last executing test programs: 1.994385287s ago: executing program 0 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000240)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x22002000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x140f, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008041}, 0x24000004) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 1.285346909s ago: executing program 3 (id=2710): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xc}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.221392374s ago: executing program 3 (id=2715): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x0, 0x463, &(0x7f0000000f80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x900, 0x2a40}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="670000001800dd8d0000000000060015000100000000000000000019a2d5225380130d03c0eea0f2a2dc9cba8c40bbd1aa8a5676ec87afa2afea49851a"], 0x4c}}, 0x0) write(r0, &(0x7f0000000000)="240000001c005f0314f90408faac470002000000010000000000080008000dc013", 0x21) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES16=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) timer_getoverrun(r3) r6 = gettid() r7 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="2bba5baf449b50c990ea1632dd171253118ae7bfdaa0f58bd7bf2afc38b6f5e44bca304b6bc67e6f214828a47cd2776c87c4045b74fd698ed6473651b8df85db6d99b09d1b35b1912a804a046e54e433a62edd9d9832b2feb14d48d657e86800"/111, @ANYRESOCT=r0, @ANYRES32=r3, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000000a000000000000800700000040100000", @ANYRES32=r2, @ANYBLOB="ffffff000000000000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000020000000f000000000000000000000000000000a4a4bd4b0c5ddc514abc68f0907de2b3905d64594e1c508d557ac56762edf5112154602384ca8623fad96ff1d2027a94fbdd240ca5f59b51f97c4671a12739a6c4a5f3f17230bba2ebb994b91fe5431c565b8305993227138a23468a235516e3bad0afd9b06cdf766f9582a601a565ca75ab8e63f6d9ab932754b366c6fa669a519677f01f479147362380bb1d2ce075d579f94e"], 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x4, 0x300, 0xfc, 0x3, 0x7fff, 0x9}, 0x1c) 1.131672392s ago: executing program 2 (id=2718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x48) inotify_init1(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="e8eda26b2341521d5d3ae0b49d4fa448174b233c0d15aa643049bd1713db2c1761b266a6c36eff709e776a30f3218d250c3d4b822861d575e8432c1a8041d8feb544874f95642fffd9f8df24c2f6229f77675172e43c7edf70cbbe0b8e094299cb09e65a3e2b6e305b", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r6, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000500), &(0x7f0000000200)}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_int(r1, &(0x7f0000000400)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0x4, 0x12) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000200900010073797a30000000000900020073797a3200000000140000001100014000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000"], 0xb0}}, 0x0) 1.069682867s ago: executing program 0 (id=2719): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(0xffffffffffffffff, r3) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000005c0)=""/133, 0x85, 0x800) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x20000004, 0x0) 1.052808209s ago: executing program 0 (id=2721): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000204c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="01020000000000000000020202000900010073797a3000000000140002"], 0x40}, 0x1, 0x40030000000000}, 0x0) 1.003017953s ago: executing program 0 (id=2723): r0 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0xc4040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f00000000c0)=0xffffffff, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000004c0), 0xfffffcdd) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'veth1_virt_wifi\x00', @remote}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0}) clock_nanosleep(0xfffffff2, 0x3, &(0x7f0000000400)={r4}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 845.834017ms ago: executing program 1 (id=2731): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(0x0, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(0xffffffffffffffff, r3) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000005c0)=""/133, 0x85, 0x800) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x20000004, 0x0) 825.947089ms ago: executing program 2 (id=2732): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000001c0), 0x2, 0x431, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getdents(r0, &(0x7f0000000080)=""/204, 0xcc) 825.386499ms ago: executing program 1 (id=2733): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f00000002c0)=r3}, 0x20) ftruncate(r1, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 784.622722ms ago: executing program 2 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r1, 0x60000000000, 0x0) 784.267702ms ago: executing program 1 (id=2735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) 784.080132ms ago: executing program 2 (id=2736): r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190000000000000000000100000024000300000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784314000200776730"], 0x4c}}, 0x0) 320.634712ms ago: executing program 4 (id=2744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000020000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 213.587732ms ago: executing program 4 (id=2745): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x10fff9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f00000002c0)=r3}, 0x20) ftruncate(r1, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 213.333552ms ago: executing program 4 (id=2746): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000001c0), 0x2, 0x431, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getdents(r0, &(0x7f0000000080)=""/204, 0xcc) 213.098312ms ago: executing program 4 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r1, 0x60000000000, 0x0) 205.642542ms ago: executing program 4 (id=2748): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa7000be0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000040000000700000004"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f00000007c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) close(r0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00923937e507b4caf0a228cc4208195a0e00"/44], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 190.569453ms ago: executing program 4 (id=2749): mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='memory_recursiveprot,memory_recursiveprot,nsdelegate,memory_recursiveprot,nsdelegate,memory_localevents']) socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x1e, 0x4, 0x0) sendmmsg(r2, 0x0, 0x0, 0x9200000000000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0) shmdt(0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 797.21µs ago: executing program 3 (id=2750): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='security.apparmor\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) shmctl$IPC_RMID(0x0, 0x0) 460.33µs ago: executing program 3 (id=2751): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 0s ago: executing program 0 (id=2752): r0 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0xc4040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f00000000c0)=0xffffffff, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x0, 0x8, 0x0, 0xfff}}}}]}, 0x4c}}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@ifindex=r4, r1, 0x35, 0x2032, r0, @void, @void, @value=r5}, 0x20) (async) r6 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) (async) getpeername$packet(r0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x5453, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) creat(&(0x7f0000000240)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): 0x238/0xcf0 [ 155.676664][ T9415] ? xas_load+0x3ae/0x3d0 [ 155.681020][ T9415] ? xa_load+0xb9/0xe0 [ 155.685149][ T9415] ext4_getblk+0x112/0x500 [ 155.689596][ T9415] ext4_bread_batch+0x5b/0x360 [ 155.694412][ T9415] __ext4_find_entry+0xa1d/0x1090 [ 155.699492][ T9415] ? __d_alloc+0x3d/0x340 [ 155.703850][ T9415] ? d_alloc_parallel+0xbfe/0xc80 [ 155.708992][ T9415] ext4_lookup+0xba/0x390 [ 155.713340][ T9415] __lookup_slow+0x184/0x250 [ 155.718045][ T9415] lookup_slow+0x3c/0x60 [ 155.722305][ T9415] link_path_walk+0x69e/0x820 [ 155.727000][ T9415] path_lookupat+0x72/0x2b0 [ 155.731607][ T9415] filename_lookup+0x127/0x300 [ 155.736389][ T9415] user_path_at+0x3c/0x110 [ 155.740907][ T9415] __se_sys_pivot_root+0x10e/0x1090 [ 155.746204][ T9415] ? vfs_write+0x580/0x910 [ 155.750698][ T9415] ? __fget_files+0x1d4/0x210 [ 155.755447][ T9415] ? fput+0x14e/0x190 [ 155.759516][ T9415] __x64_sys_pivot_root+0x31/0x40 [ 155.764584][ T9415] x64_sys_call+0x270b/0x2d60 [ 155.769378][ T9415] do_syscall_64+0xc9/0x1c0 [ 155.773893][ T9415] ? clear_bhb_loop+0x55/0xb0 [ 155.778675][ T9415] ? clear_bhb_loop+0x55/0xb0 [ 155.783390][ T9415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.789463][ T9415] RIP: 0033:0x7fa6f6a8dff9 [ 155.793979][ T9415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.813617][ T9415] RSP: 002b:00007fa6f5707038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 155.822056][ T9415] RAX: ffffffffffffffda RBX: 00007fa6f6c45f80 RCX: 00007fa6f6a8dff9 [ 155.830052][ T9415] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000020000000 [ 155.838034][ T9415] RBP: 00007fa6f5707090 R08: 0000000000000000 R09: 0000000000000000 [ 155.846024][ T9415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.854018][ T9415] R13: 0000000000000000 R14: 00007fa6f6c45f80 R15: 00007fff26d635b8 [ 155.862117][ T9415] [ 155.949493][ T9423] @: renamed from bond0 (while UP) [ 155.963759][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 155.963799][ T29] audit: type=1400 audit(155.983:11147): avc: denied { ioctl } for pid=9422 comm="syz.2.1816" path="socket:[28282]" dev="sockfs" ino=28282 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.042341][ T29] audit: type=1326 audit(156.073:11148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.070590][ T29] audit: type=1326 audit(156.073:11149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.093562][ T29] audit: type=1326 audit(156.073:11150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.116539][ T29] audit: type=1326 audit(156.073:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.139619][ T29] audit: type=1326 audit(156.073:11152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.162615][ T29] audit: type=1326 audit(156.073:11153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.185725][ T29] audit: type=1326 audit(156.073:11154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.208821][ T29] audit: type=1326 audit(156.073:11155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.231917][ T29] audit: type=1326 audit(156.073:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.2.1818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f6a8dff9 code=0x7ffc0000 [ 156.275499][ T9443] lo speed is unknown, defaulting to 1000 [ 156.449737][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 157.829149][ T9476] loop4: detected capacity change from 0 to 512 [ 157.990202][ T9496] loop1: detected capacity change from 0 to 512 [ 158.008443][ T9496] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 158.025378][ T9496] EXT4-fs (loop1): 1 truncate cleaned up [ 158.124296][ T9508] FAULT_INJECTION: forcing a failure. [ 158.124296][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 158.136966][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.1.1849 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 158.149165][ T9508] Tainted: [W]=WARN [ 158.152963][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.163132][ T9508] Call Trace: [ 158.166407][ T9508] [ 158.169404][ T9508] dump_stack_lvl+0xf2/0x150 [ 158.174027][ T9508] dump_stack+0x15/0x20 [ 158.178192][ T9508] should_fail_ex+0x223/0x230 [ 158.182894][ T9508] ? xfrm_add_sa+0x1572/0x2010 [ 158.187737][ T9508] should_failslab+0x8f/0xb0 [ 158.192325][ T9508] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 158.198661][ T9508] ? crypto_has_skcipher+0x29/0x40 [ 158.203810][ T9508] kmemdup_noprof+0x2a/0x60 [ 158.208378][ T9508] xfrm_add_sa+0x1572/0x2010 [ 158.213033][ T9508] xfrm_user_rcv_msg+0x4a3/0x5c0 [ 158.218044][ T9508] ? __kfree_skb+0x102/0x150 [ 158.222649][ T9508] ? consume_skb+0x49/0x160 [ 158.227177][ T9508] netlink_rcv_skb+0x12c/0x230 [ 158.232009][ T9508] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 158.237588][ T9508] xfrm_netlink_rcv+0x47/0x60 [ 158.242290][ T9508] netlink_unicast+0x599/0x670 [ 158.247093][ T9508] netlink_sendmsg+0x5cc/0x6e0 [ 158.252019][ T9508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.257329][ T9508] __sock_sendmsg+0x140/0x180 [ 158.262021][ T9508] ____sys_sendmsg+0x312/0x410 [ 158.266909][ T9508] __sys_sendmsg+0x1d9/0x270 [ 158.271601][ T9508] __x64_sys_sendmsg+0x46/0x50 [ 158.276403][ T9508] x64_sys_call+0x2689/0x2d60 [ 158.281115][ T9508] do_syscall_64+0xc9/0x1c0 [ 158.285694][ T9508] ? clear_bhb_loop+0x55/0xb0 [ 158.290438][ T9508] ? clear_bhb_loop+0x55/0xb0 [ 158.295201][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.301121][ T9508] RIP: 0033:0x7fcda0a6dff9 [ 158.305551][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.325221][ T9508] RSP: 002b:00007fcd9f6e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.333683][ T9508] RAX: ffffffffffffffda RBX: 00007fcda0c25f80 RCX: 00007fcda0a6dff9 [ 158.341679][ T9508] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 158.349653][ T9508] RBP: 00007fcd9f6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.357622][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.365680][ T9508] R13: 0000000000000000 R14: 00007fcda0c25f80 R15: 00007fff9fa7c8b8 [ 158.373769][ T9508] [ 158.428260][ T9512] loop1: detected capacity change from 0 to 512 [ 158.485230][ T9512] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1850: corrupted in-inode xattr: invalid ea_ino [ 158.500104][ T9512] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1850: couldn't read orphan inode 15 (err -117) [ 158.512825][ T9512] EXT4-fs mount: 24 callbacks suppressed [ 158.512841][ T9512] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.591590][ T9530] loop4: detected capacity change from 0 to 128 [ 158.604314][ T9530] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.634126][ T8725] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 158.644915][ T9530] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1858: No space for directory leaf checksum. Please run e2fsck -D. [ 158.660293][ T9530] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.1858: checksumming directory block 0 [ 158.929829][ T9544] tipc: Enabled bearer , priority 0 [ 158.939950][ T9544] syzkaller0: MTU too low for tipc bearer [ 158.945727][ T9544] tipc: Disabling bearer [ 159.004734][ T9264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.224843][ T9559] loop4: detected capacity change from 0 to 512 [ 159.242901][ T9559] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 159.259522][ T9559] EXT4-fs (loop4): 1 truncate cleaned up [ 159.265777][ T9559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.323828][ T9264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.362274][ T9566] loop4: detected capacity change from 0 to 512 [ 159.370957][ T9566] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 159.389074][ T9566] EXT4-fs (loop4): 1 truncate cleaned up [ 159.395135][ T9566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.428558][ T9264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.544267][ T9576] loop4: detected capacity change from 0 to 128 [ 159.552261][ T9576] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.567691][ T9576] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.1874: No space for directory leaf checksum. Please run e2fsck -D. [ 159.583018][ T9576] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.1874: checksumming directory block 0 [ 159.914619][ T9594] loop1: detected capacity change from 0 to 128 [ 159.922823][ T9594] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.969491][ T8725] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.998283][ T9597] loop1: detected capacity change from 0 to 512 [ 160.019195][ T9597] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 160.033900][ T9597] EXT4-fs (loop1): 1 truncate cleaned up [ 160.039813][ T9597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.082491][ T8725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.232194][ T9602] tipc: Enabled bearer , priority 0 [ 160.241508][ T9602] syzkaller0: MTU too low for tipc bearer [ 160.247292][ T9602] tipc: Disabling bearer [ 160.382122][ T9264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.475651][ T9609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1886'. [ 160.605159][ T9626] loop2: detected capacity change from 0 to 128 [ 160.613194][ T9626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.639247][ T7560] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.656916][ T9633] loop4: detected capacity change from 0 to 128 [ 160.662789][ T9634] tipc: Enabled bearer , priority 0 [ 160.672025][ T9634] syzkaller0: MTU too low for tipc bearer [ 160.675786][ T9633] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.677798][ T9634] tipc: Disabling bearer [ 160.705873][ T9264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.806900][ T9649] loop2: detected capacity change from 0 to 128 [ 160.847571][ T9649] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.875533][ T7560] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.042083][ T9659] loop2: detected capacity change from 0 to 128 [ 161.052036][ T9659] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.091697][ T7560] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.266180][ T9669] tipc: Enabled bearer , priority 0 [ 161.276180][ T9669] syzkaller0: MTU too low for tipc bearer [ 161.281970][ T9669] tipc: Disabling bearer [ 161.297559][ T9671] tipc: Enabled bearer , priority 0 [ 161.306765][ T9671] syzkaller0: MTU too low for tipc bearer [ 161.312591][ T9671] tipc: Disabling bearer [ 161.380857][ T9677] loop1: detected capacity change from 0 to 512 [ 161.396820][ T9677] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 161.398710][ T9679] loop2: detected capacity change from 0 to 512 [ 161.412419][ T9677] EXT4-fs (loop1): 1 truncate cleaned up [ 161.423608][ T9677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.431107][ T9679] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 161.451880][ T9679] EXT4-fs (loop2): 1 truncate cleaned up [ 161.458993][ T9679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.472649][ T8725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.496178][ T7560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.508339][ T9685] loop1: detected capacity change from 0 to 128 [ 161.526544][ T9685] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.552914][ T8725] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.680777][ T9700] loop1: detected capacity change from 0 to 128 [ 161.699456][ T9700] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.712577][ T9700] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.1919: No space for directory leaf checksum. Please run e2fsck -D. [ 161.728004][ T9700] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.1919: checksumming directory block 0 [ 161.775122][ T9708] tipc: Enabling of bearer rejected, failed to enable media [ 161.825386][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 161.825404][ T29] audit: type=1326 audit(161.863:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 161.859561][ T29] audit: type=1326 audit(161.893:11604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 161.882593][ T29] audit: type=1326 audit(161.893:11605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 161.905711][ T29] audit: type=1326 audit(161.893:11606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 161.928734][ T29] audit: type=1326 audit(161.893:11607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.4.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 161.965881][ T29] audit: type=1400 audit(162.003:11608): avc: denied { read } for pid=9719 comm="syz.4.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.967279][ T8725] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.023493][ T29] audit: type=1326 audit(162.053:11609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9727 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0a6dff9 code=0x7ffc0000 [ 162.046894][ T29] audit: type=1326 audit(162.083:11610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9727 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcda0a6dff9 code=0x7ffc0000 [ 162.069922][ T29] audit: type=1326 audit(162.083:11611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9727 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0a6dff9 code=0x7ffc0000 [ 162.092673][ T9715] lo speed is unknown, defaulting to 1000 [ 162.114474][ T29] audit: type=1326 audit(162.123:11612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9727 comm="syz.1.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0a6dff9 code=0x7ffc0000 [ 162.203396][ T9715] chnl_net:caif_netlink_parms(): no params data found [ 162.245061][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.259868][ T9743] loop1: detected capacity change from 0 to 512 [ 162.269677][ T9743] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 162.284964][ T9743] EXT4-fs (loop1): 1 truncate cleaned up [ 162.291029][ T9743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.309344][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.316540][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.324561][ T9715] bridge_slave_0: entered allmulticast mode [ 162.331157][ T9715] bridge_slave_0: entered promiscuous mode [ 162.342608][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.355585][ T8725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.420852][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.428096][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.447778][ T9715] bridge_slave_1: entered allmulticast mode [ 162.454345][ T9715] bridge_slave_1: entered promiscuous mode [ 162.464426][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.542156][ T9760] loop1: detected capacity change from 0 to 128 [ 162.551813][ T9760] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.555394][ T9715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.575306][ T9715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.575738][ T9760] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.1934: No space for directory leaf checksum. Please run e2fsck -D. [ 162.599714][ T9760] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.1934: checksumming directory block 0 [ 162.637211][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.675403][ T9715] team0: Port device team_slave_0 added [ 162.682035][ T9715] team0: Port device team_slave_1 added [ 162.701150][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.708192][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.734217][ T9715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.747440][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.754440][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.780482][ T9715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.791519][ T9749] lo speed is unknown, defaulting to 1000 [ 162.850286][ T9715] hsr_slave_0: entered promiscuous mode [ 162.859447][ T9715] hsr_slave_1: entered promiscuous mode [ 162.870245][ T9715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.878579][ T9715] Cannot create hsr debugfs directory [ 162.884313][ T28] bridge_slave_1: left allmulticast mode [ 162.889988][ T28] bridge_slave_1: left promiscuous mode [ 162.895720][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.903381][ T28] bridge_slave_0: left allmulticast mode [ 162.903663][ T8725] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.909054][ T28] bridge_slave_0: left promiscuous mode [ 162.909224][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.026178][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.036511][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.046906][ T28] bond0 (unregistering): Released all slaves [ 163.056520][ T9775] tc_dump_action: action bad kind [ 163.116469][ T28] tipc: Left network mode [ 163.172894][ T28] hsr_slave_0: left promiscuous mode [ 163.178702][ T28] hsr_slave_1: left promiscuous mode [ 163.187780][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.195243][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.202973][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.210513][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.222541][ T28] veth0_macvtap: left promiscuous mode [ 163.228082][ T28] veth1_vlan: left promiscuous mode [ 163.233351][ T28] veth0_vlan: left promiscuous mode [ 163.333957][ T28] team0 (unregistering): Port device team_slave_1 removed [ 163.348170][ T28] team0 (unregistering): Port device team_slave_0 removed [ 163.431007][ T9749] chnl_net:caif_netlink_parms(): no params data found [ 163.563010][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.570121][ T9749] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.582241][ T9749] bridge_slave_0: entered allmulticast mode [ 163.589236][ T9749] bridge_slave_0: entered promiscuous mode [ 163.617171][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.624271][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.631761][ T9749] bridge_slave_1: entered allmulticast mode [ 163.641659][ T9749] bridge_slave_1: entered promiscuous mode [ 163.672062][ T9749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.682847][ T9749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.704575][ T9749] team0: Port device team_slave_0 added [ 163.711078][ T9749] team0: Port device team_slave_1 added [ 163.726567][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.733516][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.759501][ T9749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.771074][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.778057][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.803983][ T9749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.831695][ T9749] hsr_slave_0: entered promiscuous mode [ 163.838062][ T9749] hsr_slave_1: entered promiscuous mode [ 163.844071][ T9749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.851683][ T9749] Cannot create hsr debugfs directory [ 163.915359][ T9715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.924164][ T9715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.936386][ T9749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.947766][ T9715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.956937][ T9715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.984913][ T9814] tipc: Enabling of bearer rejected, failed to enable media [ 164.044049][ T9822] loop4: detected capacity change from 0 to 512 [ 164.053063][ T9749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.064996][ T9822] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 164.080778][ T9822] EXT4-fs (loop4): 1 truncate cleaned up [ 164.093270][ T9822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.144520][ T9749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.146861][ T9264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.177208][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.196450][ T9715] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.213551][ T9836] loop4: detected capacity change from 0 to 128 [ 164.229125][ T9749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.236659][ T9836] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.255053][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.262199][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.274897][ T1788] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.281946][ T1788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.297535][ T9264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.312439][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 164.330806][ T28] bridge_slave_1: left allmulticast mode [ 164.336538][ T28] bridge_slave_1: left promiscuous mode [ 164.342253][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.355465][ T28] bridge_slave_0: left allmulticast mode [ 164.361188][ T28] bridge_slave_0: left promiscuous mode [ 164.361234][ T9844] loop4: detected capacity change from 0 to 128 [ 164.366977][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.377080][ T9844] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.399190][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.407853][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.517924][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.528291][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.538905][ T28] bond0 (unregistering): Released all slaves [ 164.572191][ T9749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.587672][ T9749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.588837][ T9857] loop2: detected capacity change from 0 to 512 [ 164.602416][ T28] tipc: Left network mode [ 164.603130][ T9749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.616094][ T9857] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 164.617543][ T9749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.637885][ T9857] EXT4-fs (loop2): 1 truncate cleaned up [ 164.645411][ T9857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.650267][ T28] hsr_slave_0: left promiscuous mode [ 164.668240][ T28] hsr_slave_1: left promiscuous mode [ 164.674336][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.681788][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.690019][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.690984][ T7560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.697563][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.716729][ T28] veth0_macvtap: left promiscuous mode [ 164.722412][ T28] veth1_vlan: left promiscuous mode [ 164.727839][ T28] veth0_vlan: left promiscuous mode [ 164.812449][ T28] team0 (unregistering): Port device team_slave_1 removed [ 164.822782][ T28] team0 (unregistering): Port device team_slave_0 removed [ 164.873281][ T9715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.917848][ T9749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.932367][ T9749] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.944124][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.951204][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.963327][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.970464][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.999229][ T9715] veth0_vlan: entered promiscuous mode [ 165.008967][ T9715] veth1_vlan: entered promiscuous mode [ 165.018021][ T9264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.036173][ T9715] veth0_macvtap: entered promiscuous mode [ 165.047289][ T9715] veth1_macvtap: entered promiscuous mode [ 165.058993][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.069499][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.079376][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.089862][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.099768][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.103327][ T9888] loop2: detected capacity change from 0 to 512 [ 165.110234][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.110252][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.110266][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.110281][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.110298][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.130519][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.177381][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.187880][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.197746][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.208201][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.218157][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.228594][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.238408][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.248890][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.258758][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.269130][ T9888] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, [ 165.269239][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.269222][ T9888] inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 165.297349][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.310341][ T9715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.319193][ T9715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.327938][ T9715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.333369][ T9888] EXT4-fs (loop2): 1 truncate cleaned up [ 165.336653][ T9715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.371615][ T9888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.428065][ T9749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.709719][ T7560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.760984][ T9749] veth0_vlan: entered promiscuous mode [ 165.769653][ T9749] veth1_vlan: entered promiscuous mode [ 165.798260][ T9749] veth0_macvtap: entered promiscuous mode [ 165.808728][ T9749] veth1_macvtap: entered promiscuous mode [ 165.822356][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.832855][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.842737][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.850115][ T9932] FAULT_INJECTION: forcing a failure. [ 165.850115][ T9932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.853261][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.866281][ T9932] CPU: 1 UID: 0 PID: 9932 Comm: syz.2.1985 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 165.876189][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.888231][ T9932] Tainted: [W]=WARN [ 165.888239][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.888291][ T9932] Call Trace: [ 165.888296][ T9932] [ 165.888302][ T9932] dump_stack_lvl+0xf2/0x150 [ 165.898701][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.902464][ T9932] dump_stack+0x15/0x20 [ 165.912544][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.915764][ T9932] should_fail_ex+0x223/0x230 [ 165.918764][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.923328][ T9932] should_fail+0xb/0x10 [ 165.923354][ T9932] should_fail_usercopy+0x1a/0x20 [ 165.933212][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.937315][ T9932] _copy_to_user+0x1e/0xa0 [ 165.947739][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.952378][ T9932] simple_read_from_buffer+0xa0/0x110 [ 165.962184][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.966288][ T9932] proc_fail_nth_read+0xf9/0x140 [ 165.971297][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.981692][ T9932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.989445][ T9749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.995873][ T9932] vfs_read+0x195/0x720 [ 165.995909][ T9932] ? sock_common_getsockopt+0x5b/0x70 [ 166.002491][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.011649][ T9932] ? __rcu_read_unlock+0x4e/0x70 [ 166.016851][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.026357][ T9932] ? __fget_files+0x1d4/0x210 [ 166.031961][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.039128][ T9932] ksys_read+0xeb/0x1b0 [ 166.043273][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.048619][ T9932] __x64_sys_read+0x42/0x50 [ 166.059059][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.063943][ T9932] x64_sys_call+0x27d3/0x2d60 [ 166.073743][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.078372][ T9932] do_syscall_64+0xc9/0x1c0 [ 166.088816][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.092907][ T9932] ? clear_bhb_loop+0x55/0xb0 [ 166.102825][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.107163][ T9932] ? clear_bhb_loop+0x55/0xb0 [ 166.107197][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.117611][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.122239][ T9932] RIP: 0033:0x7fa6f6a8ca3c [ 166.132054][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.136515][ T9932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 166.146922][ T9749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.151548][ T9932] RSP: 002b:00007fa6f5707030 EFLAGS: 00000246 [ 166.161399][ T9749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.165980][ T9932] ORIG_RAX: 0000000000000000 [ 166.165991][ T9932] RAX: ffffffffffffffda RBX: 00007fa6f6c45f80 RCX: 00007fa6f6a8ca3c [ 166.166006][ T9932] RDX: 