last executing test programs: 3.902132303s ago: executing program 2 (id=9576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002140000000000000000000008500000075000000a50000002300040095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) 3.838313809s ago: executing program 2 (id=9578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, "195847a0aa45de6b85eae3efca1b99bbc529f7cf", "39e8599818f836f17fc62ac05f77a36d35695c8b"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00002806000100"], 0x1c}}, 0x0) 3.81411803s ago: executing program 2 (id=9580): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000080)) 3.794743702s ago: executing program 2 (id=9581): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) io_uring_setup(0x6b6e, &(0x7f0000000080)={0x0, 0x54c1, 0x2, 0xfffffffd, 0x1}) 3.754029675s ago: executing program 2 (id=9583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d00011c8500"/20, @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}}, 0x0) 3.753336165s ago: executing program 1 (id=9584): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d00)={{r1}, &(0x7f0000000c80), &(0x7f0000000cc0)='%pi6 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 3.724216168s ago: executing program 1 (id=9586): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x80044502, 0x0) 3.713122699s ago: executing program 1 (id=9588): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_list_modules(0x0, 0x0, 0x0) 3.665087713s ago: executing program 1 (id=9590): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x40000000) fallocate(r0, 0x100000003, 0x1, 0x28000001) 3.498650147s ago: executing program 1 (id=9595): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x249, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) getdents64(r0, &(0x7f0000002ec0)=""/4096, 0x1000) 3.120864808s ago: executing program 2 (id=9601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f6ff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 2.591258903s ago: executing program 1 (id=9611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) 1.716378596s ago: executing program 4 (id=9630): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 1.329485748s ago: executing program 4 (id=9643): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184d, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 739.994198ms ago: executing program 0 (id=9657): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) 437.020093ms ago: executing program 0 (id=9658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0xffffeffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000004c0), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 436.590193ms ago: executing program 4 (id=9660): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1070a, &(0x7f0000000940)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x7fff}}, {@noinit_itable}, {@minixdf}, {@resgid}, {@grpquota}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffff}}, {@nodiscard}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0x100000001}) 391.290707ms ago: executing program 4 (id=9661): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 365.892719ms ago: executing program 0 (id=9663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x0, 0x0, 0x0, {}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffff}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 350.42893ms ago: executing program 3 (id=9664): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000001480)=[{0x200000000006, 0x54, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x37) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) 338.258381ms ago: executing program 4 (id=9665): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6005, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 327.950472ms ago: executing program 0 (id=9666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 299.216725ms ago: executing program 3 (id=9667): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x6, 0x4eb, &(0x7f0000000540)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 270.251777ms ago: executing program 3 (id=9668): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./bus\x00') pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000780)="f7", 0x1}], 0x1, 0x7fff, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x5) 222.421201ms ago: executing program 3 (id=9669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}}, 0x0) 205.926493ms ago: executing program 4 (id=9670): r0 = semget$private(0x0, 0x6, 0x583) semop(r0, 0x0, 0x0) semop(r0, &(0x7f00000001c0)=[{0x0, 0x8000}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x20) semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x0, 0xffff}, {0x0, 0x19}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x40]) 103.986261ms ago: executing program 3 (id=9671): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="1003fcffe0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 101.648942ms ago: executing program 0 (id=9672): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000025000100000000000000000003"], 0x114}], 0x1}, 0x0) 21.238308ms ago: executing program 3 (id=9673): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=9674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) kernel console output (not intermixed with test programs): 1][T13474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 369.044896][T13479] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 369.062459][T13474] EXT4-fs (loop2): 1 truncate cleaned up [ 369.087168][T13474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.112144][T13474] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 369.136204][T13474] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 369.170766][T13474] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 369.188969][T13487] loop4: detected capacity change from 0 to 736 [ 369.210851][T13487] rock: directory entry would overflow storage [ 369.217069][T13487] rock: sig=0x5850, size=36, remaining=14 [ 369.226672][ T5430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.262163][T13496] siw: device registration error -23 [ 369.298999][T13504] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 369.333935][T13508] vlan2: entered allmulticast mode [ 369.408596][T13523] syz.1.8640[13523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.408709][T13523] syz.1.8640[13523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.422090][T13523] syz.1.8640[13523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.500770][T13540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8651'. [ 369.550071][T13541] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 369.562348][T13540] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 369.579033][T13540] bond1: (slave vcan1): Error -95 calling set_mac_address [ 369.606834][T13583] loop1: detected capacity change from 0 to 2048 [ 369.631258][T13583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.699675][T10934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.730856][T13610] loop4: detected capacity change from 0 to 512 [ 369.736186][T13604] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 369.754673][T13604] vhci_hcd: default hub control req: 8007 v2000 i0000 l0 [ 369.964951][T13649] loop0: detected capacity change from 0 to 512 [ 369.990777][T13649] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 370.006410][T13649] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 370.025938][T13659] syz.3.8684[13659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.026009][T13659] syz.3.8684[13659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.039164][T13649] EXT4-fs (loop0): 1 truncate cleaned up [ 370.056813][T13649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.070148][T13659] syz.3.8684[13659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.175372][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 370.175390][ T29] audit: type=1400 audit(1729025779.020:14375): avc: denied { create } for pid=13673 comm="syz.3.8688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.202567][ T29] audit: type=1400 audit(1729025779.020:14376): avc: denied { write } for pid=13673 comm="syz.3.8688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.223346][ T29] audit: type=1400 audit(1729025779.020:14377): avc: denied { read } for pid=13673 comm="syz.3.8688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.244148][ T29] audit: type=1400 audit(1729025779.020:14378): avc: denied { ioctl } for pid=13673 comm="syz.3.8688" path="socket:[92381]" dev="sockfs" ino=92381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.270208][ T29] audit: type=1400 audit(1729025779.100:14379): avc: denied { write } for pid=13654 comm="syz.1.8682" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 370.314326][T13655] usb usb8: usbfs: process 13655 (syz.1.8682) did not claim interface 0 before use [ 370.327402][ T29] audit: type=1400 audit(1729025779.170:14380): avc: denied { create } for pid=13678 comm="syz.3.8690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.366645][ T29] audit: type=1400 audit(1729025779.210:14381): avc: denied { unmount } for pid=2072 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 370.388330][ T2072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.414430][ T29] audit: type=1326 audit(1729025779.250:14382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ec32dff9 code=0x7ffc0000 [ 370.438147][ T29] audit: type=1326 audit(1729025779.260:14383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2ec32dff9 code=0x7ffc0000 [ 370.461960][ T29] audit: type=1326 audit(1729025779.260:14384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13682 comm="syz.1.8692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2ec32dff9 code=0x7ffc0000 [ 370.521894][T13694] SELinux: policydb version -1114927515 does not match my version range 15-33 [ 370.545174][T13694] SELinux: failed to load policy [ 370.556337][T13695] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13695 comm=syz.2.8695 [ 370.750568][T13727] SELinux: policydb version -1114927515 does not match my version range 15-33 [ 370.764251][T13727] SELinux: failed to load policy [ 370.773160][T13730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13730 comm=syz.3.8715 [ 370.804053][T13731] loop0: detected capacity change from 0 to 2048 [ 370.813508][T13731] EXT4-fs (loop0): unsupported inode size: 32768 [ 370.819958][T13731] EXT4-fs (loop0): blocksize: 2048 [ 370.830622][T13733] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 370.836776][T13752] loop4: detected capacity change from 0 to 1024 [ 370.848906][T13752] EXT4-fs: Ignoring removed bh option [ 370.852698][T13733] bond1: (slave vcan1): Error -95 calling set_mac_address [ 370.982842][T13795] netlink: 'syz.3.8726': attribute type 1 has an invalid length. [ 371.004638][T13795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.014133][T13816] bridge_slave_1: left allmulticast mode [ 371.019902][T13816] bridge_slave_1: left promiscuous mode [ 371.025584][T13816] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.035545][T13816] bridge_slave_0: left allmulticast mode [ 371.041272][T13816] bridge_slave_0: left promiscuous mode [ 371.047045][T13816] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.119637][T13795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.133786][T13795] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 371.169130][T13795] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 371.235920][T13859] block device autoloading is deprecated and will be removed. [ 371.246690][T13859] syz.1.8736: attempt to access beyond end of device [ 371.246690][T13859] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 371.450097][T13895] loop2: detected capacity change from 0 to 2048 [ 371.460297][T13895] EXT4-fs (loop2): unsupported inode size: 32768 [ 371.466725][T13895] EXT4-fs (loop2): blocksize: 2048 [ 371.472866][T13897] syz.0.8753: attempt to access beyond end of device [ 371.472866][T13897] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 371.493480][T13899] netlink: 'syz.4.8754': attribute type 1 has an invalid length. [ 371.515673][T13899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.547665][T13899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.549426][T13942] loop0: detected capacity change from 0 to 128 [ 371.554991][T13899] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 371.576712][T13899] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 371.711032][T13966] loop4: detected capacity change from 0 to 512 [ 371.711349][T13964] loop1: detected capacity change from 0 to 128 [ 371.721908][T13966] __nla_validate_parse: 9 callbacks suppressed [ 371.721926][T13966] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 371.741874][T13964] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.750466][T13966] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 371.754288][T13964] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.805784][T13966] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 371.869063][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8775'. [ 371.878096][T13996] bridge_slave_1: left allmulticast mode [ 371.883790][T13996] bridge_slave_1: left promiscuous mode [ 