931][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.764307][T11000] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.776262][T11246] hsr_slave_0: entered promiscuous mode [ 178.782164][T11246] hsr_slave_1: entered promiscuous mode [ 178.788301][T11246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.795906][T11246] Cannot create hsr debugfs directory [ 178.836802][ T4639] hsr_slave_0: left promiscuous mode [ 178.842508][ T4639] hsr_slave_1: left promiscuous mode [ 178.848116][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.855764][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.900586][ T4639] team0 (unregistering): Port device team_slave_1 removed [ 178.910902][ T4639] team0 (unregistering): Port device team_slave_0 removed [ 178.969920][T11272] loop3: detected capacity change from 0 to 2048 [ 178.994931][T11272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.091300][T10268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.114819][T11285] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 179.123039][T11285] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 179.137825][T11285] loop3: detected capacity change from 0 to 1024 [ 179.166008][T11285] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2682: bad orphan inode 1536 [ 179.172885][T11281] loop2: detected capacity change from 0 to 512 [ 179.176790][T11285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.182974][T11281] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.207842][T11281] EXT4-fs (loop2): 1 orphan inode deleted [ 179.213580][T11281] EXT4-fs (loop2): 1 truncate cleaned up [ 179.221244][T11281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.244567][T10268] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.323890][T10852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 179.341994][T10852] EXT4-fs (loop2): Remounting filesystem read-only [ 179.349111][T10852] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 179.358338][T10852] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=16 [ 179.369821][T11290] 9pnet_fd: Insufficient options for proto=fd [ 179.373852][T11246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.391652][T11246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.400078][T11246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.408499][T11246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.437493][T11291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.453231][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.469142][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.480703][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.487843][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.498410][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.505531][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.566359][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.607968][T10852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.701446][T11246] veth0_vlan: entered promiscuous mode [ 179.719252][T11246] veth1_vlan: entered promiscuous mode [ 179.735061][T11246] veth0_macvtap: entered promiscuous mode [ 179.746959][ T4639] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.759298][T11246] veth1_macvtap: entered promiscuous mode [ 179.781610][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.792231][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.802329][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.812973][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.822792][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.833265][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.843118][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.853620][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.863450][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.873948][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.884992][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.895898][ T4639] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.912501][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.923176][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.933195][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.943705][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.953542][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.963965][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.973828][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.984510][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.994428][T11246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.004887][T11246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.015531][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.032788][ T4639] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.044782][T11246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.053516][T11246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.062588][T11246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.071274][T11246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.105050][ T4639] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.121627][T11308] chnl_net:caif_netlink_parms(): no params data found [ 180.171501][T11308] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.178620][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.187470][T11308] bridge_slave_0: entered allmulticast mode [ 180.194061][T11308] bridge_slave_0: entered promiscuous mode [ 180.200938][T11308] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.208024][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.215510][T11308] bridge_slave_1: entered allmulticast mode [ 180.222331][T11308] bridge_slave_1: entered promiscuous mode [ 180.231267][T11329] loop4: detected capacity change from 0 to 256 [ 180.247975][T11329] FAT-fs (loop4): bogus logical sector size 8 [ 180.254076][T11329] FAT-fs (loop4): Can't find a valid FAT filesystem [ 180.270523][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2689'. [ 180.289063][T11308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.300450][T11308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.309598][ T4639] bridge_slave_1: left allmulticast mode [ 180.315441][ T4639] bridge_slave_1: left promiscuous mode [ 180.321265][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.331400][ T4639] bridge_slave_0: left allmulticast mode [ 180.337087][ T4639] bridge_slave_0: left promiscuous mode [ 180.342707][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.371607][T11339] loop4: detected capacity change from 0 to 2048 [ 180.390760][T11339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.406840][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 180.406854][ T29] audit: type=1326 audit(1725112733.986:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.437370][T11339] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 180.439316][ T29] audit: type=1326 audit(1725112733.986:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.470920][ T29] audit: type=1326 audit(1725112733.986:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.494420][ T29] audit: type=1326 audit(1725112733.986:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4a563e8757 code=0x7ffc0000 [ 180.517971][ T29] audit: type=1326 audit(1725112733.986:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4a563eb65a code=0x7ffc0000 [ 180.541691][ T29] audit: type=1326 audit(1725112734.032:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a563e8850 code=0x7ffc0000 [ 180.565366][ T29] audit: type=1326 audit(1725112734.032:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.589027][ T29] audit: type=1326 audit(1725112734.032:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.612663][ T29] audit: type=1326 audit(1725112734.032:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.636321][ T29] audit: type=1326 audit(1725112734.032:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11338 comm="syz.4.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a563e9eb9 code=0x7ffc0000 [ 180.661668][T11246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.679815][T11347] 9pnet_fd: Insufficient options for proto=fd [ 180.715177][ T4639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.724174][T11350] loop4: detected capacity change from 0 to 512 [ 180.732688][ T4639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.743775][ T4639] bond0 (unregistering): Released all slaves [ 180.747589][T11355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.757306][T11354] loop1: detected capacity change from 0 to 1024 [ 180.764452][T11355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.768482][T11354] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2694: bad orphan inode 1536 [ 180.795709][T11354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.811802][T11308] team0: Port device team_slave_0 added [ 180.821758][T11308] team0: Port device team_slave_1 added [ 180.840971][T11308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.847961][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.873935][T11308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.899994][T11348] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 180.900158][T11308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.908217][T11348] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 180.923556][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.949542][T11308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.982957][ T4639] hsr_slave_0: left promiscuous mode [ 180.994257][ T4639] hsr_slave_1: left promiscuous mode [ 181.000909][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.008610][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.019783][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.027269][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.040018][ T4639] veth1_macvtap: left promiscuous mode [ 181.045504][ T4639] veth0_macvtap: left promiscuous mode [ 181.051036][ T4639] veth1_vlan: left promiscuous mode [ 181.056308][ T4639] veth0_vlan: left promiscuous mode [ 181.107508][T11361] 9pnet_fd: Insufficient options for proto=fd [ 181.235039][ T4639] team0 (unregistering): Port device team_slave_1 removed [ 181.248178][ T4639] team0 (unregistering): Port device team_slave_0 removed [ 181.306148][T11364] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 181.374689][T11308] hsr_slave_0: entered promiscuous mode [ 181.380896][T11308] hsr_slave_1: entered promiscuous mode [ 181.388585][T11308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.396475][T11308] Cannot create hsr debugfs directory [ 181.648001][T11372] loop3: detected capacity change from 0 to 256 [ 181.656596][T11372] FAT-fs (loop3): bogus logical sector size 8 [ 181.662686][T11372] FAT-fs (loop3): Can't find a valid FAT filesystem [ 181.808768][T11308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 181.817301][T11308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 181.826031][T11308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 181.835084][T11308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.868873][T11308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.882054][T11308] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.891533][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.898679][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.911141][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.918246][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.999959][T11308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.083897][T11308] veth0_vlan: entered promiscuous mode [ 182.094189][T11308] veth1_vlan: entered promiscuous mode [ 182.110349][T11391] loop1: detected capacity change from 0 to 256 [ 182.112934][T11308] veth0_macvtap: entered promiscuous mode [ 182.124500][T11308] veth1_macvtap: entered promiscuous mode [ 182.138038][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.148556][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.158396][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.168873][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.178751][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.189213][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.199107][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.209537][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.209554][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.209567][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.241814][T11308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.250297][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.260888][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.270784][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.281492][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.291506][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.302193][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.312115][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.312128][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.312140][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.312151][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.313332][T11308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.380261][T11394] syzkaller0: entered promiscuous mode [ 182.385779][T11394] syzkaller0: entered allmulticast mode [ 182.393888][T11308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.402637][T11308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.411381][T11308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.420185][T11308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.452110][T11397] __nla_validate_parse: 1 callbacks suppressed [ 182.452125][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2706'. [ 182.469899][T11397] bridge0: entered promiscuous mode [ 182.475215][T11397] macvtap1: entered promiscuous mode [ 182.480830][T11397] macvtap1: entered allmulticast mode [ 182.486230][T11397] bridge0: entered allmulticast mode [ 182.535670][T11406] syz.3.2709[11406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.535732][T11406] syz.3.2709[11406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.545100][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2710'. [ 182.604201][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 182.631113][T11414] 9pnet_fd: Insufficient options for proto=fd [ 182.663169][T11419] loop3: detected capacity change from 0 to 512 [ 182.676171][T11419] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.712372][T11426] 9pnet_fd: Insufficient options for proto=fd [ 182.793237][T11429] loop1: detected capacity change from 0 to 512 [ 182.799958][T11429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 182.812385][T11429] EXT4-fs (loop1): 1 orphan inode deleted [ 182.818144][T11429] EXT4-fs (loop1): 1 truncate cleaned up [ 183.268564][T11433] chnl_net:caif_netlink_parms(): no params data found [ 183.296403][ T4639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.316984][T11433] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.324079][T11433] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.331201][T11433] bridge_slave_0: entered allmulticast mode [ 183.337520][T11433] bridge_slave_0: entered promiscuous mode [ 183.344323][T11433] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.351566][T11433] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.358962][T11433] bridge_slave_1: entered allmulticast mode [ 183.365432][T11433] bridge_slave_1: entered promiscuous mode [ 183.374121][ T4639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.395313][T11433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.405908][T11433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.425995][T11433] team0: Port device team_slave_0 added [ 183.436339][ T4639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.448308][T11433] team0: Port device team_slave_1 added [ 183.463633][T11433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.470699][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.496777][T11433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.508310][T11433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.515304][T11433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.541290][T11433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.558833][ T4639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.585117][T11453] syz.0.2723[11453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.585282][T11453] syz.0.2723[11453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.586179][T11433] hsr_slave_0: entered promiscuous mode [ 183.616696][T11433] hsr_slave_1: entered promiscuous mode [ 183.622865][T11433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.630524][T11433] Cannot create hsr debugfs directory [ 183.659342][ T4639] bridge_slave_1: left allmulticast mode [ 183.665034][ T4639] bridge_slave_1: left promiscuous mode [ 183.670735][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.685018][T11457] 9pnet_fd: Insufficient options for proto=fd [ 183.691892][ T4639] bridge_slave_0: left allmulticast mode [ 183.697616][ T4639] bridge_slave_0: left promiscuous mode [ 183.703286][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.708297][T11459] loop0: detected capacity change from 0 to 2048 [ 183.733072][T11462] loop3: detected capacity change from 0 to 2048 [ 183.776505][ T4639] bridge0 (unregistering): left allmulticast mode [ 183.811935][T11462] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 183.833006][T11468] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 183.850474][T11468] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 183.865429][T11468] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 183.877742][T11468] EXT4-fs (loop0): This should not happen!! Data will be lost [ 183.877742][T11468] [ 183.887413][T11468] EXT4-fs (loop0): Total free blocks count 0 [ 183.893449][T11468] EXT4-fs (loop0): Free/Dirty block details [ 183.899432][T11468] EXT4-fs (loop0): free_blocks=2415919104 [ 183.905151][T11468] EXT4-fs (loop0): dirty_blocks=32 [ 183.910351][T11468] EXT4-fs (loop0): Block reservation details [ 183.916317][T11468] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 183.943578][ T4639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.954361][ T4639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.965016][ T4639] bond0 (unregistering): Released all slaves [ 184.050569][T11472] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 184.058897][T11472] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 184.072670][T11472] loop4: detected capacity change from 0 to 1024 [ 184.079108][ T4639] hsr_slave_0: left promiscuous mode [ 184.085488][ T4639] hsr_slave_1: left promiscuous mode [ 184.091350][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.098891][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.100402][T11472] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2728: bad orphan inode 1536 [ 184.118574][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.126071][ T4639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.135266][ T4639] veth1_macvtap: left promiscuous mode [ 184.140815][ T4639] veth0_macvtap: left promiscuous mode [ 184.146349][ T4639] veth1_vlan: left promiscuous mode [ 184.151628][ T4639] veth0_vlan: left promiscuous mode [ 184.229860][ T4639] team_slave_1 (unregistering): left promiscuous mode [ 184.236677][ T4639] team_slave_1 (unregistering): left allmulticast mode [ 184.246850][ T4639] team0 (unregistering): Port device team_slave_1 removed [ 184.256689][ T4639] team_slave_0 (unregistering): left promiscuous mode [ 184.263482][ T4639] team_slave_0 (unregistering): left allmulticast mode [ 184.271043][ T4639] team0 (unregistering): Port device team_slave_0 removed [ 184.314528][T11473] netlink: 'syz.3.2727': attribute type 27 has an invalid length. [ 184.322712][T11473] macvtap1: left promiscuous mode [ 184.328078][T11473] macvtap1: left allmulticast mode [ 184.368052][T11482] loop3: detected capacity change from 0 to 256 [ 184.395095][T11491] syz.4.2735[11491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.395170][T11491] syz.4.2735[11491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.448728][T11496] loop4: detected capacity change from 0 to 2048 [ 184.484446][T11496] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 184.561304][T11433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.573720][T11433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.583397][T11433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.595067][T11433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.621575][T11505] loop2: detected capacity change from 0 to 2048 [ 184.634955][T11433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.653361][T11505] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 184.658785][T11433] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.675568][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.682736][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.694532][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.701682][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.741838][T11512] syz.2.2739[11512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.741900][T11512] syz.2.2739[11512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.757776][T11512] netlink: 'syz.2.2739': attribute type 4 has an invalid length. [ 184.778004][T11512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.801675][T11433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.874823][T11433] veth0_vlan: entered promiscuous mode [ 184.883073][T11433] veth1_vlan: entered promiscuous mode [ 184.898589][T11433] veth0_macvtap: entered promiscuous mode [ 184.905887][T11433] veth1_macvtap: entered promiscuous mode [ 184.917213][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.927778][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.937615][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.948099][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.957934][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.968350][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.978182][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.988701][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.998512][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.008967][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.020085][T11433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.028748][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.039291][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.049307][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.059814][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.069735][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.080177][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.090068][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.100558][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.110427][T11433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.120994][T11433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.132106][T11433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.142589][T11522] netlink: 'syz.2.2740': attribute type 27 has an invalid length. [ 185.193149][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.200430][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.285511][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.305538][T11522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.362731][T11522] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.371725][T11522] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.380587][T11522] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.389703][T11522] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.418316][T11433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.427247][T11433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.436077][T11433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.444817][T11433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.542562][T11542] syz.2.2746[11542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.542672][T11542] syz.2.2746[11542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.617310][T11549] syzkaller0: entered promiscuous mode [ 185.634260][T11549] syzkaller0: entered allmulticast mode [ 186.337097][T11553] loop3: detected capacity change from 0 to 256 [ 186.432222][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 186.432236][ T29] audit: type=1326 audit(1725112739.543:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.1.2744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2333ae9eb9 code=0x7fc00000 [ 186.513667][T11566] loop1: detected capacity change from 0 to 256 [ 186.632956][T11558] netlink: 'syz.3.2752': attribute type 27 has an invalid length. [ 186.705261][T11582] loop3: detected capacity change from 0 to 512 [ 186.711779][T11582] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.718633][T11582] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 186.728044][T11582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 186.737936][T11582] System zones: 1-12 [ 186.742137][T11582] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2760: corrupted in-inode xattr: e_value size too large [ 186.756337][T11582] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2760: couldn't read orphan inode 15 (err -117) [ 187.063886][T11588] loop0: detected capacity change from 0 to 256 [ 187.215955][ T29] audit: type=1326 audit(1725112740.272:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.239518][ T29] audit: type=1326 audit(1725112740.272:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.263004][ T29] audit: type=1326 audit(1725112740.272:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.286475][ T29] audit: type=1326 audit(1725112740.272:7940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.309971][ T29] audit: type=1326 audit(1725112740.272:7941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.333459][ T29] audit: type=1326 audit(1725112740.272:7942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.356949][ T29] audit: type=1326 audit(1725112740.272:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.380469][ T29] audit: type=1326 audit(1725112740.272:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11590 comm="syz.0.