000000000000000f RSI: 00007fa6f57070a0 RDI: 0000000000000005 [ 166.173887][ T9749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.182266][ T9932] RBP: 00007fa6f5707090 R08: 0000000000000000 R09: 0000000000000000 [ 166.182284][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.182297][ T9932] R13: 0000000000000000 R14: 00007fa6f6c45f80 R15: 00007fff26d635b8 [ 166.182318][ T9932] [ 166.283575][ T9937] loop2: detected capacity change from 0 to 512 [ 166.291222][ T9749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.313427][ T9749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.322271][ T9749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.331031][ T9749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.369678][ T9937] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 166.393576][ T9940] tipc: Started in network mode [ 166.394750][ T9937] EXT4-fs (loop2): 1 truncate cleaned up [ 166.398492][ T9940] tipc: Node identity 5a6e851e2ca5, cluster identity 4711 [ 166.404497][ T9937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.411318][ T9940] tipc: Enabled bearer , priority 0 [ 166.435974][ T9940] syzkaller0: MTU too low for tipc bearer [ 166.441812][ T9940] tipc: Disabling bearer [ 166.458425][ T7560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.489897][ T9945] loop2: detected capacity change from 0 to 2048 [ 166.500159][ T9945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.516779][ T9945] EXT4-fs error (device loop2): ext4_find_dest_de:2069: inode #12: block 9: comm +}[@: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 166.566011][ T7560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.582403][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1995'. [ 166.597415][ T9958] FAULT_INJECTION: forcing a failure. [ 166.597415][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 166.610089][ T9958] CPU: 1 UID: 0 PID: 9958 Comm: syz.4.1995 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 166.622288][ T9958] Tainted: [W]=WARN [ 166.626107][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.636164][ T9958] Call Trace: [ 166.639463][ T9958] [ 166.642445][ T9958] dump_stack_lvl+0xf2/0x150 [ 166.647055][ T9958] dump_stack+0x15/0x20 [ 166.651204][ T9958] should_fail_ex+0x223/0x230 [ 166.655905][ T9958] ? skb_clone+0x154/0x1f0 [ 166.660323][ T9958] should_failslab+0x8f/0xb0 [ 166.665007][ T9958] kmem_cache_alloc_noprof+0x4c/0x290 [ 166.670386][ T9958] ? mod_objcg_state+0x2ea/0x4f0 [ 166.675362][ T9958] skb_clone+0x154/0x1f0 [ 166.679621][ T9958] dev_queue_xmit_nit+0x149/0x620 [ 166.684667][ T9958] dev_hard_start_xmit+0xcc/0x3f0 [ 166.689795][ T9958] ? validate_xmit_skb+0x658/0x8d0 [ 166.694918][ T9958] __dev_queue_xmit+0xfba/0x2040 [ 166.699992][ T9958] ? __dev_queue_xmit+0x161/0x2040 [ 166.705140][ T9958] ? __skb_clone+0x251/0x2f0 [ 166.709799][ T9958] ? __skb_clone+0x2d0/0x2f0 [ 166.714449][ T9958] __netlink_deliver_tap+0x39f/0x4c0 [ 166.719842][ T9958] netlink_unicast+0x64a/0x670 [ 166.724611][ T9958] netlink_sendmsg+0x5cc/0x6e0 [ 166.729385][ T9958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.734695][ T9958] __sock_sendmsg+0x140/0x180 [ 166.739449][ T9958] ____sys_sendmsg+0x312/0x410 [ 166.744259][ T9958] __sys_sendmsg+0x1d9/0x270 [ 166.748873][ T9958] __x64_sys_sendmsg+0x46/0x50 [ 166.753673][ T9958] x64_sys_call+0x2689/0x2d60 [ 166.758425][ T9958] do_syscall_64+0xc9/0x1c0 [ 166.762928][ T9958] ? clear_bhb_loop+0x55/0xb0 [ 166.767609][ T9958] ? clear_bhb_loop+0x55/0xb0 [ 166.772299][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.778205][ T9958] RIP: 0033:0x7f8f605bdff9 [ 166.782676][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.802331][ T9958] RSP: 002b:00007f8f5f231038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.810747][ T9958] RAX: ffffffffffffffda RBX: 00007f8f60775f80 RCX: 00007f8f605bdff9 [ 166.818715][ T9958] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000d [ 166.826701][ T9958] RBP: 00007f8f5f231090 R08: 0000000000000000 R09: 0000000000000000 [ 166.834663][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.842703][ T9958] R13: 0000000000000000 R14: 00007f8f60775f80 R15: 00007fff726fc708 [ 166.850675][ T9958] [ 166.857685][ T9958] netlink: 'syz.4.1995': attribute type 7 has an invalid length. [ 166.883717][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 166.883790][ T29] audit: type=1400 audit(166.913:12062): avc: denied { execute } for pid=9968 comm="syz.0.1998" path="/4/cpu.stat" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.912198][ T29] audit: type=1400 audit(166.923:12063): avc: denied { mounton } for pid=9970 comm="syz.0.1999" path="/5" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.933665][ T29] audit: type=1400 audit(166.923:12064): avc: denied { mount } for pid=9970 comm="syz.0.1999" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 166.955387][ T29] audit: type=1400 audit(166.923:12065): avc: denied { create } for pid=9970 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 166.975795][ T29] audit: type=1400 audit(166.963:12066): avc: denied { create } for pid=9966 comm="syz.1.1997" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 166.996561][ T29] audit: type=1400 audit(166.973:12067): avc: denied { map } for pid=9966 comm="syz.1.1997" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.020333][ T29] audit: type=1400 audit(166.973:12068): avc: denied { read write } for pid=9966 comm="syz.1.1997" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.044692][ T29] audit: type=1400 audit(167.013:12069): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 167.066235][ T29] audit: type=1400 audit(167.013:12070): avc: denied { search } for pid=2950 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.087408][ T29] audit: type=1400 audit(167.013:12071): avc: denied { open } for pid=2950 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 167.125903][ T9982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2001'. [ 167.137415][ T9982] netlink: 'syz.2.2001': attribute type 7 has an invalid length. [ 167.928286][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 168.566979][T10027] pimreg: entered allmulticast mode [ 168.810333][T10048] tipc: Enabling of bearer rejected, failed to enable media [ 169.009006][T10063] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 169.748287][T10081] tipc: Enabling of bearer rejected, failed to enable media [ 170.410428][T10115] tipc: Enabling of bearer rejected, failed to enable media [ 170.798753][T10138] lo speed is unknown, defaulting to 1000 [ 171.064683][T10154] pimreg: entered allmulticast mode [ 171.070548][T10154] pimreg: left allmulticast mode [ 171.507848][T10179] pimreg: entered allmulticast mode [ 171.526475][T10169] pimreg: left allmulticast mode [ 171.587041][T10186] pimreg: entered allmulticast mode [ 171.592991][T10184] pimreg: left allmulticast mode [ 171.719272][T10192] netlink: 'syz.4.2080': attribute type 10 has an invalid length. [ 171.735238][T10192] team0: Device hsr_slave_0 failed to register rx_handler [ 171.958991][ T29] kauditd_printk_skb: 894 callbacks suppressed [ 171.959008][ T29] audit: type=1326 audit(171.993:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 171.988283][ T29] audit: type=1326 audit(171.993:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.011548][ T29] audit: type=1326 audit(171.993:12968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.034679][ T29] audit: type=1326 audit(171.993:12969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.057985][ T29] audit: type=1326 audit(171.993:12970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.081091][ T29] audit: type=1326 audit(171.993:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.104447][ T29] audit: type=1326 audit(171.993:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.127366][ T29] audit: type=1326 audit(171.993:12973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.150382][ T29] audit: type=1326 audit(171.993:12974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 172.173331][ T29] audit: type=1326 audit(171.993:12975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451623dff9 code=0x7ffc0000 [ 175.644156][T10351] tipc: Enabled bearer , priority 0 [ 175.653318][T10351] syzkaller0: MTU too low for tipc bearer [ 175.659250][T10351] tipc: Disabling bearer [ 177.213403][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 177.213418][ T29] audit: type=1326 audit(177.233:13601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.242705][ T29] audit: type=1326 audit(177.233:13602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.264860][T10412] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 177.265781][ T29] audit: type=1326 audit(177.233:13603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.297423][ T29] audit: type=1326 audit(177.233:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.320442][ T29] audit: type=1326 audit(177.233:13605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.343708][ T29] audit: type=1326 audit(177.233:13606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.366726][ T29] audit: type=1326 audit(177.233:13607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.389758][ T29] audit: type=1326 audit(177.233:13608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.406562][T10414] lo speed is unknown, defaulting to 1000 [ 177.412720][ T29] audit: type=1326 audit(177.233:13609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.441406][ T29] audit: type=1326 audit(177.233:13610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.4.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 177.489033][T10414] chnl_net:caif_netlink_parms(): no params data found [ 177.527335][T10414] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.535126][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.543746][T10414] bridge_slave_0: entered allmulticast mode [ 177.552201][T10414] bridge_slave_0: entered promiscuous mode [ 177.559724][T10414] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.566816][T10414] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.574127][T10414] bridge_slave_1: entered allmulticast mode [ 177.580798][T10414] bridge_slave_1: entered promiscuous mode [ 177.602797][T10414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.615337][T10414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.635739][T10414] team0: Port device team_slave_0 added [ 177.642272][T10414] team0: Port device team_slave_1 added [ 177.657501][T10414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.664495][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.690473][T10414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.701931][T10414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.708930][T10414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.734918][T10414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.760721][T10414] hsr_slave_0: entered promiscuous mode [ 177.768780][T10414] hsr_slave_1: entered promiscuous mode [ 177.782132][ T1788] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.841883][ T1788] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.889689][ T1788] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.928990][ T1788] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.979604][ T1788] bridge_slave_1: left allmulticast mode [ 177.985347][ T1788] bridge_slave_1: left promiscuous mode [ 177.991074][ T1788] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.999380][ T1788] bridge_slave_0: left allmulticast mode [ 178.005078][ T1788] bridge_slave_0: left promiscuous mode [ 178.010696][ T1788] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.117377][ T1788] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.127900][ T1788] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.137991][ T1788] @ (unregistering): Released all slaves [ 178.195347][ T1788] tipc: Left network mode [ 178.205748][ T1788] hsr_slave_0: left promiscuous mode [ 178.212133][ T1788] hsr_slave_1: left promiscuous mode [ 178.218216][ T1788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.225758][ T1788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.236585][ T1788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.244250][ T1788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.255593][ T1788] veth1_macvtap: left promiscuous mode [ 178.261185][ T1788] veth0_macvtap: left promiscuous mode [ 178.266831][ T1788] veth1_vlan: left promiscuous mode [ 178.272054][ T1788] veth0_vlan: left promiscuous mode [ 178.360541][ T1788] team0 (unregistering): Port device team_slave_1 removed [ 178.371142][ T1788] team0 (unregistering): Port device team_slave_0 removed [ 178.618028][T10414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.626966][T10414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.635948][T10414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.645003][T10414] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.689401][T10414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.702377][T10414] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.712262][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.719347][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.731487][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.738596][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.809632][T10414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.882940][T10414] veth0_vlan: entered promiscuous mode [ 178.891678][T10414] veth1_vlan: entered promiscuous mode [ 178.909010][T10414] veth0_macvtap: entered promiscuous mode [ 178.916657][T10414] veth1_macvtap: entered promiscuous mode [ 178.927193][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.937688][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.947554][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.957975][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.967866][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.978313][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.988138][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.998618][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.008459][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.018948][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.028777][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.039210][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.050292][T10414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.063200][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.073813][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.083762][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.094235][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.104076][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.114515][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.124335][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.134925][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.144778][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.155266][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.165105][T10414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.175603][T10414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.187813][T10414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.196424][T10414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.205234][T10414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.214076][T10414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.222841][T10414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.332052][T10475] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 179.361828][T10486] tipc: Enabling of bearer rejected, failed to enable media [ 180.305798][T10517] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 180.329016][T10521] tipc: Enabling of bearer rejected, failed to enable media [ 181.327913][T10547] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 182.310998][T10582] pimreg: entered allmulticast mode [ 182.318120][T10582] pimreg: left allmulticast mode [ 183.004448][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 183.004465][ T29] audit: type=1326 audit(183.043:14395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.034056][ T29] audit: type=1326 audit(183.043:14396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.057206][ T29] audit: type=1326 audit(183.043:14397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080339][ T29] audit: type=1326 audit(183.043:14398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080403][ T29] audit: type=1326 audit(183.043:14399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080441][ T29] audit: type=1326 audit(183.043:14400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080471][ T29] audit: type=1326 audit(183.043:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080522][ T29] audit: type=1326 audit(183.043:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080555][ T29] audit: type=1326 audit(183.043:14403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.080583][ T29] audit: type=1326 audit(183.043:14404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10586 comm="syz.4.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 183.446562][T10593] lo speed is unknown, defaulting to 1000 [ 183.511946][T10593] chnl_net:caif_netlink_parms(): no params data found [ 183.550352][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.721536][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.773378][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.799714][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.806909][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.817431][T10593] bridge_slave_0: entered allmulticast mode [ 183.825486][T10593] bridge_slave_0: entered promiscuous mode [ 183.833183][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.840415][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.850443][T10593] bridge_slave_1: entered allmulticast mode [ 183.858728][T10593] bridge_slave_1: entered promiscuous mode [ 183.871234][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.901217][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.912953][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.933348][T10593] team0: Port device team_slave_0 added [ 183.941248][T10593] team0: Port device team_slave_1 added [ 183.960640][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.967811][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.993897][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.008057][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.015156][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.041373][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.061685][ T28] bridge_slave_1: left allmulticast mode [ 184.067464][ T28] bridge_slave_1: left promiscuous mode [ 184.073116][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.081252][ T28] bridge_slave_0: left allmulticast mode [ 184.087095][ T28] bridge_slave_0: left promiscuous mode [ 184.093039][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.187351][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.198366][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.209026][ T28] bond0 (unregistering): Released all slaves [ 184.237348][T10593] hsr_slave_0: entered promiscuous mode [ 184.252352][T10593] hsr_slave_1: entered promiscuous mode [ 184.262595][T10593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.273231][T10593] Cannot create hsr debugfs directory [ 184.289635][T10627] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 184.306546][T10625] tipc: Enabling of bearer rejected, failed to enable media [ 184.326892][ T28] hsr_slave_0: left promiscuous mode [ 184.338709][ T28] hsr_slave_1: left promiscuous mode [ 184.359219][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.366758][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.377126][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.384608][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.395554][ T28] veth1_macvtap: left promiscuous mode [ 184.401061][ T28] veth0_macvtap: left promiscuous mode [ 184.406672][ T28] veth1_vlan: left promiscuous mode [ 184.411934][ T28] veth0_vlan: left promiscuous mode [ 184.463550][ T28] pimreg (unregistering): left allmulticast mode [ 184.507127][ T28] team0 (unregistering): Port device team_slave_1 removed [ 184.517140][ T28] team0 (unregistering): Port device team_slave_0 removed [ 184.871269][T10593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.880824][T10593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.889590][T10593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.899423][T10593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.938303][T10593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.951024][T10593] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.960927][ T3384] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.966026][T10666] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 184.968024][ T3384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.991336][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.998431][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.026244][T10593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.086368][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.157819][T10593] veth0_vlan: entered promiscuous mode [ 185.166383][T10593] veth1_vlan: entered promiscuous mode [ 185.181804][T10593] veth0_macvtap: entered promiscuous mode [ 185.189532][T10593] veth1_macvtap: entered promiscuous mode [ 185.200421][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.211042][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.220915][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.231616][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.241584][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.252018][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.261935][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.272452][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.282336][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.292921][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.302877][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.313423][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.325779][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.340926][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.351463][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.361293][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.371755][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.381667][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.392152][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.401969][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.412566][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.422450][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.432908][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.442732][T10593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.453231][T10593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.464387][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.476526][T10593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.485403][T10593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.494147][T10593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.503082][T10593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.578796][T10763] tipc: Enabling of bearer rejected, failed to enable media [ 186.745869][T10773] pimreg: entered allmulticast mode [ 186.752796][T10773] pimreg: left allmulticast mode [ 187.013907][T10784] ªªªªªª: renamed from vlan0 (while UP) [ 187.100212][T10795] tipc: Enabling of bearer rejected, failed to enable media [ 187.371551][T10810] pimreg: entered allmulticast mode [ 187.377729][T10810] pimreg: left allmulticast mode [ 188.116298][T10837] pimreg: entered allmulticast mode [ 188.122195][T10837] pimreg: left allmulticast mode [ 188.288838][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 188.288855][ T29] audit: type=1326 audit(188.323:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.318551][ T29] audit: type=1326 audit(188.323:15088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.341640][ T29] audit: type=1326 audit(188.323:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.364635][ T29] audit: type=1326 audit(188.323:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.387662][ T29] audit: type=1326 audit(188.323:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.410684][ T29] audit: type=1326 audit(188.323:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.433800][ T29] audit: type=1326 audit(188.323:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.456798][ T29] audit: type=1326 audit(188.323:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.479749][ T29] audit: type=1326 audit(188.323:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 188.502806][ T29] audit: type=1326 audit(188.323:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10838 comm="syz.3.