371.889663][T13996] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.906933][T13996] bridge_slave_0: left allmulticast mode [ 371.912676][T13996] bridge_slave_0: left promiscuous mode [ 371.918517][T13996] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.028689][T14007] netlink: 'syz.2.8778': attribute type 1 has an invalid length. [ 372.045495][T14007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.066894][T14007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.074355][T14007] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 372.086580][T14007] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 372.096660][T13978] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.262111][T14080] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8791'. [ 372.291981][T14060] lo speed is unknown, defaulting to 1000 [ 372.405384][T14060] chnl_net:caif_netlink_parms(): no params data found [ 372.445240][T14231] syz.3.8803[14231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.445397][T14231] syz.3.8803[14231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.463476][T14231] syz.3.8803[14231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.477041][T14060] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.495583][T14060] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.503201][T14060] bridge_slave_0: entered allmulticast mode [ 372.512454][T14060] bridge_slave_0: entered promiscuous mode [ 372.520105][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.527190][T14060] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.534571][T14060] bridge_slave_1: entered allmulticast mode [ 372.541177][T14060] bridge_slave_1: entered promiscuous mode [ 372.567088][T14060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.578014][T14060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.599637][T14060] team0: Port device team_slave_0 added [ 372.606546][T14060] team0: Port device team_slave_1 added [ 372.625707][T14060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.632801][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.658869][T14060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.670273][T14060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.677214][T14060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.703255][T14060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.731806][T14060] hsr_slave_0: entered promiscuous mode [ 372.738799][T14060] hsr_slave_1: entered promiscuous mode [ 372.744747][T14060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.752368][T14060] Cannot create hsr debugfs directory [ 372.777739][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.798731][T14381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8808'. [ 372.810564][ T35] IPVS: starting estimator thread 0... [ 372.810985][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.891145][T14060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.897618][T14385] IPVS: using max 2448 ests per chain, 122400 per kthread [ 372.963016][T14060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.002792][T14060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.052843][T14060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.069533][T14478] loop0: detected capacity change from 0 to 256 [ 373.076032][T14478] vfat: Unknown parameter '01777777777777777777777lCJ}tBꓵbI$%<.*:-?s# I{'P0^R/x3U`Q|`kA_SdUK2$-Rv;/}E 7Dӽ[b' [ 373.128927][T14060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.141109][T14060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.149883][T14060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.160001][T14060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.177174][T14060] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.184363][T14060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.229350][T14060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.241719][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.259547][T14060] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.277476][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.284570][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.295012][T14502] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8821'. [ 373.295999][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.311108][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.454091][T14060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.462026][T14531] netlink: 'syz.4.8830': attribute type 10 has an invalid length. [ 373.488455][T14535] loop0: detected capacity change from 0 to 512 [ 373.491084][T14531] team0: Device hsr_slave_0 failed to register rx_handler [ 373.531563][T14535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.578329][T14535] ext4 filesystem being mounted at /607/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.695685][T14060] veth0_vlan: entered promiscuous mode [ 373.715401][T14060] veth1_vlan: entered promiscuous mode [ 373.748828][T14060] veth0_macvtap: entered promiscuous mode [ 373.757680][T14060] veth1_macvtap: entered promiscuous mode [ 373.771307][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.781865][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.791793][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.802294][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.812210][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.822902][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.832884][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.843524][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.843927][T14546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.853402][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.872220][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.882064][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.892552][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.902435][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.912880][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.922736][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.933183][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.944945][T14060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.952467][T14546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.953936][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.970754][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.980635][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.991144][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.001229][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.011726][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.021677][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.032216][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.042366][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.053054][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.063097][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.073546][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.083390][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.093843][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.103757][T14060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.114300][T14060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.126041][T14060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.145185][T14060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.154041][T14060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.162417][ T2072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.162820][T14060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.180551][T14060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.479653][T14611] syz.1.8856[14611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.479732][T14611] syz.1.8856[14611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.491664][T14611] syz.1.8856[14611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.522469][T14613] loop2: detected capacity change from 0 to 164 [ 374.551085][T14613] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 374.568548][T14613] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 374.788050][T14651] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.898116][T14661] syz.4.8877[14661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.898255][T14661] syz.4.8877[14661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.911643][T14661] syz.4.8877[14661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.068452][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8883'. [ 375.089150][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8883'. [ 375.101693][T14678] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.110594][T14678] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.119412][T14678] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.128303][T14678] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.138134][T14678] vxlan0: entered allmulticast mode [ 375.193825][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 375.193902][ T29] audit: type=1400 audit(1729025784.040:14724): avc: denied { map } for pid=14689 comm="syz.4.8888" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 375.229012][ T29] audit: type=1400 audit(1729025784.040:14725): avc: denied { ioctl } for pid=14691 comm="syz.1.8889" path="socket:[93834]" dev="sockfs" ino=93834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.291271][ T29] audit: type=1400 audit(1729025784.140:14726): avc: denied { create } for pid=14697 comm="syz.1.8894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 375.342714][ T29] audit: type=1400 audit(1729025784.170:14727): avc: denied { write } for pid=14697 comm="syz.1.8894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 375.404203][T14710] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.448933][ T29] audit: type=1400 audit(1729025784.290:14728): avc: denied { read write } for pid=14711 comm="syz.3.8900" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 375.472748][ T29] audit: type=1400 audit(1729025784.290:14729): avc: denied { open } for pid=14711 comm="syz.3.8900" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 375.501308][T14712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.509974][T14717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8902'. [ 375.511304][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.526484][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.533938][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.541425][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.548859][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.556268][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.563756][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.571181][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.578653][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.586055][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.593598][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.601041][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.608474][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.615913][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.623370][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.630821][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.638246][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.645639][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.653089][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.660498][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.667923][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.675373][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.682820][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.690228][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.697710][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.705144][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.712536][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.720023][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.727431][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.734931][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.742364][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.749820][ T2936] hid-generic 0000:04AD:0000.0020: unknown main item tag 0x0 [ 375.758583][ T2936] hid-generic 0000:04AD:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.769072][T14712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.771347][ T29] audit: type=1400 audit(1729025784.620:14730): avc: denied { connect } for pid=14723 comm="syz.0.8905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.872284][T14759] bond1: entered promiscuous mode [ 375.877379][T14759] bond1: entered allmulticast mode [ 375.883187][T14759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.896369][T14759] bond1 (unregistering): Released all slaves [ 375.958145][T14831] loop0: detected capacity change from 0 to 2048 [ 375.964712][T14831] EXT4-fs: Ignoring removed orlov option [ 376.003109][T14831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.027582][ T29] audit: type=1400 audit(1729025784.870:14731): avc: denied { bind } for pid=14842 comm="syz.1.8921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.047424][ T29] audit: type=1400 audit(1729025784.870:14732): avc: denied { listen } for pid=14842 comm="syz.1.8921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.067363][ T29] audit: type=1400 audit(1729025784.870:14733): avc: denied { accept } for pid=14842 comm="syz.1.8921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 376.316067][T14869] loop1: detected capacity change from 0 to 1024 [ 376.338088][T14869] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 376.374914][T14869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.434558][T14855] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 376.486937][T14855] EXT4-fs (loop0): Remounting filesystem read-only [ 376.487670][T14869] loop1: detected capacity change from 1024 to 0 [ 376.501157][ T2018] loop: Write error at byte offset 9223372036854776831, length 1024. [ 376.509325][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 376.518758][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 376.532867][T14881] EXT4-fs (loop1): I/O error while writing superblock [ 376.559485][T14881] syz.1.8932: attempt to access beyond end of device [ 376.559485][T14881] loop1: rw=12288, sector=160, nr_sectors = 2 limit=0 [ 376.573544][T14881] syz.1.8932: attempt to access beyond end of device [ 376.573544][T14881] loop1: rw=12288, sector=192, nr_sectors = 2 limit=0 [ 376.618365][ T2072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.631284][T14060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.640967][T14060] syz-executor: attempt to access beyond end of device [ 376.640967][T14060] loop1: rw=2049, sector=2, nr_sectors = 2 limit=0 [ 376.654271][T14060] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 376.674430][T14060] EXT4-fs (loop1): I/O error while writing superblock [ 376.714612][T14901] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 376.762854][T14915] __nla_validate_parse: 1 callbacks suppressed [ 376.762871][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8949'. [ 376.812332][T14918] loop4: detected capacity change from 0 to 2048 [ 376.821290][T14918] EXT4-fs: Ignoring removed orlov option [ 376.993745][T14954] loop2: detected capacity change from 0 to 512 [ 377.003538][T14954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 377.032603][T14954] EXT4-fs (loop2): 1 truncate cleaned up [ 377.038756][T14954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.100146][ T5430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.249864][T14996] tipc: New replicast peer: 100.1.1.1 [ 377.255322][T14996] tipc: Enabled bearer , priority 10 [ 377.255702][T14995] loop1: detected capacity change from 0 to 1024 [ 377.268212][T14995] EXT4-fs: Ignoring removed orlov option [ 377.273913][T14995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.312734][T14999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8983'. [ 377.328176][T14995] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 377.340459][T14995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.380941][T14060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.504609][T15033] loop2: detected capacity change from 0 to 2048 [ 377.512068][T15033] EXT4-fs: Ignoring removed orlov option [ 377.545172][T15033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.695326][T15059] tipc: Started in network mode [ 377.700371][T15059] tipc: Node identity ac1414aa, cluster identity 4711 [ 377.732658][T15059] tipc: New replicast peer: 100.1.1.1 [ 377.738754][T15059] tipc: Enabled bearer , priority 10 [ 377.751880][T15066] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 377.883408][T15079] program syz.1.9017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.967766][T15054] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 378.010632][T15054] EXT4-fs (loop2): Remounting filesystem read-only [ 378.115320][ T5430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.205582][T15126] loop4: detected capacity change from 0 to 512 [ 378.221193][T15126] EXT4-fs: Ignoring removed i_version option [ 378.300418][T15147] loop0: detected capacity change from 0 to 512 [ 378.327426][T15149] loop2: detected capacity change from 0 to 512 [ 378.335080][T15147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.350290][T15149] EXT4-fs: Ignoring removed i_version option [ 378.354987][T15147] ext4 filesystem being mounted at /628/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.356482][T15149] EXT4-fs: Ignoring removed nobh option [ 378.381129][T15149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 378.421266][ T2072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.422109][T15149] EXT4-fs (loop2): 1 truncate cleaned up [ 378.453765][T15149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.523524][T15179] loop1: detected capacity change from 0 to 1024 [ 378.537873][T15179] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 378.547721][T15179] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 378.557395][T15179] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 378.569198][ T5430] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.570126][T15179] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.9053: unexpected bad inode w/o EXT4_IGET_BAD [ 378.592405][T15179] EXT4-fs (loop1): no journal found [ 378.597736][T15179] EXT4-fs (loop1): can't get journal size [ 378.608114][T15179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.647932][T15179] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9053: bg 0: block 32: padding at end of block bitmap is not set [ 378.686105][T14060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.707507][T15202] syz.1.9060[15202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.707713][T15202] syz.1.9060[15202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.733225][T15202] syz.1.9060[15202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 378.857507][ T2712] tipc: Node number set to 2886997162 [ 379.007214][T15254] syz.4.9077[15254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.346799][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9099'. [ 379.677223][T15354] lo speed is unknown, defaulting to 1000 [ 379.684733][T15357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.697632][T15357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.826707][T15391] loop0: detected capacity change from 0 to 512 [ 379.862231][T15391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.885562][T15391] ext4 filesystem being mounted at /639/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.922799][ T2072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.130898][T15424] siw: device registration error -23 [ 380.170272][T15432] netlink: 'syz.0.9138': attribute type 1 has an invalid length. [ 380.194455][T15432] bond1: entered promiscuous mode [ 380.203873][T15432] team_slave_1: entered promiscuous mode [ 380.210677][T15432] team0: Port device team_slave_1 removed [ 380.220408][T15432] bond1: (slave team_slave_1): Enslaving as an active interface with a down link [ 380.232096][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 380.232114][ T29] audit: type=1326 audit(1729025789.090:14936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.4.9139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.270608][ T29] audit: type=1326 audit(1729025789.090:14937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.4.9139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.294354][ T29] audit: type=1326 audit(1729025789.090:14938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.4.9139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.305507][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'. [ 380.317990][ T29] audit: type=1326 audit(1729025789.090:14939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.4.9139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.350460][ T29] audit: type=1326 audit(1729025789.090:14940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.4.9139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.374241][ T29] audit: type=1326 audit(1729025789.090:14941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.4.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.397952][ T29] audit: type=1326 audit(1729025789.090:14942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.4.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.421591][ T29] audit: type=1326 audit(1729025789.090:14943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.4.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.445410][ T29] audit: type=1326 audit(1729025789.090:14944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.4.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.469135][ T29] audit: type=1326 audit(1729025789.090:14945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15469 comm="syz.4.9140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 380.495575][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9145'. [ 380.517856][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9145'. [ 380.895672][T15546] tipc: New replicast peer: 100.1.1.1 [ 380.901180][T15546] tipc: Enabled bearer , priority 10 [ 381.094659][T15582] loop2: detected capacity change from 0 to 1024 [ 381.101480][T15582] EXT4-fs: Ignoring removed oldalloc option [ 381.119246][T15582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.150420][ T5430] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /523/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.175526][ T5430] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.198356][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.212569][ T5430] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /523/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.234268][ T5430] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.254010][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.265670][ T5430] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /523/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.287575][ T5430] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.307021][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.319463][ T5430] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /523/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.341409][ T5430] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.361030][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.372623][ T5430] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /523/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.394450][ T5430] EXT4-fs error (device loop2): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 381.414237][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.437972][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.443019][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9190'. [ 381.451483][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.490747][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.519683][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.522365][T15606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15606 comm=syz.0.9194 [ 381.535027][ T5430] EXT4-fs warning (device loop2): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 381.622659][ T7695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.738440][T15630] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 381.781616][T10729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.792035][T10729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.866279][T10729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.876673][T10729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.915868][T10729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.926403][T10729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.964821][T15649] SELinux: Context system_u:object_r:semanage_store_t:s0 is not valid (left unmapped). [ 381.979966][T10729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.990717][T10729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 382.031137][T15635] lo speed is unknown, defaulting to 1000 [ 382.101066][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9215'. [ 382.110049][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9215'. [ 382.240767][T10729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.251967][T10729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.263023][T10729] bond0 (unregistering): Released all slaves [ 382.272169][T10729] bond1 (unregistering): Released all slaves [ 382.282091][T10729] bond2 (unregistering): Released all slaves [ 382.292534][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9221'. [ 382.292842][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9220'. [ 382.371715][T10729] tipc: Disabling bearer [ 382.376992][T10729] tipc: Disabling bearer [ 382.382003][T10729] tipc: Left network mode [ 382.408969][T15635] chnl_net:caif_netlink_parms(): no params data found [ 382.412493][T15791] loop0: detected capacity change from 0 to 128 [ 382.455780][T10729] hsr_slave_0: left promiscuous mode [ 382.464388][T10729] hsr_slave_1: left promiscuous mode [ 382.473619][T10729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.481418][T10729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.490267][T10729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.497890][T10729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.507755][T10729] veth1_vlan: left promiscuous mode [ 382.513001][T10729] veth0_vlan: left promiscuous mode [ 382.603233][T10729] team0 (unregistering): Port device team_slave_1 removed [ 382.614904][T10729] team0 (unregistering): Port device team_slave_0 removed [ 382.681377][T15831] netem: change failed [ 382.694483][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.701736][T15635] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.710981][T15635] bridge_slave_0: entered allmulticast mode [ 382.717802][T15635] bridge_slave_0: entered promiscuous mode [ 382.725214][T15635] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.732372][T15635] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.739830][T15635] bridge_slave_1: entered allmulticast mode [ 382.746779][T15635] bridge_slave_1: entered promiscuous mode [ 382.771903][T15635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.783197][T15635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.805609][T15635] team0: Port device team_slave_0 added [ 382.812880][T15635] team0: Port device team_slave_1 added [ 382.833030][T15635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.840120][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.842188][T15942] loop0: detected capacity change from 0 to 128 [ 382.866085][T15635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.867151][T15635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.882946][T15942] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.883242][T15942] ext4 filesystem being mounted at /657/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 382.890037][T15635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.911863][T15942] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.9233: No space for directory leaf checksum. Please run e2fsck -D. [ 382.912467][T15635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.938485][T15942] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.9233: checksumming directory block 0 [ 382.977590][T15951] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.9233: No space for directory leaf checksum. Please run e2fsck -D. [ 382.993014][T15951] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.9233: checksumming directory block 0 [ 383.020289][T15635] hsr_slave_0: entered promiscuous mode [ 383.028496][T15635] hsr_slave_1: entered promiscuous mode [ 383.037157][ T2072] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 383.047066][T15635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.057213][T15977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9236'. [ 383.061793][T15635] Cannot create hsr debugfs directory [ 383.141776][T16028] bpf_get_probe_write_proto: 2 callbacks suppressed [ 383.141813][T16028] syz.4.9238[16028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.151330][T16028] syz.4.9238[16028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.168943][T16028] syz.4.9238[16028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.221184][T16054] loop0: detected capacity change from 0 to 512 [ 383.239849][T16054] EXT4-fs: Invalid want_extra_isize 9 [ 383.277661][T16067] loop0: detected capacity change from 0 to 1024 [ 383.284382][T16067] EXT4-fs: Ignoring removed oldalloc option [ 383.315167][T16067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.374316][ T2072] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /662/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.396444][ T2072] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.420259][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.443949][ T2072] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /662/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.481021][ T2072] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.502642][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.505426][T15635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.515446][ T2072] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /662/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.544519][ T2072] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.569448][T15635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.578748][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.590688][ T2072] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /662/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.612681][ T2072] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.635220][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.642363][T15635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.652944][ T2072] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /662/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.677698][ T2072] EXT4-fs error (device loop0): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 383.686690][T15635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 383.716682][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.734316][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.742331][T15635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.754794][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.759021][T15635] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.781285][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.788477][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.797785][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.804870][T10724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.813186][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.826324][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.834709][T15635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.848265][T15635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.872238][ T2072] EXT4-fs warning (device loop0): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 383.946082][ T9003] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.968807][T15635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.010400][T16121] lo speed is unknown, defaulting to 1000 [ 384.115996][T15635] veth0_vlan: entered promiscuous mode [ 384.138308][T15635] veth1_vlan: entered promiscuous mode [ 384.181109][T16161] loop1: detected capacity change from 0 to 1024 [ 384.185962][T15635] veth0_macvtap: entered promiscuous mode [ 384.201442][T16161] EXT4-fs: Ignoring removed oldalloc option [ 384.204973][T15635] veth1_macvtap: entered promiscuous mode [ 384.233837][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.244360][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.254414][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.264875][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.274723][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.285537][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.295502][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.306057][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.316012][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.326612][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.336540][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.347055][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.356943][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.367537][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.377556][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.388046][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.400169][T15635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.412842][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.423395][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.433275][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.441101][T16161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.443736][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.443752][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.443766][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.443787][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.485014][T14060] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.486082][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.500235][T14060] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.518100][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.528401][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 384.546674][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.557351][T14060] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.568495][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.578759][T14060] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.599543][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.599572][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.610724][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 384.629030][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.629051][T15635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.639229][T14060] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.649291][T15635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.650337][T15635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.667792][T14060] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.677847][T15635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.747603][T15635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.756403][T15635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.765183][T15635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.787323][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 384.791796][T16170] loop4: detected capacity change from 0 to 512 [ 384.823008][T14060] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.860618][T14060] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.865420][T16152] lo speed is unknown, defaulting to 1000 [ 384.881130][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 384.900140][T14060] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /107/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.934721][T14060] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 384.955157][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 384.984110][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 385.031634][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 385.081684][T16216] lo speed is unknown, defaulting to 1000 [ 385.092655][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 385.105369][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 385.111165][T16152] chnl_net:caif_netlink_parms(): no params data found [ 385.139302][T16304] loop4: detected capacity change from 0 to 1024 [ 385.142889][T14060] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 385.146572][T16304] EXT4-fs: Ignoring removed oldalloc option [ 385.223622][T16152] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.230777][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.238287][T16152] bridge_slave_0: entered allmulticast mode [ 385.244952][T16152] bridge_slave_0: entered promiscuous mode [ 385.255518][T16152] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.262704][T16152] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.269927][T16152] bridge_slave_1: entered allmulticast mode [ 385.276594][T16152] bridge_slave_1: entered promiscuous mode [ 385.302664][T16152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.313847][T16152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.336670][T16152] team0: Port device team_slave_0 added [ 385.344138][T16152] team0: Port device team_slave_1 added [ 385.375468][T16152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.382519][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.408531][T16152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.420378][T16152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.427341][T16152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.453312][T16152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.482804][T16152] hsr_slave_0: entered promiscuous mode [ 385.489251][T16152] hsr_slave_1: entered promiscuous mode [ 385.495352][T16152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.503020][T16152] Cannot create hsr debugfs directory [ 385.518922][T14060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.638058][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 385.638082][ T29] audit: type=1400 audit(1729025794.490:15095): avc: denied { bind } for pid=16547 comm="syz.4.9277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.702308][ T291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.712723][ T291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.781977][ T291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.792314][ T291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.892379][ T291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.902883][ T291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.001502][ T291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.011905][ T291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.063861][T16152] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.075669][T16152] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.083479][ T29] audit: type=1326 audit(1729025794.930:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.4.