last executing test programs: 5.721064246s ago: executing program 0 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001800)='wg2\x00', 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x1be4) 5.526774573s ago: executing program 0 (id=509): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f00000009c0)={[{@dots}, {@fat=@usefree}, {@nodots}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0x2db}}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@fat=@tz_utc}, {@fat=@sys_immutable}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@discard}]}, 0xfd, 0x207, &(0x7f0000000780)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 5.32093902s ago: executing program 0 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 5.102346598s ago: executing program 0 (id=524): socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x7c}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={&(0x7f0000000580)="a362f2161b676ed669bf6945697894106d0d42a8366a600d69187339928df4d18216de47e79ab4879476677d47a6eb20c2c4837771e28005ad039b97620f9b56ccd92daea10cb4a72a3419ee23936893557d1750dd179c4d5a06a7fab4a20a0c12bc64aaeface319b5bb2673c37366ca0b401429a343ac1f169d4e3c832c55b66b0468536339a4d2a48cd7ded53c445193e173314b5d83b51c0040f4037b4776f082b4d00dde3ec2ace694f41a3a72db9cb05c592ca74ce0630a890d7a04ad3997", &(0x7f00000003c0)="811a468156e2a0fbb7445f684a0a0c3241434b9573de5f68bd0b0f125bb080bbeca8a09ed0f653d96a6cf7cc9012f84d5e72ac862d13e75cc964f2ca83f24011df73a7626ad0d47675e7c3448586803e01ee6d70d7ae99c09b925af4d674197aea89baeb6dfd"}}, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="74887a93c8b50ed2", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.904283554s ago: executing program 2 (id=584): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0xffffffffffffff57) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) 2.892209115s ago: executing program 2 (id=586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r3) 2.803840553s ago: executing program 0 (id=526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000001b40)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x545c, 0x0) 2.697574062s ago: executing program 2 (id=593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) 463.61152ms ago: executing program 0 (id=598): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 411.640355ms ago: executing program 2 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) 410.880805ms ago: executing program 3 (id=601): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0) 391.404217ms ago: executing program 3 (id=604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r3) 390.651916ms ago: executing program 2 (id=614): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r4, @ANYBLOB="0000000014000000000000002b"], 0x40}}], 0x1, 0x0) 350.88207ms ago: executing program 2 (id=606): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000070000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) fcntl$setlease(r3, 0x400, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 316.422763ms ago: executing program 1 (id=608): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x2, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 300.636274ms ago: executing program 4 (id=609): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 298.119754ms ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x006'], 0x1c}}, 0x0) 265.728358ms ago: executing program 3 (id=611): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 245.412689ms ago: executing program 3 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 241.999409ms ago: executing program 1 (id=613): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 206.924992ms ago: executing program 4 (id=615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0x32) close(r2) 168.122525ms ago: executing program 1 (id=616): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f00000013c0)="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", 0x581, 0x4008040, 0x0, 0x0) sendto(r0, &(0x7f0000000600)='%', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) 149.702077ms ago: executing program 1 (id=617): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000005c0)) 133.625159ms ago: executing program 1 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18) 110.90672ms ago: executing program 3 (id=619): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 106.155411ms ago: executing program 1 (id=620): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x0, 0x3}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) socket$packet(0x11, 0x2, 0x300) close_range(r3, 0xffffffffffffffff, 0x0) 79.229883ms ago: executing program 4 (id=621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044849}, 0x0) 41.162526ms ago: executing program 4 (id=622): r0 = io_uring_setup(0x758a, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.010596ms ago: executing program 4 (id=623): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x1, 0xfff, 0x6c, 0x2100a, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x4, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=624): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_raw(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.907808][ T3261] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.919133][ T29] audit: type=1400 audit(1729036779.702:88): avc: denied { read } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.948122][ T29] audit: type=1400 audit(1729036779.712:89): avc: denied { mounton } for pid=3256 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.972940][ T29] audit: type=1400 audit(1729036779.712:90): avc: denied { mount } for pid=3256 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.000348][ T3256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.888125][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 27.900565][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 27.900581][ T29] audit: type=1400 audit(1729036781.752:101): avc: denied { append } for pid=2953 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.928944][ T29] audit: type=1400 audit(1729036781.752:102): avc: denied { open } for pid=2953 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.951592][ T29] audit: type=1400 audit(1729036781.752:103): avc: denied { getattr } for pid=2953 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.985925][ T3272] chnl_net:caif_netlink_parms(): no params data found [ 28.029351][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 28.044810][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.051940][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.059203][ T3273] bridge_slave_0: entered allmulticast mode [ 28.065701][ T3273] bridge_slave_0: entered promiscuous mode [ 28.076562][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.083672][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.090937][ T3273] bridge_slave_1: entered allmulticast mode [ 28.097407][ T3273] bridge_slave_1: entered promiscuous mode [ 28.109346][ T3274] chnl_net:caif_netlink_parms(): no params data found [ 28.160846][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.167952][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.175079][ T3272] bridge_slave_0: entered allmulticast mode [ 28.181607][ T3272] bridge_slave_0: entered promiscuous mode [ 28.190088][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.197222][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.204406][ T3272] bridge_slave_1: entered allmulticast mode [ 28.211001][ T3272] bridge_slave_1: entered promiscuous mode [ 28.223446][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.245094][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 28.263950][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.323653][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.340061][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.347225][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.354436][ T3274] bridge_slave_0: entered allmulticast mode [ 28.360992][ T3274] bridge_slave_0: entered promiscuous mode [ 28.368151][ T3273] team0: Port device team_slave_0 added [ 28.373812][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.381002][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.388193][ T3274] bridge_slave_1: entered allmulticast mode [ 28.394722][ T3274] bridge_slave_1: entered promiscuous mode [ 28.401095][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.408364][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.415564][ T3269] bridge_slave_0: entered allmulticast mode [ 28.422076][ T3269] bridge_slave_0: entered promiscuous mode [ 28.428821][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.435907][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.443127][ T3269] bridge_slave_1: entered allmulticast mode [ 28.449513][ T3269] bridge_slave_1: entered promiscuous mode [ 28.456549][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.472494][ T3273] team0: Port device team_slave_1 added [ 28.507708][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.532210][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.541606][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.549011][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.574945][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.586510][ T3272] team0: Port device team_slave_0 added [ 28.593486][ T3272] team0: Port device team_slave_1 added [ 28.600387][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.609560][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.616643][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.624006][ T3268] bridge_slave_0: entered allmulticast mode [ 28.630490][ T3268] bridge_slave_0: entered promiscuous mode [ 28.638170][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.647680][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.654622][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.680613][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.706100][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.713214][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.720466][ T3268] bridge_slave_1: entered allmulticast mode [ 28.726873][ T3268] bridge_slave_1: entered promiscuous mode [ 28.750740][ T3269] team0: Port device team_slave_0 added [ 28.756798][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.763869][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.789949][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.811770][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.821940][ T3274] team0: Port device team_slave_0 added [ 28.828558][ T3269] team0: Port device team_slave_1 added [ 28.839246][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.846260][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.872284][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.884584][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.899691][ T3274] team0: Port device team_slave_1 added [ 28.915221][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.922213][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.948283][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.981457][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.988501][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.014437][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.032432][ T3273] hsr_slave_0: entered promiscuous mode [ 29.038879][ T3273] hsr_slave_1: entered promiscuous mode [ 29.045172][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.052193][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.078413][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.092011][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.099003][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.125082][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.140839][ T3268] team0: Port device team_slave_0 added [ 29.153030][ T3272] hsr_slave_0: entered promiscuous mode [ 29.159243][ T3272] hsr_slave_1: entered promiscuous mode [ 29.165255][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.172848][ T3272] Cannot create hsr debugfs directory [ 29.192749][ T3268] team0: Port device team_slave_1 added [ 29.216443][ T3269] hsr_slave_0: entered promiscuous mode [ 29.222756][ T3269] hsr_slave_1: entered promiscuous mode [ 29.228752][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.236314][ T3269] Cannot create hsr debugfs directory [ 29.258716][ T3274] hsr_slave_0: entered promiscuous mode [ 29.264808][ T3274] hsr_slave_1: entered promiscuous mode [ 29.270920][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.278585][ T3274] Cannot create hsr debugfs directory [ 29.290063][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.297082][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.323060][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.334317][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.341327][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.367372][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.462437][ T3268] hsr_slave_0: entered promiscuous mode [ 29.468489][ T3268] hsr_slave_1: entered promiscuous mode [ 29.474392][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.482042][ T3268] Cannot create hsr debugfs directory [ 29.587387][ T29] audit: type=1400 audit(1729036783.442:104): avc: denied { create } for pid=3272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.594069][ T3272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.614859][ T29] audit: type=1400 audit(1729036783.442:105): avc: denied { write } for pid=3272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.635433][ T29] audit: type=1400 audit(1729036783.442:106): avc: denied { read } for pid=3272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.655945][ T29] audit: type=1400 audit(1729036783.472:107): avc: denied { remove_name } for pid=2953 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.678572][ T29] audit: type=1400 audit(1729036783.472:108): avc: denied { rename } for pid=2953 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.701130][ T29] audit: type=1400 audit(1729036783.472:109): avc: denied { create } for pid=2953 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.722402][ T3272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.734453][ T3272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.743176][ T3272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.776802][ T3273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.786408][ T3273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.805692][ T3273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.814292][ T3273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.823159][ T3269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.831938][ T3269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.844673][ T3269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.854106][ T3269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.882907][ T3274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.892237][ T3274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.901249][ T3274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.910278][ T3274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.946798][ T3268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.956248][ T3268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.965658][ T3268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.975011][ T3268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.050061][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.063191][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.073547][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.095483][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.105875][ T2270] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.113100][ T2270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.124575][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.131946][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.147322][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.155257][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.169573][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.176796][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.194648][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.206704][ T2270] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.213831][ T2270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.231893][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.239000][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.249813][ T3274] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.262085][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.269177][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.286956][ T2270] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.294090][ T2270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.307852][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.314955][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.326378][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.361763][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.382393][ T2270] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.389915][ T2270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.400645][ T2270] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.408055][ T2270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.433641][ T3274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.444716][ T3274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.490953][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.520685][ T3268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.531150][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.576144][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.586962][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.610092][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.671265][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.743569][ T3273] veth0_vlan: entered promiscuous mode [ 30.760197][ T3273] veth1_vlan: entered promiscuous mode [ 30.790070][ T3272] veth0_vlan: entered promiscuous mode [ 30.808183][ T3272] veth1_vlan: entered promiscuous mode [ 30.836246][ T3269] veth0_vlan: entered promiscuous mode [ 30.843075][ T3273] veth0_macvtap: entered promiscuous mode [ 30.851569][ T3273] veth1_macvtap: entered promiscuous mode [ 30.868611][ T3269] veth1_vlan: entered promiscuous mode [ 30.881469][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.891890][ T3268] veth0_vlan: entered promiscuous mode [ 30.904915][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.914313][ T3272] veth0_macvtap: entered promiscuous mode [ 30.922409][ T3272] veth1_macvtap: entered promiscuous mode [ 30.932111][ T3268] veth1_vlan: entered promiscuous mode [ 30.942877][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.953560][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.964459][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.973451][ T3273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.982321][ T3273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.991143][ T3273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.000093][ T3273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.020478][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.031067][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.041928][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.055745][ T3272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.064680][ T3272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.073601][ T3272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.082484][ T3272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.103665][ T3269] veth0_macvtap: entered promiscuous mode [ 31.115396][ T3269] veth1_macvtap: entered promiscuous mode [ 31.125887][ T3268] veth0_macvtap: entered promiscuous mode [ 31.132857][ T3274] veth0_vlan: entered promiscuous mode [ 31.146612][ T3274] veth1_vlan: entered promiscuous mode [ 31.154493][ T3268] veth1_macvtap: entered promiscuous mode [ 31.169330][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.169988][ T29] audit: type=1400 audit(1729036785.012:110): avc: denied { mounton } for pid=3272 comm="syz-executor" path="/root/syzkaller.issnrJ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.179865][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.214447][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.225013][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.237248][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.253072][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.263598][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.273668][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.284377][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.294382][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.304981][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.315618][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.324544][ T3273] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.341255][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.351829][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.361708][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.372400][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.387566][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.402459][ T3274] veth0_macvtap: entered promiscuous mode [ 31.418790][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.429338][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.439270][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.449801][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.459672][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.470192][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.480849][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.493357][ T3269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.502197][ T3269] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.511026][ T3269] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.519839][ T3269] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.551162][ T3274] veth1_macvtap: entered promiscuous mode [ 31.561821][ T3268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570605][ T3268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.579501][ T3268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.588454][ T3268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.628283][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.638807][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.648711][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.659487][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.669688][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.680219][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.690124][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.700863][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.713221][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.721741][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.732235][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.742108][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.752580][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.762498][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.773024][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.782890][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.793337][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.804212][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.842163][ T3274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.850960][ T3274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.859788][ T3274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865358][ T3421] loop2: detected capacity change from 0 to 512 [ 31.868624][ T3274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.880634][ T3421] EXT4-fs: Ignoring removed i_version option [ 31.889751][ T3421] EXT4-fs: Ignoring removed nobh option [ 31.902646][ T3421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.915877][ T3421] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.960394][ T3421] EXT4-fs (loop2): 1 truncate cleaned up [ 31.992064][ T3421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.093546][ T3436] loop4: detected capacity change from 0 to 512 [ 32.101311][ T3436] ======================================================= [ 32.101311][ T3436] WARNING: The mand mount option has been deprecated and [ 32.101311][ T3436] and is ignored by this kernel. Remove the mand [ 32.101311][ T3436] option from the mount to silence this warning. [ 32.101311][ T3436] ======================================================= [ 32.140523][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.154101][ T3441] batadv_slave_1: entered promiscuous mode [ 32.162132][ T3436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 32.168054][ T3441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 32.170884][ T3436] System zones: 0-2, 18-18, 34-34 [ 32.191504][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.209667][ T3436] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set [ 32.235488][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.244371][ T3436] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.5: Failed to acquire dquot type 1 [ 32.256751][ T3436] EXT4-fs (loop4): 1 truncate cleaned up [ 32.264090][ T3436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.285859][ T3436] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.316379][ T3436] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.344320][ T3436] syz.4.5 (3436) used greatest stack depth: 9368 bytes left [ 32.520838][ T3468] process 'syz.3.23' launched './file1' with NULL argv: empty string added [ 32.609155][ T3475] netlink: 10 bytes leftover after parsing attributes in process `syz.0.15'. [ 32.653686][ T3479] loop3: detected capacity change from 0 to 512 [ 32.661131][ T3479] EXT4-fs: Ignoring removed i_version option [ 32.684529][ T3479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 32.692912][ T3479] System zones: 1-12 [ 32.698328][ T3479] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.27: bg 0: block 131: padding at end of block bitmap is not set [ 32.713239][ T3479] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 32.722678][ T3479] EXT4-fs (loop3): 1 truncate cleaned up [ 32.729433][ T3479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.756589][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.991235][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 32.991251][ T29] audit: type=1400 audit(1729036786.842:173): avc: denied { map } for pid=3489 comm="syz.3.32" path="socket:[3814]" dev="sockfs" ino=3814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.020418][ T29] audit: type=1400 audit(1729036786.842:174): avc: denied { read } for pid=3489 comm="syz.3.32" path="socket:[3814]" dev="sockfs" ino=3814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.147978][ T29] audit: type=1400 audit(1729036787.002:175): avc: denied { create } for pid=3493 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.169881][ T29] audit: type=1400 audit(1729036787.002:176): avc: denied { write } for pid=3493 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.190229][ T3494] netlink: 48 bytes leftover after parsing attributes in process `syz.3.33'. [ 33.260797][ T29] audit: type=1400 audit(1729036787.112:177): avc: denied { setopt } for pid=3499 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.295400][ T3502] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.431249][ T29] audit: type=1400 audit(1729036787.282:178): avc: denied { write } for pid=3522 comm="syz.2.44" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.431492][ T3523] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.461370][ T3523] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 33.479699][ T29] audit: type=1400 audit(1729036787.332:179): avc: denied { read write } for pid=3522 comm="syz.2.44" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.487700][ T3523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.503125][ T29] audit: type=1400 audit(1729036787.332:180): avc: denied { open } for pid=3522 comm="syz.2.44" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.535043][ T29] audit: type=1400 audit(1729036787.332:181): avc: denied { ioctl } for pid=3522 comm="syz.2.44" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.561446][ T3523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.592711][ T29] audit: type=1400 audit(1729036787.442:182): avc: denied { create } for pid=3526 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.613973][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 33.643024][ T3532] loop3: detected capacity change from 0 to 512 [ 33.658698][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.672397][ T3532] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.715102][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.910846][ T3555] loop4: detected capacity change from 0 to 2048 [ 33.937773][ T3555] loop4: p1 < > p4 [ 33.946708][ T3562] loop1: detected capacity change from 0 to 512 [ 33.955018][ T3562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.966111][ T3562] EXT4-fs (loop1): 1 truncate cleaned up [ 33.973858][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.003268][ T3555] loop4: p4 size 8388608 extends beyond EOD, truncated [ 34.015480][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.028559][ T3565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.039259][ T3565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.083962][ T3262] udevd[3262]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.084015][ T3253] udevd[3253]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 34.182041][ T3582] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.199738][ T3584] Zero length message leads to an empty skb [ 34.350171][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.356560][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.363106][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.393038][ T3595] infiniband syz1: set active [ 34.397890][ T3595] infiniband syz1: added vcan0 [ 34.402728][ T3347] vcan0 speed is unknown, defaulting to 1000 [ 34.413076][ T3595] RDS/IB: syz1: added [ 34.419985][ T3595] smc: adding ib device syz1 with port count 1 [ 34.430140][ T3595] smc: ib device syz1 port 1 has pnetid [ 34.436258][ T24] vcan0 speed is unknown, defaulting to 1000 [ 34.443562][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.476736][ T3601] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 34.482651][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.522242][ T3605] loop2: detected capacity change from 0 to 128 [ 34.553594][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.617629][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.648731][ T3618] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 327669 (only 8 groups) [ 34.676509][ T3595] vcan0 speed is unknown, defaulting to 1000 [ 34.951735][ T3625] macvlan0: entered promiscuous mode [ 34.968867][ T3625] ipvlan0: entered promiscuous mode [ 34.974650][ T3625] ipvlan0: left promiscuous mode [ 34.989799][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.002819][ T3625] macvlan0: left promiscuous mode [ 35.005118][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.022524][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.045521][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.058397][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.073670][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.086777][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.100235][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.133291][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.168980][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3633 comm=syz.4.89 [ 35.207196][ T3644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.215850][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.223393][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.230972][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.238440][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 35.245911][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.253456][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.261121][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.268954][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.276466][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.284077][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.291599][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.299055][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.306484][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.313946][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.321412][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.329028][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.336442][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.344096][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.351678][ T987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.366005][ T3644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.378005][ T987] hid-generic 0000:0000:0000.0001: hidraw0: HID v1004.00 Device [syz1] on syz0 [ 35.449425][ T3657] syzkaller0: entered allmulticast mode [ 35.470874][ T3657] syzkaller0 (unregistering): left allmulticast mode [ 35.574207][ T3667] loop3: detected capacity change from 0 to 2048 [ 35.591265][ T3667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.594838][ T3669] vcan0 speed is unknown, defaulting to 1000 [ 35.611034][ T3667] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 35.627268][ T3667] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 35.639584][ T3667] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.639584][ T3667] [ 35.649287][ T3667] EXT4-fs (loop3): Total free blocks count 0 [ 35.655466][ T3667] EXT4-fs (loop3): Free/Dirty block details [ 35.661461][ T3667] EXT4-fs (loop3): free_blocks=2415919104 [ 35.667578][ T3667] EXT4-fs (loop3): dirty_blocks=16 [ 35.672723][ T3667] EXT4-fs (loop3): Block reservation details [ 35.678985][ T3667] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 35.703375][ T1942] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 36.018700][ T3710] loop1: detected capacity change from 0 to 128 [ 36.118028][ T3718] netlink: 'syz.3.126': attribute type 2 has an invalid length. [ 36.190483][ T3725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 36.271378][ T3698] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.353588][ T3739] option changes via remount are deprecated (pid=3738 comm=syz.1.136) [ 37.122292][ T3804] netlink: 252 bytes leftover after parsing attributes in process `syz.3.155'. [ 37.456149][ T3844] syzkaller0: entered allmulticast mode [ 37.474388][ T3844] syzkaller0 (unregistering): left allmulticast mode [ 37.493086][ T3848] loop0: detected capacity change from 0 to 764 [ 37.500577][ T3848] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 37.639289][ T3858] loop3: detected capacity change from 0 to 512 [ 37.689714][ T3858] EXT4-fs (loop3): too many log groups per flexible block group [ 37.697521][ T3858] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 37.704671][ T3858] EXT4-fs (loop3): mount failed [ 37.836335][ T3874] 9pnet_fd: Insufficient options for proto=fd [ 37.890499][ T3878] vcan0 speed is unknown, defaulting to 1000 [ 38.016529][ T3891] loop2: detected capacity change from 0 to 512 [ 38.041347][ T3901] netlink: 268 bytes leftover after parsing attributes in process `syz.3.187'. [ 38.050573][ T3901] unsupported nla_type 65024 [ 38.062799][ T3891] EXT4-fs (loop2): too many log groups per flexible block group [ 38.070643][ T3891] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 38.087367][ T3891] EXT4-fs (loop2): mount failed [ 38.131469][ T3907] loop3: detected capacity change from 0 to 512 [ 38.161291][ T3907] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.170984][ T3907] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 38.193574][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.200279][ T3907] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 38.201280][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.210646][ T3907] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #13: comm syz.3.189: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.215320][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.233896][ T3907] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.189: couldn't read orphan inode 13 (err -117) [ 38.254668][ T3907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.255107][ T3914] loop4: detected capacity change from 0 to 512 [ 38.272763][ T3907] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.189: deleted inode referenced: 12 [ 38.291331][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 38.291349][ T29] audit: type=1400 audit(1729036792.142:355): avc: denied { ioctl } for pid=3906 comm="syz.3.189" path="socket:[4700]" dev="sockfs" ino=4700 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.312605][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.329591][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.337128][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.343607][ T3914] EXT4-fs (loop4): too many log groups per flexible block group [ 38.344524][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.352219][ T3914] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 38.359700][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.367935][ T3914] EXT4-fs (loop4): mount failed [ 38.373901][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.373925][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.393961][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.401422][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.408914][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.416429][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.424148][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.431992][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.439447][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.447061][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.454763][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.462445][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.471737][ T3269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.473658][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.488217][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.495999][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.503503][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.506395][ T3924] loop3: detected capacity change from 0 to 128 [ 