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 189.107014][T10865] tipc: Enabling of bearer rejected, failed to enable media [ 189.240966][T10872] pimreg: entered allmulticast mode [ 189.246988][T10872] pimreg: left allmulticast mode [ 190.656527][T10902] tipc: Started in network mode [ 190.661449][T10902] tipc: Node identity fa6e4d25289a, cluster identity 4711 [ 190.669119][T10902] tipc: Enabled bearer , priority 0 [ 190.678116][T10902] syzkaller0: MTU too low for tipc bearer [ 190.683883][T10902] tipc: Disabling bearer [ 190.883082][T10916] pimreg: entered allmulticast mode [ 190.890911][T10916] pimreg: left allmulticast mode [ 191.511092][T10928] lo speed is unknown, defaulting to 1000 [ 191.565914][T10928] chnl_net:caif_netlink_parms(): no params data found [ 191.603658][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.610759][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.619188][T10928] bridge_slave_0: entered allmulticast mode [ 191.626501][T10928] bridge_slave_0: entered promiscuous mode [ 191.633359][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.640445][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.647808][T10928] bridge_slave_1: entered allmulticast mode [ 191.654176][T10928] bridge_slave_1: entered promiscuous mode [ 191.676717][T10928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.689174][T10928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.709804][ T1788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.729775][T10928] team0: Port device team_slave_0 added [ 191.738747][T10928] team0: Port device team_slave_1 added [ 191.756705][T10928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.763689][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.789796][T10928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.803657][T10928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.810686][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.836685][T10928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.852246][ T1788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.879653][T10928] hsr_slave_0: entered promiscuous mode [ 191.886709][T10928] hsr_slave_1: entered promiscuous mode [ 191.892527][T10928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.917969][T10928] Cannot create hsr debugfs directory [ 192.096941][ T1788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.180795][ T1788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.326083][ T1788] bridge_slave_1: left allmulticast mode [ 192.331820][ T1788] bridge_slave_1: left promiscuous mode [ 192.337683][ T1788] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.348527][ T1788] bridge_slave_0: left allmulticast mode [ 192.354208][ T1788] bridge_slave_0: left promiscuous mode [ 192.359879][ T1788] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.498652][ T1788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.564854][ T1788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.581879][ T1788] bond0 (unregistering): Released all slaves [ 192.645254][ T1788] tipc: Left network mode [ 192.652203][ T1788] hsr_slave_0: left promiscuous mode [ 192.658025][ T1788] hsr_slave_1: left promiscuous mode [ 192.672540][ T1788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.680051][ T1788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.704493][ T1788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.711932][ T1788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.738237][ T1788] veth1_macvtap: left promiscuous mode [ 192.743779][ T1788] veth0_macvtap: left promiscuous mode [ 192.871073][ T1788] team0 (unregistering): Port device team_slave_1 removed [ 192.881941][ T1788] team0 (unregistering): Port device team_slave_0 removed [ 192.928463][T10962] ªªªªªª: renamed from vlan0 (while UP) [ 193.127043][T10980] pimreg: entered allmulticast mode [ 193.132760][T10980] pimreg: left allmulticast mode [ 193.189455][T10928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.197966][T10928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.206589][T10928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.215707][T10928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.275252][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.288180][T10928] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.298764][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.305875][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.317217][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.324301][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.351419][T10928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.361898][T10928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.430104][T10928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.479140][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 193.479154][ T29] audit: type=1400 audit(193.513:15754): avc: denied { write } for pid=10991 comm="syz.4.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.516724][T10928] veth0_vlan: entered promiscuous mode [ 193.527583][T10928] veth1_vlan: entered promiscuous mode [ 193.539576][ T29] audit: type=1400 audit(193.573:15755): avc: denied { name_bind } for pid=11004 comm="syz.2.2365" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 193.543785][T10928] veth0_macvtap: entered promiscuous mode [ 193.568186][T10928] veth1_macvtap: entered promiscuous mode [ 193.580842][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.591310][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.598994][T11007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2366'. [ 193.601229][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.620635][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.630569][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.641309][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.651337][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.661913][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.671734][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.682160][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.692009][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.702502][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.714000][T10928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.723246][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.733794][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.743723][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.754310][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.764230][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.774723][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.784630][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.795071][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.804914][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.815433][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.825326][T10928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.835775][T10928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.846576][T10928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.862225][T10928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.871122][T10928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.880067][T10928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.880141][T10928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.625262][T11031] lo speed is unknown, defaulting to 1000 [ 194.683421][T11031] chnl_net:caif_netlink_parms(): no params data found [ 194.689650][ T29] audit: type=1326 audit(194.723:15756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.2.2379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f954adfdff9 code=0x0 [ 194.740023][T11031] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.747164][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.754426][T11031] bridge_slave_0: entered allmulticast mode [ 194.760785][T11031] bridge_slave_0: entered promiscuous mode [ 194.767677][T11031] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.774752][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.781816][T11031] bridge_slave_1: entered allmulticast mode [ 194.788245][T11031] bridge_slave_1: entered promiscuous mode [ 194.808003][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.822910][ T1788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.826492][ T29] audit: type=1400 audit(194.853:15757): avc: denied { write } for pid=11055 comm="syz.2.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 194.860182][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.883346][T11031] team0: Port device team_slave_0 added [ 194.890276][T11031] team0: Port device team_slave_1 added [ 194.899815][ T1788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.923401][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.930383][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.956437][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.967840][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.974858][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.000904][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.050497][T11031] hsr_slave_0: entered promiscuous mode [ 195.057722][T11031] hsr_slave_1: entered promiscuous mode [ 195.065184][T11031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.072761][T11031] Cannot create hsr debugfs directory [ 195.086838][ T1788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.159731][ T29] audit: type=1326 audit(195.173:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 195.182993][ T29] audit: type=1326 audit(195.173:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 195.206120][ T29] audit: type=1326 audit(195.173:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 195.229214][ T29] audit: type=1326 audit(195.173:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 195.252267][ T29] audit: type=1326 audit(195.173:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 195.275566][ T29] audit: type=1326 audit(195.173:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 195.372382][ T1788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.487180][ T1788] bridge_slave_1: left allmulticast mode [ 195.492876][ T1788] bridge_slave_1: left promiscuous mode [ 195.498553][ T1788] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.506618][ T1788] bridge_slave_0: left allmulticast mode [ 195.512270][ T1788] bridge_slave_0: left promiscuous mode [ 195.517957][ T1788] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.616396][ T1788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.627364][ T1788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.637321][ T1788] bond0 (unregistering): Released all slaves [ 195.698798][ T1788] hsr_slave_0: left promiscuous mode [ 195.704512][ T1788] hsr_slave_1: left promiscuous mode [ 195.710260][ T1788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.717701][ T1788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.726053][ T1788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.733521][ T1788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.743179][ T1788] veth1_macvtap: left promiscuous mode [ 195.749045][ T1788] veth0_macvtap: left promiscuous mode [ 195.754614][ T1788] veth1_vlan: left promiscuous mode [ 195.759981][ T1788] veth0_vlan: left promiscuous mode [ 195.891561][ T1788] team0 (unregistering): Port device team_slave_1 removed [ 195.902007][ T1788] team0 (unregistering): Port device team_slave_0 removed [ 