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 386.085537][T16152] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.107174][ T29] audit: type=1326 audit(1729025794.930:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.4.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 386.107610][ T29] audit: type=1326 audit(1729025794.960:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.4.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 386.163624][T16152] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.170874][ T29] audit: type=1326 audit(1729025794.960:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.4.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 386.194595][ T29] audit: type=1326 audit(1729025794.960:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.4.9280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x7ffc0000 [ 386.266941][ T291] bridge_slave_1: left allmulticast mode [ 386.272771][ T291] bridge_slave_1: left promiscuous mode [ 386.278538][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.297832][ T291] bridge_slave_0: left allmulticast mode [ 386.303517][ T291] bridge_slave_0: left promiscuous mode [ 386.309267][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.341832][ T29] audit: type=1400 audit(1729025795.190:15101): avc: denied { bind } for pid=16611 comm="syz.3.9287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.361558][ T29] audit: type=1400 audit(1729025795.190:15102): avc: denied { listen } for pid=16611 comm="syz.3.9287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.471313][ T29] audit: type=1400 audit(1729025795.320:15103): avc: denied { bind } for pid=16618 comm="syz.3.9290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 386.501785][ T291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.515919][ T291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.527630][ T291] bond0 (unregistering): Released all slaves [ 386.543820][T16606] lo speed is unknown, defaulting to 1000 [ 386.580243][T16555] lo speed is unknown, defaulting to 1000 [ 386.590704][ T291] hsr_slave_0: left promiscuous mode [ 386.596416][ T291] hsr_slave_1: left promiscuous mode [ 386.602829][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.610376][ T291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.618728][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.626222][ T291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.636437][ T291] veth1_macvtap: left promiscuous mode [ 386.641963][ T291] veth0_macvtap: left promiscuous mode [ 386.647537][ T291] veth1_vlan: left promiscuous mode [ 386.652783][ T291] veth0_vlan: left promiscuous mode [ 386.755117][ T291] team0 (unregistering): Port device team_slave_1 removed [ 386.767315][ T291] team0 (unregistering): Port device team_slave_0 removed [ 386.862710][T16152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.891983][T16152] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.940289][ T29] audit: type=1326 audit(1729025795.790:15104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16708 comm="syz.2.9299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45c79dff9 code=0x7ffc0000 [ 386.941707][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.971079][T10724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.994438][T16555] chnl_net:caif_netlink_parms(): no params data found [ 387.008640][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.015741][ T1901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.061515][T16765] netlink: 'syz.4.9294': attribute type 10 has an invalid length. [ 387.105013][T16765] team0: Port device netdevsim1 added [ 387.145904][T16770] netlink: 'syz.3.9297': attribute type 1 has an invalid length. [ 387.161700][T16770] bond3: entered promiscuous mode [ 387.166902][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9298'. [ 387.179032][T16772] geneve2: entered promiscuous mode [ 387.191768][T16765] netlink: 'syz.4.9294': attribute type 10 has an invalid length. [ 387.207221][T16765] team0: Port device netdevsim1 removed [ 387.215676][T16765] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 387.242563][T16555] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.249762][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.257648][T16555] bridge_slave_0: entered allmulticast mode [ 387.264274][T16555] bridge_slave_0: entered promiscuous mode [ 387.275633][T16807] team_slave_1: entered promiscuous mode [ 387.283700][T16807] team0: Port device team_slave_1 removed [ 387.294850][T16807] bond3: (slave team_slave_1): Enslaving as an active interface with a down link [ 387.323482][T16555] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.330727][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.343651][T16555] bridge_slave_1: entered allmulticast mode [ 387.351523][T16555] bridge_slave_1: entered promiscuous mode [ 387.415319][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.451648][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.498772][T16909] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9307'. [ 387.509160][T16555] team0: Port device team_slave_0 added [ 387.516070][T16555] team0: Port device team_slave_1 added [ 387.571745][T16152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.622828][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.629842][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.655870][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.667956][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.675054][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.701045][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.739513][T16555] hsr_slave_0: entered promiscuous mode [ 387.745800][T16555] hsr_slave_1: entered promiscuous mode [ 387.752635][T16555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.760448][T16555] Cannot create hsr debugfs directory [ 387.799692][T16152] veth0_vlan: entered promiscuous mode [ 387.831695][T16152] veth1_vlan: entered promiscuous mode [ 387.862379][T16152] veth0_macvtap: entered promiscuous mode [ 387.871172][T16152] veth1_macvtap: entered promiscuous mode [ 387.889113][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.899633][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.909494][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.919999][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.929965][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.940431][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.950265][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.960927][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.970819][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.981316][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.991227][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.001726][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.011568][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.022021][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.031953][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.042473][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.054011][T16152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.070044][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.080603][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.090618][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.101089][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.110964][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.121503][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.131344][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.141852][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.151701][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.162242][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.172185][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.182779][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.192634][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.203150][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.213045][T16152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 388.223744][T16152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.235314][T16152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.247107][T16152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.255940][T16152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.264900][T16152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.273664][T16152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.330975][T17069] netlink: 'syz.2.9313': attribute type 1 has an invalid length. [ 388.340524][T17069] team_slave_1: entered promiscuous mode [ 388.352402][T17069] team0: Port device team_slave_1 removed [ 388.410655][T16555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.429878][T16555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.439981][T16555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.457194][T17105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9259'. [ 388.466981][T17105] netlink: 'syz.0.9259': attribute type 10 has an invalid length. [ 388.514249][T17105] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 388.524453][T16555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.628923][T17130] loop4: detected capacity change from 0 to 2048 [ 388.656138][T16555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.673363][T16555] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.680664][T17123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 388.685296][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.695852][T10729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.708144][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.715244][T10729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.785992][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.854853][T16555] veth0_vlan: entered promiscuous mode [ 388.866475][T16555] veth1_vlan: entered promiscuous mode [ 388.885323][T16555] veth0_macvtap: entered promiscuous mode [ 388.892643][T16555] veth1_macvtap: entered promiscuous mode [ 388.904497][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.915019][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.924933][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.935495][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.945318][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.955742][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.965640][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.976077][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 388.985929][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 388.996355][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.006306][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.016876][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.026726][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.037156][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.046974][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.057408][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.067238][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.077791][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.092290][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.103839][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.114472][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.124459][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.135027][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.144846][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.155356][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.165226][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.175723][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.185612][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.196061][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.205929][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.216406][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.226272][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.236782][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.246727][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.257270][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.267100][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.277727][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.290459][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.299804][T16555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.308554][T16555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.317367][T16555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.326277][T16555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.468700][T17170] loop1: detected capacity change from 0 to 2048 [ 389.492268][T17170] EXT4-fs: Ignoring removed orlov option [ 389.519955][T17170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.733717][T17207] lo speed is unknown, defaulting to 1000 [ 389.750627][T17197] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 389.766764][T17197] EXT4-fs (loop1): Remounting filesystem read-only [ 389.846298][T17236] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 389.935885][T17245] loop0: detected capacity change from 