38.510943][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.524731][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.532247][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.539839][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.550998][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.558461][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.565874][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.573307][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.580776][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.588264][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.595701][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.603146][ T24] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 38.613696][ T24] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.c8 Device [syz0] on syz0 [ 38.624580][ T3924] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.638012][ T3924] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.675152][ T29] audit: type=1400 audit(1729036792.522:356): avc: denied { mounton } for pid=3923 comm="syz.3.193" path="/65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.768456][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 38.784100][ T29] audit: type=1400 audit(1729036792.622:357): avc: denied { remove_name } for pid=3269 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.806987][ T29] audit: type=1400 audit(1729036792.622:358): avc: denied { unlink } for pid=3269 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.841575][ T3930] netlink: 252 bytes leftover after parsing attributes in process `syz.2.196'. [ 38.855628][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 38.871103][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 38.884069][ T29] audit: type=1400 audit(1729036792.722:359): avc: denied { rmdir } for pid=3269 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.979843][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.002448][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 39.025872][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 39.040576][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.055657][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 39.072996][ T3269] EXT4-fs error (device loop3): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 39.092210][ T3269] EXT4-fs error (device loop3): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.148380][ T3956] loop4: detected capacity change from 0 to 128 [ 39.189845][ T3956] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.204938][ T3956] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.302774][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.319071][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 39.334124][ T3274] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 39.348636][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.363004][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 39.377752][ T3274] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 39.391046][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.405462][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 39.420069][ T3274] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 39.433750][ T3274] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 39.450922][ T3269] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.462008][ T3837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.520049][ T29] audit: type=1400 audit(1729036793.372:360): avc: denied { mounton } for pid=3966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 39.546181][ T3837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.596078][ T3837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.634541][ T3966] vcan0 speed is unknown, defaulting to 1000 [ 39.663250][ T3837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.732445][ T3966] chnl_net:caif_netlink_parms(): no params data found [ 39.774654][ T3966] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.780207][ T3274] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.781845][ T3966] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.798493][ T3966] bridge_slave_0: entered allmulticast mode [ 39.805346][ T3966] bridge_slave_0: entered promiscuous mode [ 39.812900][ T3966] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.820527][ T3966] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.828302][ T3966] bridge_slave_1: entered allmulticast mode [ 39.835518][ T3966] bridge_slave_1: entered promiscuous mode [ 39.884897][ T29] audit: type=1400 audit(1729036793.732:361): avc: denied { search } for pid=3009 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.898581][ T3966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.906586][ T29] audit: type=1400 audit(1729036793.732:362): avc: denied { read } for pid=3009 comm="dhcpcd" name="n25" dev="tmpfs" ino=1384 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.932006][ T3966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.937486][ T29] audit: type=1400 audit(1729036793.732:363): avc: denied { open } for pid=3009 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1384 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.969949][ T29] audit: type=1400 audit(1729036793.732:364): avc: denied { getattr } for pid=3009 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1384 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.030173][ T3837] bridge_slave_1: left allmulticast mode [ 40.035925][ T3837] bridge_slave_1: left promiscuous mode [ 40.041981][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.101845][ T3837] bridge_slave_0: left allmulticast mode [ 40.107898][ T3837] bridge_slave_0: left promiscuous mode [ 40.113945][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.240742][ T3837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.257438][ T3837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.278348][ T3837] bond0 (unregistering): Released all slaves [ 40.287351][ T3966] team0: Port device team_slave_0 added [ 40.301883][ T3966] team0: Port device team_slave_1 added [ 40.360101][ T3966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.367190][ T3966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.393572][ T3966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.407207][ T3981] vcan0 speed is unknown, defaulting to 1000 [ 40.414980][ T3837] hsr_slave_0: left promiscuous mode [ 40.424305][ T3837] hsr_slave_1: left promiscuous mode [ 40.435466][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.443128][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.454068][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.461635][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.475046][ T3837] veth1_macvtap: left promiscuous mode [ 40.480730][ T3837] veth0_macvtap: left promiscuous mode [ 40.486324][ T3837] veth1_vlan: left promiscuous mode [ 40.491668][ T3837] veth0_vlan: left promiscuous mode [ 40.496827][ T4025] syz.0.227[4025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.496945][ T4025] syz.0.227[4025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.508661][ T4025] syz.0.227[4025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.634569][ T4039] syz.0.232[4039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.646870][ T4039] syz.0.232[4039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.658579][ T4039] syz.0.232[4039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.658969][ T3837] team0 (unregistering): Port device team_slave_1 removed [ 40.695049][ T3837] team0 (unregistering): Port device team_slave_0 removed [ 40.732472][ T3966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.739546][ T3966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.765941][ T3966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.792361][ T4033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.229'. [ 40.822434][ T3966] hsr_slave_0: entered promiscuous mode [ 40.831805][ T3966] hsr_slave_1: entered promiscuous mode [ 40.841862][ T3966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.856532][ T3966] Cannot create hsr debugfs directory [ 40.984398][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 40.993515][ T4066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.002448][ T4066] netlink: 1528 bytes leftover after parsing attributes in process `syz.0.237'. [ 41.049356][ T3981] chnl_net:caif_netlink_parms(): no params data found [ 41.110998][ T4071] loop0: detected capacity change from 0 to 2048 [ 41.118395][ T4071] EXT4-fs: Ignoring removed orlov option [ 41.166349][ T3981] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.173536][ T3981] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.182353][ T4071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.192683][ T3981] bridge_slave_0: entered allmulticast mode [ 41.201127][ T3981] bridge_slave_0: entered promiscuous mode [ 41.208176][ T3981] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.215260][ T3981] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.222597][ T3981] bridge_slave_1: entered allmulticast mode [ 41.229227][ T3981] bridge_slave_1: entered promiscuous mode [ 41.258856][ T3981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.272962][ T3837] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.291041][ T3981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.340063][ T3837] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.353483][ T3981] team0: Port device team_slave_0 added [ 41.369815][ T3981] team0: Port device team_slave_1 added [ 41.410305][ T3981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.417384][ T3981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.443430][ T3981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.466242][ T3837] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.479013][ T3981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.486000][ T3981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.488615][ T4100] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 41.488615][ T4100] program syz.1.242 not setting count and/or reply_len properly [ 41.511985][ T3981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.557552][ T3966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.572310][ T4090] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.596141][ T4102] loop1: detected capacity change from 0 to 1024 [ 41.597719][ T3966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.603075][ T4102] EXT4-fs: Ignoring removed orlov option [ 41.615201][ T4102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.623076][ T4090] EXT4-fs (loop0): Remounting filesystem read-only [ 41.631280][ T3837] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.651611][ T3966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.660798][ T3966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.660943][ T4102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.690119][ T3981] hsr_slave_0: entered promiscuous mode [ 41.700090][ T3981] hsr_slave_1: entered promiscuous mode [ 41.706140][ T3981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.714395][ T3981] Cannot create hsr debugfs directory [ 41.732132][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.746161][ T4109] loop2: detected capacity change from 0 to 512 [ 41.812717][ T4109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.822869][ T3273] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.838823][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 41.847902][ T4109] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.915020][ T4109] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.244: Failed to acquire dquot type 0 [ 41.931769][ T4114] hsr_slave_1 (unregistering): left promiscuous mode [ 42.013752][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.041531][ T3837] bridge_slave_1: left allmulticast mode [ 42.047378][ T3837] bridge_slave_1: left promiscuous mode [ 42.053089][ T3837] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.074017][ T4135] loop1: detected capacity change from 0 to 512 [ 42.075527][ T3837] bridge_slave_0: left allmulticast mode [ 42.086352][ T3837] bridge_slave_0: left promiscuous mode [ 42.092068][ T3837] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.130890][ T4135] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.248: bad orphan inode 17 [ 42.186649][ T4135] ext4_test_bit(bit=16, block=4) = 1 [ 42.192062][ T4135] is_bad_inode(inode)=0 [ 42.196298][ T4135] NEXT_ORPHAN(inode)=0 [ 42.200781][ T4135] max_ino=32 [ 42.204091][ T4135] i_nlink=1 [ 42.294725][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.436486][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.492093][ T3837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.514701][ T3837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.560351][ T3837] bond0 (unregistering): Released all slaves [ 42.589282][ T3966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.623521][ T3966] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.647366][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.654564][ T3806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.674797][ T4170] serio: Serial port ptm0 [ 42.689699][ T4172] loop0: detected capacity change from 0 to 128 [ 42.742179][ T4172] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 42.750222][ T4172] FAT-fs (loop0): Filesystem has been set read-only [ 42.757458][ T4172] syz.0.254: attempt to access beyond end of device [ 42.757458][ T4172] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.774202][ T3837] hsr_slave_0: left promiscuous mode [ 42.780488][ T3837] hsr_slave_1: left promiscuous mode [ 42.786464][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.793972][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.802290][ T3837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.809790][ T3837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.819417][ T3837] veth1_macvtap: left promiscuous mode [ 42.824994][ T3837] veth0_macvtap: left promiscuous mode [ 42.830598][ T3837] veth1_vlan: left promiscuous mode [ 42.835914][ T3837] veth0_vlan: left promiscuous mode [ 42.846205][ T4176] loop1: detected capacity change from 0 to 8192 [ 42.866069][ T4176] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.880256][ T4176] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 42.888276][ T4176] FAT-fs (loop1): Filesystem has been set read-only [ 42.982388][ T3837] team0 (unregistering): Port device team_slave_1 removed [ 42.994472][ T3837] team0 (unregistering): Port device team_slave_0 removed [ 43.051448][ T3834] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.058732][ T3834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.087352][ T4182] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 43.112984][ T4182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.129926][ T4184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.137379][ T4184] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 43.150421][ T4184] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 43.172197][ T3966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.182665][ T3966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.240477][ T3981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.298003][ T3981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.330979][ T3981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.332899][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 43.332917][ T29] audit: type=1400 audit(1729036797.182:410): avc: denied { watch } for pid=4196 comm="syz.1.258" path="/proc/91" dev="proc" ino=6356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 