196.158858][T11031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.169822][T11031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.179398][T11031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.191453][T11031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.236459][T11031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.250783][T11031] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.260453][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.267544][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.278837][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.286047][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.365890][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.442870][T11031] veth0_vlan: entered promiscuous mode [ 196.451683][T11031] veth1_vlan: entered promiscuous mode [ 196.467815][T11031] veth0_macvtap: entered promiscuous mode [ 196.475321][T11031] veth1_macvtap: entered promiscuous mode [ 196.485980][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.496574][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.506405][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.516865][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.526692][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.537240][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.547067][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.557510][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.567321][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.577756][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.587594][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.598034][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.609160][T11031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.620064][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.630763][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.640633][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.651151][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.661082][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.671628][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.681610][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.692095][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.701953][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.712541][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.722368][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.732788][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.743781][T11031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.754154][T11031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.762940][T11031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.771731][T11031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.780621][T11031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.792288][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'. [ 197.801248][T11164] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2412'. [ 198.842581][T11191] lo speed is unknown, defaulting to 1000 [ 198.873261][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 198.873276][ T29] audit: type=1400 audit(198.903:16068): avc: denied { create } for pid=11190 comm="syz.3.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 198.936786][ T29] audit: type=1326 audit(198.973:16069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 198.960035][ T29] audit: type=1326 audit(198.973:16070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 198.983073][ T29] audit: type=1326 audit(198.973:16071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.006071][ T29] audit: type=1326 audit(198.973:16072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.029050][ T29] audit: type=1326 audit(198.973:16073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.052042][ T29] audit: type=1326 audit(198.973:16074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.075380][ T29] audit: type=1326 audit(198.973:16075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.098512][ T29] audit: type=1326 audit(198.973:16076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.121576][ T29] audit: type=1326 audit(198.973:16077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz.3.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 199.744342][T11237] tipc: Enabling of bearer rejected, failed to enable media [ 200.039439][T11260] block device autoloading is deprecated and will be removed. [ 200.144796][T11266] tipc: Enabling of bearer rejected, failed to enable media [ 201.071319][T11313] tipc: Enabling of bearer rejected, failed to enable media [ 201.933646][T11338] ªªªªªª: renamed from vlan0 (while UP) [ 202.227807][T11353] tipc: Enabling of bearer rejected, failed to enable media [ 202.579768][T11371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11371 comm=syz.3.2484 [ 202.594341][T11371] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 202.605094][T11371] team0: Port device netdevsim1 added [ 202.692063][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2490'. [ 202.721897][T11385] tipc: Enabling of bearer rejected, failed to enable media [ 202.864219][T11396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2495'. [ 203.264160][T11419] tipc: Enabling of bearer rejected, failed to enable media [ 204.218138][T11444] pimreg: entered allmulticast mode [ 204.223888][T11444] pimreg: left allmulticast mode [ 204.365924][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 204.365945][ T29] audit: type=1326 audit(204.403:16534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.395217][ T29] audit: type=1326 audit(204.403:16535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.418486][ T29] audit: type=1326 audit(204.403:16536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.441554][ T29] audit: type=1326 audit(204.403:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.464650][ T29] audit: type=1326 audit(204.403:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.487732][ T29] audit: type=1326 audit(204.403:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.510750][ T29] audit: type=1326 audit(204.403:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.533761][ T29] audit: type=1326 audit(204.403:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.556759][ T29] audit: type=1326 audit(204.403:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.579709][ T29] audit: type=1326 audit(204.403:16543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 204.722722][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2520'. [ 205.806175][T11506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2535'. [ 205.860807][T11513] pim6reg: entered allmulticast mode [ 205.868498][T11513] pim6reg: left allmulticast mode [ 205.879580][T11500] lo speed is unknown, defaulting to 1000 [ 205.923793][ T3384] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.948081][T11500] chnl_net:caif_netlink_parms(): no params data found [ 205.986598][T11500] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.993767][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.014309][T11500] bridge_slave_0: entered allmulticast mode [ 206.020972][T11500] bridge_slave_0: entered promiscuous mode [ 206.028521][T11500] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.035672][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.043057][T11500] bridge_slave_1: entered allmulticast mode [ 206.051090][T11500] bridge_slave_1: entered promiscuous mode [ 206.061164][ T3384] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.083703][T11500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.095645][T11500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.119927][T11500] team0: Port device team_slave_0 added [ 206.130595][T11500] team0: Port device team_slave_1 added [ 206.141555][ T3384] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.166521][T11500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.173557][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.199653][T11500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.211123][T11500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.218134][T11500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.244175][T11500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.261441][ T3384] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.289489][T11500] hsr_slave_0: entered promiscuous mode [ 206.295832][T11500] hsr_slave_1: entered promiscuous mode [ 206.301910][T11500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.311807][T11500] Cannot create hsr debugfs directory [ 206.345756][ T3384] bridge_slave_1: left allmulticast mode [ 206.351584][ T3384] bridge_slave_1: left promiscuous mode [ 206.357411][ T3384] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.365407][ T3384] bridge_slave_0: left allmulticast mode [ 206.371174][ T3384] bridge_slave_0: left promiscuous mode [ 206.377017][ T3384] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.466228][ T3384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.476629][ T3384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.486854][ T3384] bond0 (unregistering): Released all slaves [ 206.544958][ T3384] tipc: Left network mode [ 206.552197][ T3384] hsr_slave_0: left promiscuous mode [ 206.558049][ T3384] hsr_slave_1: left promiscuous mode [ 206.563706][ T3384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.571144][ T3384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.592534][ T3384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.600052][ T3384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.623676][ T3384] veth1_macvtap: left promiscuous mode [ 206.629286][ T3384] veth0_macvtap: left promiscuous mode [ 206.634909][ T3384] veth1_vlan: left promiscuous mode [ 206.640209][ T3384] veth0_vlan: left promiscuous mode [ 206.729817][ T3384] team0 (unregistering): Port device team_slave_1 removed [ 206.740793][ T3384] team0 (unregistering): Port device team_slave_0 removed [ 206.887744][T11579] pimreg: entered allmulticast mode [ 206.893515][T11579] pimreg: left allmulticast mode [ 207.008464][T11500] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.018226][T11500] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.027195][T11500] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.038438][T11500] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.085587][T11500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.098606][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.108780][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.115853][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.132291][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.139487][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.204603][T11500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.274406][T11500] veth0_vlan: entered promiscuous mode [ 207.283271][T11500] veth1_vlan: entered promiscuous mode [ 207.300553][T11500] veth0_macvtap: entered promiscuous mode [ 207.308747][T11500] veth1_macvtap: entered promiscuous mode [ 207.319620][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.330118][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.339984][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.350561][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.360409][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.370885][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.380750][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.391233][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.401094][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.411605][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.421507][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.431938][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.442633][T11500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.455262][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.465813][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.475672][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.486100][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.495982][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.506444][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.516348][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.527450][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.537301][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.547798][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.557685][T11500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.568115][T11500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.582149][T11500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.593225][T11500] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.602067][T11500] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.610880][T11500] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.620440][T11500] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.591318][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2573'. [ 