0 to 512 [ 389.977317][T16555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.990240][T17248] loop2: detected capacity change from 0 to 512 [ 389.996965][T17248] EXT4-fs: Ignoring removed nobh option [ 390.002759][T17248] EXT4-fs: Ignoring removed nobh option [ 390.011326][T17245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.024030][T17245] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.024786][T17248] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 390.083894][T17248] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.9362: invalid indirect mapped block 2683928664 (level 1) [ 390.101261][T17248] EXT4-fs (loop2): 1 truncate cleaned up [ 390.107600][T17248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.131257][T16152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.144170][T15635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.242322][T17269] netlink: 'syz.1.9367': attribute type 1 has an invalid length. [ 390.258872][T17269] team_slave_1: entered promiscuous mode [ 390.296327][T17269] team0: Port device team_slave_1 removed [ 390.329694][T17269] bridge0: port 3(team_slave_1) entered blocking state [ 390.336630][T17269] bridge0: port 3(team_slave_1) entered disabled state [ 390.343825][T17269] team_slave_1: entered allmulticast mode [ 390.406205][T17273] ebt_among: dst integrity fail: 101 [ 390.483665][T17293] batadv_slave_1: entered promiscuous mode [ 390.511018][T17292] batadv_slave_1: left promiscuous mode [ 390.543708][T17302] loop0: detected capacity change from 0 to 512 [ 390.627194][T17302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.640165][T17302] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.668337][T17311] netlink: 'syz.4.9383': attribute type 1 has an invalid length. [ 390.676464][T17302] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 390.701334][T17311] bond2: entered promiscuous mode [ 390.709374][T17313] syz.3.9394[17313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.709497][T17313] syz.3.9394[17313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.719443][T16152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.721071][T17313] syz.3.9394[17313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.742559][T17352] syz.2.9388[17352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.754091][T17311] team_slave_1: entered promiscuous mode [ 390.772669][T17352] syz.2.9388[17352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.772750][T17352] syz.2.9388[17352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.796991][T17311] team0: Port device team_slave_1 removed [ 390.852220][T17311] bond2: (slave team_slave_1): making interface the new active one [ 390.870002][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 390.870020][ T29] audit: type=1400 audit(1729025799.710:15175): avc: denied { lock } for pid=17363 comm="syz.2.9395" path="socket:[99856]" dev="sockfs" ino=99856 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 390.872031][T17366] loop0: detected capacity change from 0 to 512 [ 390.877530][T17311] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 390.951605][T17366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.967552][T17381] bridge0: port 4(vlan2) entered blocking state [ 390.968517][T17366] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.973864][T17381] bridge0: port 4(vlan2) entered disabled state [ 390.990811][T17381] vlan2: entered allmulticast mode [ 390.998043][T17381] vlan2: left allmulticast mode [ 391.011975][ T29] audit: type=1400 audit(1729025799.860:15176): avc: denied { read } for pid=17380 comm="syz.4.9399" name="event3" dev="devtmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.037012][ T29] audit: type=1400 audit(1729025799.880:15177): avc: denied { open } for pid=17380 comm="syz.4.9399" path="/dev/input/event3" dev="devtmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.061425][ T29] audit: type=1400 audit(1729025799.880:15178): avc: denied { ioctl } for pid=17380 comm="syz.4.9399" path="/dev/input/event3" dev="devtmpfs" ino=229 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 391.089485][T16152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.136061][ T29] audit: type=1400 audit(1729025799.980:15179): avc: denied { listen } for pid=17396 comm="syz.3.9405" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.300628][T17423] smc: net device bond0 applied user defined pnetid SYZ0 [ 391.333132][T17423] smc: net device bond0 erased user defined pnetid SYZ0 [ 391.356215][T17428] netlink: 'syz.4.9417': attribute type 1 has an invalid length. [ 391.364044][T17428] netlink: 'syz.4.9417': attribute type 2 has an invalid length. [ 391.372008][T17428] netlink: 'syz.4.9417': attribute type 37 has an invalid length. [ 391.380113][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9417'. [ 391.401408][T17429] team_slave_1: entered promiscuous mode [ 391.427827][T17429] team0: Port device team_slave_1 removed [ 391.463629][T17435] can0: slcan on ttyS3. [ 391.501252][ T29] audit: type=1400 audit(1729025800.350:15180): avc: denied { read } for pid=17448 comm="syz.0.9423" name="ptp0" dev="devtmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.532080][ T29] audit: type=1400 audit(1729025800.350:15181): avc: denied { open } for pid=17448 comm="syz.0.9423" path="/dev/ptp0" dev="devtmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.555864][ T29] audit: type=1400 audit(1729025800.350:15182): avc: denied { ioctl } for pid=17448 comm="syz.0.9423" path="/dev/ptp0" dev="devtmpfs" ino=222 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.584480][ T29] audit: type=1400 audit(1729025800.400:15183): avc: denied { connect } for pid=17450 comm="syz.0.9424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 391.621265][T17453] geneve0: entered allmulticast mode [ 391.627577][T17435] can0 (unregistered): slcan off ttyS3. [ 391.633423][T17435] Falling back ldisc for ttyS3. [ 391.715560][ T29] audit: type=1400 audit(1729025800.560:15184): avc: denied { compute_member } for pid=17469 comm="syz.4.9432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 391.736945][T17477] syz.4.9436[17477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.737154][T17477] syz.4.9436[17477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.749047][T17477] syz.4.9436[17477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 391.796634][T17477] bond3: entered promiscuous mode [ 391.813351][T17477] bond3: entered allmulticast mode [ 391.825822][T17477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.866029][T17477] bond3 (unregistering): Released all slaves [ 392.031388][T17563] program syz.4.9445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.069302][T17570] 9pnet_fd: Insufficient options for proto=fd [ 392.214969][T17585] loop4: detected capacity change from 0 to 1024 [ 392.222128][T17585] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 392.233225][T17585] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 392.260583][T17585] JBD2: no valid journal superblock found [ 392.266357][T17585] EXT4-fs (loop4): Could not load journal inode [ 392.269282][T17594] validate_nla: 1 callbacks suppressed [ 392.269301][T17594] netlink: 'syz.2.9459': attribute type 10 has an invalid length. [ 392.322943][T17594] geneve1: entered promiscuous mode [ 392.347361][T17594] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 392.356202][T17610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9466'. [ 392.375880][T17608] ref_ctr_offset mismatch. inode: 0x9bf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 392.494470][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.502009][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.509597][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.521955][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.529565][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.537065][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.544604][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.552147][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.559580][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.567096][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.574557][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.582020][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.589452][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.596935][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.605110][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.612872][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.620322][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.627763][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.635173][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.642668][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.652214][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.659658][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.667152][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.674605][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.682163][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.689842][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.697398][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.704913][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.712357][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.719794][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.727212][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.734821][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.742493][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.749976][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.757612][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.765051][ T3346] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 392.774533][ T3346] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 392.796751][ T2018] bridge_slave_1: left allmulticast mode [ 392.802703][ T2018] bridge_slave_1: left promiscuous mode [ 392.808529][ T2018] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.825643][ T2018] bridge_slave_0: left allmulticast mode [ 392.831459][ T2018] bridge_slave_0: left promiscuous mode [ 392.837207][ T2018] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.881317][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9482'. [ 392.974163][T17672] loop1: detected capacity change from 0 to 512 [ 392.989652][T17672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.002692][T17672] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.055053][T16555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.066977][ T2018] hsr_slave_0: left promiscuous mode [ 393.077312][ T2018] hsr_slave_1: left promiscuous mode [ 393.089820][T17688] ref_ctr_offset mismatch. inode: 0x9c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 393.100933][ T2018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.107106][T17690] loop2: detected capacity change from 0 to 1024 [ 393.108507][ T2018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.122658][ T2018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.130211][ T2018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.140746][ T2018] veth1_macvtap: left promiscuous mode [ 393.142025][T17690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.146253][ T2018] veth0_macvtap: left promiscuous mode [ 393.158502][T17690] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.164009][ T2018] veth1_vlan: left promiscuous mode [ 393.179408][ T2018] veth0_vlan: left promiscuous mode [ 393.263216][T15635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.295487][T17706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9500'. [ 393.390843][ T2018] team0 (unregistering): Port device team_slave_1 removed [ 393.414760][ T2018] team0 (unregistering): Port device team_slave_0 removed [ 393.604089][T17736] program syz.1.9512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.618149][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9513'. [ 393.796373][ T2936] hid-generic 0000:0000:0000.0022: unknown main item tag 0x7 [ 393.803916][ T2936] hid-generic 0000:0000:0000.0022: ignoring exceeding usage max [ 393.815448][ T2936] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 393.816117][T17750] lo speed is unknown, defaulting to 1000 [ 393.826364][ T2936] hid-generic 0000:0000:0000.0022: unknown main item tag 0x6 [ 393.836145][ T2936] hid-generic 0000:0000:0000.0022: unknown main item tag 0xd [ 393.884959][ T2936] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 393.957290][T17794] loop0: detected capacity change from 0 to 164 [ 394.062506][T17794] Unable to read rock-ridge attributes [ 394.114377][T17814] syz.3.9536[17814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.121565][T17794] Unable to read rock-ridge attributes [ 394.159438][T17794] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 394.174395][T17814] lo speed is unknown, defaulting to 1000 [ 394.269970][T17853] netlink: 532 bytes leftover after parsing attributes in process `syz.2.9541'. [ 394.315582][T17834] syzkaller0: entered promiscuous mode [ 394.321155][T17834] syzkaller0: entered allmulticast mode [ 