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4a889eb9 code=0x7ffc0000 [ 187.608754][ T29] audit: type=1326 audit(1725112740.632:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.1.2765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2333ae9eb9 code=0x0 [ 187.672469][T11602] loop3: detected capacity change from 0 to 256 [ 187.854882][T11619] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 187.863284][T11619] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 187.878351][T11619] loop3: detected capacity change from 0 to 1024 [ 187.898138][T11619] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2774: bad orphan inode 1536 [ 187.912829][T11607] netlink: 'syz.4.2769': attribute type 27 has an invalid length. [ 187.989757][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.997053][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.114356][T11607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.135702][T11607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.205095][T11607] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.214135][T11607] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.223059][T11607] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.232055][T11607] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.265990][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2765'. [ 188.313594][T11637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2780'. [ 188.321685][T11634] loop4: detected capacity change from 0 to 2048 [ 188.361167][T11634] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 188.390346][T11641] loop0: detected capacity change from 0 to 256 [ 188.869101][T11651] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 188.877629][T11651] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 188.892542][T11651] loop3: detected capacity change from 0 to 1024 [ 188.903769][T11424] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.907640][T11651] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2785: bad orphan inode 1536 [ 189.147699][T11663] netlink: 'syz.3.2790': attribute type 27 has an invalid length. [ 189.188287][T11671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2792'. [ 189.232671][T11673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=11673 comm=syz.3.2793 [ 189.273660][T11677] bpf_get_probe_write_proto: 2 callbacks suppressed [ 189.273677][T11677] syz.3.2795[11677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.280334][T11677] syz.3.2795[11677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.295011][T11677] netlink: 'syz.3.2795': attribute type 4 has an invalid length. [ 189.315777][T11677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.457003][T11688] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 189.465380][T11688] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 189.478269][T11688] loop3: detected capacity change from 0 to 1024 [ 189.489009][T11688] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2799: bad orphan inode 1536 [ 189.599770][T11694] 9pnet_fd: Insufficient options for proto=fd [ 189.662473][T11695] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 190.029908][T11697] netlink: 'syz.1.2802': attribute type 27 has an invalid length. [ 190.090347][T11697] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.097660][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.169256][T11697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.185233][T11697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.250246][T11697] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.259291][T11697] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.268728][T11697] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.278045][T11697] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.288861][T11704] loop0: detected capacity change from 0 to 512 [ 190.319709][T11704] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.329746][T11709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=11709 comm=syz.1.2805 [ 190.403655][T11714] ================================================================== [ 190.411772][T11714] BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll [ 190.418886][T11714] [ 190.421200][T11714] read-write to 0xffff8881140f4070 of 4 bytes by task 11713 on cpu 0: [ 190.429344][T11714] io_submit_sqes+0x23f/0x1080 [ 190.434104][T11714] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 190.439659][T11714] __x64_sys_io_uring_enter+0x78/0x90 [ 190.445025][T11714] x64_sys_call+0x2567/0x2d60 [ 190.449702][T11714] do_syscall_64+0xc9/0x1c0 [ 190.454200][T11714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.460098][T11714] [ 190.462415][T11714] read to 0xffff8881140f4070 of 4 bytes by task 11714 on cpu 1: [ 190.470041][T11714] io_uring_poll+0xcf/0x190 [ 190.474546][T11714] __io_arm_poll_handler+0x229/0xf30 [ 190.479834][T11714] io_arm_poll_handler+0x433/0x5f0 [ 190.484958][T11714] io_wq_submit_work+0x512/0x600 [ 190.489894][T11714] io_worker_handle_work+0x486/0x9d0 [ 190.495174][T11714] io_wq_worker+0x286/0x820 [ 190.499668][T11714] ret_from_fork+0x4b/0x60 [ 190.504077][T11714] ret_from_fork_asm+0x1a/0x30 [ 190.508848][T11714] [ 190.511159][T11714] value changed: 0x00000faa -> 0x00000fad [ 190.516867][T11714] [ 190.519176][T11714] Reported by Kernel Concurrency Sanitizer on: [ 190.525315][T11714] CPU: 1 UID: 0 PID: 11714 Comm: iou-wrk-11713 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 190.536330][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 190.546387][T11714] ==================================================================