208.680101][T11655] pimreg: entered allmulticast mode [ 208.686261][T11655] pimreg: left allmulticast mode [ 208.749229][T11658] loop0: detected capacity change from 0 to 128 [ 208.768495][T11658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.938725][T11684] program syz.2.2588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.053242][T11691] pimreg: entered allmulticast mode [ 209.059247][T11691] pimreg: left allmulticast mode [ 209.507608][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 209.507621][ T29] audit: type=1326 audit(209.543:17054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.539869][ T29] audit: type=1326 audit(209.543:17055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.562870][ T29] audit: type=1326 audit(209.543:17056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.585935][ T29] audit: type=1326 audit(209.543:17057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.608923][ T29] audit: type=1326 audit(209.543:17058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.631952][ T29] audit: type=1326 audit(209.543:17059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.654980][ T29] audit: type=1326 audit(209.543:17060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.678020][ T29] audit: type=1326 audit(209.543:17061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.701108][ T29] audit: type=1326 audit(209.543:17062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.724125][ T29] audit: type=1326 audit(209.543:17063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11697 comm="syz.3.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b050fdff9 code=0x7ffc0000 [ 209.753239][T11031] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.771618][T11709] netlink: 'syz.1.2597': attribute type 3 has an invalid length. [ 209.858358][T11719] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 210.477386][T11779] FAULT_INJECTION: forcing a failure. [ 210.477386][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.490545][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.1.2622 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 210.502883][T11779] Tainted: [W]=WARN [ 210.506706][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.516818][T11779] Call Trace: [ 210.520083][T11779] [ 210.523003][T11779] dump_stack_lvl+0xf2/0x150 [ 210.527644][T11779] dump_stack+0x15/0x20 [ 210.531807][T11779] should_fail_ex+0x223/0x230 [ 210.536487][T11779] should_fail+0xb/0x10 [ 210.540671][T11779] should_fail_usercopy+0x1a/0x20 [ 210.545754][T11779] _copy_from_user+0x1e/0xd0 [ 210.550343][T11779] copy_msghdr_from_user+0x54/0x2a0 [ 210.555546][T11779] __sys_sendmsg+0x171/0x270 [ 210.560167][T11779] __x64_sys_sendmsg+0x46/0x50 [ 210.564962][T11779] x64_sys_call+0x2689/0x2d60 [ 210.569686][T11779] do_syscall_64+0xc9/0x1c0 [ 210.574219][T11779] ? clear_bhb_loop+0x55/0xb0 [ 210.579004][T11779] ? clear_bhb_loop+0x55/0xb0 [ 210.583682][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.589684][T11779] RIP: 0033:0x7efd261fdff9 [ 210.594134][T11779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.613882][T11779] RSP: 002b:00007efd24e71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.622314][T11779] RAX: ffffffffffffffda RBX: 00007efd263b5f80 RCX: 00007efd261fdff9 [ 210.630289][T11779] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 210.638269][T11779] RBP: 00007efd24e71090 R08: 0000000000000000 R09: 0000000000000000 [ 210.646283][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.654257][T11779] R13: 0000000000000000 R14: 00007efd263b5f80 R15: 00007ffce2780298 [ 210.662306][T11779] [ 210.683564][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 212.224771][T11833] pimreg: entered allmulticast mode [ 212.231793][T11832] pimreg: left allmulticast mode [ 212.538871][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2650'. [ 212.842862][T11876] loop0: detected capacity change from 0 to 512 [ 212.857277][T11876] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 212.873082][T11876] EXT4-fs (loop0): 1 truncate cleaned up [ 212.879375][T11876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.920734][T11031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.979445][T11882] loop0: detected capacity change from 0 to 128 [ 213.011481][T11882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.216215][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'. [ 213.375656][T11898] ªªªªªª: renamed from vlan0 (while UP) [ 213.829393][T11917] FAULT_INJECTION: forcing a failure. [ 213.829393][T11917] name failslab, interval 1, probability 0, space 0, times 0 [ 213.842191][T11917] CPU: 0 UID: 0 PID: 11917 Comm: syz.4.2670 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 213.854443][T11917] Tainted: [W]=WARN [ 213.858245][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.868503][T11917] Call Trace: [ 213.871776][T11917] [ 213.874707][T11917] dump_stack_lvl+0xf2/0x150 [ 213.879373][T11917] dump_stack+0x15/0x20 [ 213.883614][T11917] should_fail_ex+0x223/0x230 [ 213.888307][T11917] ? allocate_slab+0x180/0x510 [ 213.893075][T11917] should_failslab+0x8f/0xb0 [ 213.897759][T11917] __kmalloc_node_noprof+0xa8/0x380 [ 213.903008][T11917] allocate_slab+0x180/0x510 [ 213.907608][T11917] ___slab_alloc+0x424/0x980 [ 213.912266][T11917] ? should_failslab+0x8f/0xb0 [ 213.917111][T11917] ? alloc_empty_file+0xd0/0x2f0 [ 213.922097][T11917] ? should_fail_ex+0xd7/0x230 [ 213.926877][T11917] ? alloc_empty_file+0xd0/0x2f0 [ 213.931821][T11917] kmem_cache_alloc_noprof+0x177/0x290 [ 213.937370][T11917] alloc_empty_file+0xd0/0x2f0 [ 213.942252][T11917] alloc_file_clone+0x3a/0xa0 [ 213.946970][T11917] create_pipe_files+0x289/0x3b0 [ 213.951945][T11917] __do_pipe_flags+0x46/0x190 [ 213.956640][T11917] do_pipe2+0x64/0x130 [ 213.960779][T11917] __x64_sys_pipe2+0x30/0x40 [ 213.965436][T11917] x64_sys_call+0x65f/0x2d60 [ 213.970064][T11917] do_syscall_64+0xc9/0x1c0 [ 213.974650][T11917] ? clear_bhb_loop+0x55/0xb0 [ 213.979341][T11917] ? clear_bhb_loop+0x55/0xb0 [ 213.984027][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.990026][T11917] RIP: 0033:0x7f8f605bdff9 [ 213.994456][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.014190][T11917] RSP: 002b:00007f8f5f231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 214.022628][T11917] RAX: ffffffffffffffda RBX: 00007f8f60775f80 RCX: 00007f8f605bdff9 [ 214.030627][T11917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 214.038683][T11917] RBP: 00007f8f5f231090 R08: 0000000000000000 R09: 0000000000000000 [ 214.046662][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.054700][T11917] R13: 0000000000000000 R14: 00007f8f60775f80 R15: 00007fff726fc708 [ 214.062797][T11917] [ 214.179197][T11931] pim6reg1: entered promiscuous mode [ 214.184769][T11931] pim6reg1: entered allmulticast mode [ 214.505854][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'. [ 214.530514][T11955] ªªªªªª: renamed from vlan0 (while UP) [ 214.556515][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 214.556530][ T29] audit: type=1400 audit(214.593:17552): avc: denied { ioctl } for pid=11959 comm="syz.1.2686" path="socket:[39528]" dev="sockfs" ino=39528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.556731][T11963] bridge: RTM_NEWNEIGH with invalid ether address [ 214.628662][ T29] audit: type=1400 audit(214.663:17553): avc: denied { setopt } for pid=11964 comm="syz.1.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.680774][ T29] audit: type=1400 audit(214.713:17554): avc: denied { read } for pid=11964 comm="syz.1.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.938664][T11976] loop0: detected capacity change from 0 to 512 [ 214.947082][T11976] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 214.961959][T11976] EXT4-fs (loop0): 1 truncate cleaned up [ 214.968388][T11976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.990173][T11031] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.187508][T11998] pimreg: entered allmulticast mode [ 215.195677][T11991] pimreg: left allmulticast mode [ 215.289224][ T29] audit: type=1326 audit(215.323:17555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.385101][ T29] audit: type=1326 audit(215.323:17556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.408294][ T29] audit: type=1326 audit(215.323:17557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.431317][ T29] audit: type=1326 audit(215.323:17558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.454393][ T29] audit: type=1326 audit(215.323:17559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.477477][ T29] audit: type=1326 audit(215.323:17560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.500452][ T29] audit: type=1326 audit(215.323:17561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.4.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f605bdff9 code=0x7ffc0000 [ 215.752353][T12019] syz.3.2707[12019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.752420][T12019] syz.3.2707[12019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.761767][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2708'. [ 215.764900][T12019] syz.3.2707[12019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.804097][T12019] program syz.3.2707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.906804][T12036] tipc: Started in network mode [ 215.911785][T12036] tipc: Node identity 524e070dbbc5, cluster identity 4711 [ 215.919134][T12036] tipc: Enabled bearer , priority 0 [ 215.932620][T12036] syzkaller0: MTU too low for tipc bearer [ 215.938706][T12036] tipc: Disabling bearer [ 216.162043][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2723'. [ 216.236028][T12067] tipc: Started in network mode [ 216.240937][T12067] tipc: Node identity 2e679769593a, cluster identity 4711 [ 216.248378][T12067] tipc: Enabled bearer , priority 0 [ 216.260222][T12066] tipc: Disabling bearer [ 216.632305][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2741'. [ 216.836262][T12109] tipc: Enabled bearer , priority 0 [ 216.845280][T12108] tipc: Disabling bearer [ 217.155920][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2752'. [ 217.166918][T12131] ================================================================== [ 217.175006][T12131] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 217.181779][T12131] [ 217.184099][T12131] write to 0xffff888104357d00 of 8 bytes by task 12129 on cpu 0: [ 217.191818][T12131] mas_wmb_replace+0x222/0x14d0 [ 217.196795][T12131] mas_wr_store_entry+0x163c/0x2d00 [ 217.201991][T12131] mas_store_prealloc+0x6bf/0x960 [ 217.207015][T12131] vma_iter_store+0x168/0x190 [ 217.211694][T12131] mmap_region+0x122f/0x16e0 [ 217.216285][T12131] do_mmap+0x718/0xb60 [ 217.220356][T12131] vm_mmap_pgoff+0x133/0x290 [ 217.224955][T12131] ksys_mmap_pgoff+0xd0/0x330 [ 217.229635][T12131] x64_sys_call+0x1884/0x2d60 [ 217.234321][T12131] do_syscall_64+0xc9/0x1c0 [ 217.238822][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.244719][T12131] [ 217.247032][T12131] read to 0xffff888104357d00 of 8 bytes by task 12131 on cpu 1: [ 217.254653][T12131] mas_walk+0x123/0x320 [ 217.258808][T12131] lock_vma_under_rcu+0x95/0x260 [ 217.263751][T12131] exc_page_fault+0x150/0x650 [ 217.268436][T12131] asm_exc_page_fault+0x26/0x30 [ 217.273305][T12131] [ 217.275640][T12131] value changed: 0xffff8881043c6501 -> 0xffff888104357d00 [ 217.282764][T12131] [ 217.285078][T12131] Reported by Kernel Concurrency Sanitizer on: [ 217.291230][T12131] CPU: 1 UID: 0 PID: 12131 Comm: syz.3.2753 Tainted: G W 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 217.303476][T12131] Tainted: [W]=WARN [ 217.307271][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.317320][T12131] ==================================================================