394.398219][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.405758][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.413325][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.422654][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.430170][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.437974][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.445383][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.452815][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.460272][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.467702][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.475140][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.482588][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.490047][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.497501][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.504935][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.512930][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.520379][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.528012][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.535504][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.542954][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.550458][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.557973][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.565409][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.572883][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.580395][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.587830][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.595255][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.602903][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.610582][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.618097][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.625536][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.632977][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.640459][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.647914][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.655345][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.662891][T26655] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 394.671870][T26655] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 394.773341][T17886] bridge0: port 3(vlan2) entered blocking state [ 394.779762][T17886] bridge0: port 3(vlan2) entered disabled state [ 394.786387][T17886] vlan2: entered allmulticast mode [ 394.792201][T17886] vlan2: left allmulticast mode [ 394.803076][T17895] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9551'. [ 394.812868][T17883] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9551'. [ 394.935410][T17915] loop1: detected capacity change from 0 to 128 [ 394.975711][ T2018] kworker/u8:9: attempt to access beyond end of device [ 394.975711][ T2018] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 395.001373][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9563'. [ 395.010928][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9563'. [ 395.036137][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9564'. [ 395.070124][T17908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.082798][T17908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.093377][T17933] loop2: detected capacity change from 0 to 2048 [ 395.111507][T17933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.127279][T17933] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9567: bg 0: block 274: padding at end of block bitmap is not set [ 395.141877][T17933] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 395.154430][T17933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 395.154430][T17933] [ 395.180047][T15635] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.266300][T17953] SELinux: policydb version 1664755333 does not match my version range 15-33 [ 395.277557][T17953] SELinux: failed to load policy [ 395.284743][T17952] loop2: detected capacity change from 0 to 128 [ 395.552916][T17991] loop1: detected capacity change from 0 to 1024 [ 395.569004][T17991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.584040][T17991] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.597291][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.604783][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.612260][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.619927][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.627495][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.634927][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.642397][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.650118][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.650371][T17995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.657573][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.673535][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.680980][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.688730][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.696150][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.703636][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.711068][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.718090][T16555] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /55/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 395.718532][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.746762][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.754197][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.761497][T18003] loop4: detected capacity change from 0 to 512 [ 395.761673][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.775380][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.782859][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.789294][T16555] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 37: comm syz-executor: path /55/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 395.790322][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.818101][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.825585][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.833059][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.835691][T16555] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 395.840474][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.866389][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.873833][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.881325][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.886254][T16555] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 37: comm syz-executor: path /55/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 395.888790][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.913310][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 395.913327][ T29] audit: type=1400 audit(1729025804.770:15346): avc: denied { write } for pid=18007 comm="syz.0.9596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 395.916581][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.931679][T16555] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 395.942418][ T35] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 395.978157][T16555] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 37: comm syz-executor: path /55/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 395.982427][T17995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.998770][ T35] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 396.013743][T16555] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 396.049027][T16555] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 37: comm syz-executor: path /55/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 396.070769][T16555] EXT4-fs error (device loop1): ext4_empty_dir:3128: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 396.104240][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.123861][T16555] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 37: comm syz-executor: path /55/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 396.167960][ T29] audit: type=1326 audit(1729025805.020:15347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18022 comm="syz.4.9602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7b41ddff9 code=0x0 [ 396.212077][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.272033][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.314178][T18024] lo speed is unknown, defaulting to 1000 [ 396.340583][T18065] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.364251][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.408766][T18024] chnl_net:caif_netlink_parms(): no params data found [ 396.459678][T18024] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.466843][T18024] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.474595][T18024] bridge_slave_0: entered allmulticast mode [ 396.481507][T18024] bridge_slave_0: entered promiscuous mode [ 396.488968][T18024] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.489203][T16555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.496006][T18024] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.512258][T18024] bridge_slave_1: entered allmulticast mode [ 396.518877][T18024] bridge_slave_1: entered promiscuous mode [ 396.544467][T18024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.552318][ T29] audit: type=1400 audit(1729025805.380:15348): avc: denied { listen } for pid=18210 comm="syz.0.9609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.559925][ T50] bridge_slave_1: left allmulticast mode [ 396.578970][ T50] bridge_slave_1: left promiscuous mode [ 396.584734][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.592884][ T50] bridge_slave_0: left allmulticast mode [ 396.598609][ T50] bridge_slave_0: left promiscuous mode [ 396.604350][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.652813][ T29] audit: type=1326 audit(1729025805.500:15349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.727908][ T29] audit: type=1326 audit(1729025805.530:15350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.751615][ T29] audit: type=1326 audit(1729025805.530:15351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.775455][ T29] audit: type=1326 audit(1729025805.530:15352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.799332][ T29] audit: type=1326 audit(1729025805.530:15353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.822989][ T29] audit: type=1326 audit(1729025805.530:15354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.846609][ T29] audit: type=1326 audit(1729025805.530:15355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18245 comm="syz.0.9613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023b93dff9 code=0x7ffc0000 [ 396.928613][ T50] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 396.990666][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.011674][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.024207][T18267] loop4: detected capacity change from 0 to 164 [ 397.032208][ T50] bond0 (unregistering): Released all slaves [ 397.042685][T18024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.053211][T18267] Unable to read rock-ridge attributes [ 397.104926][T18267] Unable to read rock-ridge attributes [ 397.113838][ T50] hsr_slave_0: left promiscuous mode [ 397.122889][ T50] hsr_slave_1: left promiscuous mode [ 397.129099][T18267] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 397.138662][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.146212][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.164488][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.172114][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.195694][ T50] veth1_macvtap: left promiscuous mode [ 397.201303][ T50] veth0_macvtap: left promiscuous mode [ 397.206851][ T50] veth1_vlan: left promiscuous mode [ 397.212366][ T50] veth0_vlan: left promiscuous mode [ 397.338714][ T50] team0 (unregistering): Port device team_slave_0 removed [ 397.383873][T18024] team0: Port device team_slave_0 added [ 397.396202][T18024] team0: Port device team_slave_1 added [ 397.422983][T18024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.429995][T18024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.456016][T18024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.467461][T18024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.474425][T18024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.500459][T18024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.534157][T18254] lo speed is unknown, defaulting to 1000 [ 397.566422][T18024] hsr_slave_0: entered promiscuous mode [ 397.583361][T18024] hsr_slave_1: entered promiscuous mode [ 397.593319][T18389] loop0: detected capacity change from 0 to 2048 [ 397.599877][T18024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.607517][T18024] Cannot create hsr debugfs directory [ 397.615341][T18375] __nla_validate_parse: 4 callbacks suppressed [ 397.615358][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9632'. [ 397.653176][T18389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.758736][T16152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.843608][T18254] chnl_net:caif_netlink_parms(): no params data found [ 397.900140][T18572] loop0: detected capacity change from 0 to 128 [ 397.911785][T18590] netlink: 'syz.3.9642': attribute type 10 has an invalid length. [ 397.920690][T18590] team0: Port device netdevsim1 added [ 397.924797][T18572] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.940671][T18572] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 397.976962][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.988841][T18590] netlink: 'syz.3.9642': attribute type 10 has an invalid length. [ 397.999728][T16152] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.999911][T18590] team0: Port device netdevsim1 removed [ 398.017020][T18590] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 398.028347][T18599] loop0: detected capacity change from 0 to 1024 [ 398.034998][T18599] EXT4-fs: Ignoring removed orlov option [ 398.040902][T18599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.074083][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.089523][T18599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.105787][T18254] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.112942][T18254] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.122751][T18254] bridge_slave_0: entered allmulticast mode [ 398.130568][T18599] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 398.132517][T18254] bridge_slave_0: entered promiscuous mode [ 398.157629][T18254] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.160244][T16152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.164728][T18254] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.181094][T18254] bridge_slave_1: entered allmulticast mode [ 398.187722][T18254] bridge_slave_1: entered promiscuous mode [ 398.203388][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.253535][T18254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.267499][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.294992][T18254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.304314][T18024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.314803][T18024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.340267][T18024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.349514][T18024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.359836][T18254] team0: Port device team_slave_0 added [ 398.384732][T18254] team0: Port device team_slave_1 added [ 398.410920][ T50] team_slave_1: left allmulticast mode [ 398.416663][ T50] bridge0: port 3(team_slave_1) entered disabled state [ 398.425046][ T50] bridge_slave_1: left allmulticast mode [ 398.430843][ T50] bridge_slave_1: left promiscuous mode [ 398.436487][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.446051][ T50] bridge_slave_0: left allmulticast mode [ 398.451824][ T50] bridge_slave_0: left promiscuous mode [ 398.456984][T18748] bpf_get_probe_write_proto: 2 callbacks suppressed [ 398.457002][T18748] syz.3.9656[18748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.457541][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.464982][T18748] syz.3.9656[18748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.486231][T18748] syz.3.9656[18748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.590499][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.612905][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.624089][ T50] bond0 (unregistering): Released all slaves [ 398.648512][T18254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.655526][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.681520][T18254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.693099][T18254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.700119][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.726037][T18254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.755618][ T50] hsr_slave_0: left promiscuous mode [ 398.761821][ T50] hsr_slave_1: left promiscuous mode [ 398.768399][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.775853][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.784044][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.791621][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.812983][ T50] veth1_macvtap: left promiscuous mode [ 398.813763][T18788] loop4: detected capacity change from 0 to 512 [ 398.818532][ T50] veth0_macvtap: left promiscuous mode [ 398.830376][ T50] veth1_vlan: left promiscuous mode [ 398.835670][ T50] veth0_vlan: left promiscuous mode [ 399.005366][ T50] team0 (unregistering): Port device team_slave_0 removed [ 399.065781][T18254] hsr_slave_0: entered promiscuous mode [ 399.072323][T18254] hsr_slave_1: entered promiscuous mode [ 399.078714][T18254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.086318][T18254] Cannot create hsr debugfs directory [ 399.124414][T18024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.146829][T18846] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9672'. [ 399.149489][T18848] syz.3.9671[18848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.156100][T18848] syz.3.9671[18848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.168468][T18848] syz.3.9671[18848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.185059][T18024] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.245151][T18891] ================================================================== [ 399.253287][T18891] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_block_update_hint_alloc [ 399.262018][T18891] [ 399.264363][T18891] read-write to 0xffffffff88bdf3ac of 4 bytes by task 18867 on cpu 0: [ 399.264688][T18024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.272509][T18891] pcpu_block_update_hint_alloc+0x5db/0x6a0 [ 399.272553][T18891] pcpu_alloc_area+0x488/0x4b0 [ 399.283009][T18024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.288862][T18891] pcpu_alloc_noprof+0x4bb/0x10a0 [ 399.299785][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.304026][T18891] bpf_map_alloc_percpu+0xad/0x210 [ 399.309162][T10729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.316045][T18891] array_map_alloc+0x2aa/0x390 [ 399.327604][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.328338][T18891] map_create+0x850/0xb70 [ 399.333170][T10729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.340087][T18891] __sys_bpf+0x667/0x7a0 [ 399.340111][T18891] __x64_sys_bpf+0x43/0x50 [ 399.360370][T18891] x64_sys_call+0x2625/0x2d60 [ 399.365070][T18891] do_syscall_64+0xc9/0x1c0 [ 399.369589][T18891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.375504][T18891] [ 399.377828][T18891] read to 0xffffffff88bdf3ac of 4 bytes by task 18891 on cpu 1: [ 399.385464][T18891] pcpu_alloc_noprof+0x9b6/0x10a0 [ 399.390530][T18891] bpf_prog_alloc+0x59/0x150 [ 399.395148][T18891] bpf_prog_load+0x4d1/0x1070 [ 399.399832][T18891] __sys_bpf+0x463/0x7a0 [ 399.404082][T18891] __x64_sys_bpf+0x43/0x50 [ 399.408516][T18891] x64_sys_call+0x2625/0x2d60 [ 399.413209][T18891] do_syscall_64+0xc9/0x1c0 [ 399.417726][T18891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.423731][T18891] [ 399.426057][T18891] value changed: 0x00000003 -> 0xfffffffb [ 399.431774][T18891] [ 399.434099][T18891] Reported by Kernel Concurrency Sanitizer on: [ 399.440251][T18891] CPU: 1 UID: 0 PID: 18891 Comm: syz.0.9674 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 399.452506][T18891] Tainted: [W]=WARN [ 399.456320][T18891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 399.466380][T18891] ================================================================== [ 399.540943][T18024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.622039][T18024] veth0_vlan: entered promiscuous mode [ 399.630916][T18024] veth1_vlan: entered promiscuous mode [ 399.648476][T18024] veth0_macvtap: entered promiscuous mode [ 399.656292][T18024] veth1_macvtap: entered promiscuous mode [ 399.667367][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.678027][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.688000][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.698493][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.708352][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.718918][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.728838][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.739296][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.749133][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.759597][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.769424][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.779989][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.789858][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.800520][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.811476][T18024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.820304][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.830775][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.840617][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.851100][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.860938][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.871398][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.881268][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.891769][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.901678][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.912240][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.922102][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.932573][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.942557][T18024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.953012][T18024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.963899][T18024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.975132][T18024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.983901][T18024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.992647][T18024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.001407][T18024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.055126][T18254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.064052][T18254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.073546][T18254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.082296][T18254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.128841][T18254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.143864][T18254] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.154674][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.161787][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.174068][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.181300][ T1901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.260405][T18254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.336262][T18254] veth0_vlan: entered promiscuous mode [ 400.345689][T18254] veth1_vlan: entered promiscuous mode [ 400.366699][T18254] veth0_macvtap: entered promiscuous mode [ 400.375336][T18254] veth1_macvtap: entered promiscuous mode [ 400.387231][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.397807][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.407708][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.418183][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.428072][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.438567][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.448411][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.458890][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.468772][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.479215][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.489104][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.499554][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.509380][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.519904][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.529772][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.540266][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.551492][T18254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.566177][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.576800][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.586702][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.597180][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.607130][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.617558][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.627382][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.637935][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.647791][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.658277][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.668097][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.678574][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.688428][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.699000][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.708920][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.719365][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.730788][T18254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.742806][T18254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.751696][T18254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.760476][T18254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.769216][T18254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0