43.370907][ T3981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.434296][ T3981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.461433][ T3966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.482837][ T29] audit: type=1400 audit(1729036797.332:411): avc: denied { watch_reads } for pid=4196 comm="syz.1.258" path="/proc/91" dev="proc" ino=6356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 43.489151][ T3981] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.528030][ T4211] loop0: detected capacity change from 0 to 128 [ 43.570471][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.577616][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.593962][ T4211] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.607656][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.614773][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.632116][ T3981] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.642530][ T3981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.655334][ T4211] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.688945][ T4215] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 43.700159][ T4215] team0: Port device netdevsim1 added [ 43.760021][ T4223] vcan0 speed is unknown, defaulting to 1000 [ 43.795793][ T3966] veth0_vlan: entered promiscuous mode [ 43.804583][ T3966] veth1_vlan: entered promiscuous mode [ 43.837577][ T3981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.865368][ T29] audit: type=1400 audit(1729036797.712:412): avc: denied { write } for pid=4210 comm="syz.0.260" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.943526][ T3966] veth0_macvtap: entered promiscuous mode [ 43.957570][ T29] audit: type=1400 audit(1729036797.712:413): avc: denied { ioctl } for pid=4210 comm="syz.0.260" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_service_bytes_recursive" dev="loop0" ino=12 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.969179][ T3966] veth1_macvtap: entered promiscuous mode [ 44.048827][ T3273] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.083652][ T3966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.094742][ T3966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.104743][ T3966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.115303][ T3966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.125552][ T3966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.136041][ T3966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.160599][ T3966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.172326][ T3966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.182992][ T3966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.193010][ T3966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.203490][ T3966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.216126][ T3966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.226222][ T3966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.235136][ T3966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.243940][ T3966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.252842][ T3966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.285394][ T29] audit: type=1400 audit(1729036798.122:414): avc: denied { write } for pid=4260 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.326711][ T29] audit: type=1400 audit(1729036798.172:415): avc: denied { mount } for pid=3966 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.345706][ T3981] veth0_vlan: entered promiscuous mode [ 44.385284][ T29] audit: type=1400 audit(1729036798.202:416): avc: denied { mounton } for pid=3966 comm="syz-executor" path="/root/syzkaller.8SuO9G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.386901][ T3981] veth1_vlan: entered promiscuous mode [ 44.456623][ T4270] vcan0 speed is unknown, defaulting to 1000 [ 44.471727][ T3981] veth0_macvtap: entered promiscuous mode [ 44.491445][ T3981] veth1_macvtap: entered promiscuous mode [ 44.511790][ T4273] syz.3.214 uses obsolete (PF_INET,SOCK_PACKET) [ 44.524696][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.535218][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.545149][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.555779][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.565641][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.576404][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.586309][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.597130][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.619409][ T3981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.651406][ T4277] loop1: detected capacity change from 0 to 512 [ 44.658565][ T29] audit: type=1326 audit(1729036798.492:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcd9dff9 code=0x7ffc0000 [ 44.681888][ T29] audit: type=1326 audit(1729036798.492:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcd9dff9 code=0x7ffc0000 [ 44.705163][ T29] audit: type=1326 audit(1729036798.492:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4276 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febfcd9dff9 code=0x7ffc0000 [ 44.730933][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.741485][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.751415][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.761897][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.771773][ T3981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.782245][ T3981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.794402][ T3981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.802330][ T4277] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.810420][ T3981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.819238][ T3981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.819560][ T4277] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.828161][ T3981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.843231][ T3981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.877928][ T4277] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.897371][ T4277] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 44.904747][ T4277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.271: bg 0: block 40: padding at end of block bitmap is not set [ 44.919335][ T4277] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.930038][ T4277] EXT4-fs (loop1): 1 truncate cleaned up [ 44.936022][ T4277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.992997][ T4277] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.271: corrupted xattr block 31: invalid header [ 45.029918][ T4277] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 45.039597][ T4277] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.271: corrupted xattr block 31: invalid header [ 45.057296][ T4289] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #16: comm syz.1.271: corrupted xattr block 31: invalid header [ 45.085793][ T4277] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 45.120423][ T4277] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.271: bad symlink. [ 45.157229][ T4289] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 45.168639][ T4300] bridge0: entered promiscuous mode [ 45.168995][ T4289] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.271: bad symlink. [ 45.174432][ T4300] bridge0: left promiscuous mode [ 45.266013][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.277595][ T4311] loop6: detected capacity change from 0 to 7 [ 45.283837][ T4311] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.293157][ T4311] Buffer I/O error on dev loop6, logical block 0, async page read [ 45.301087][ T4311] loop6: unable to read partition table [ 45.309814][ T4311] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 45.309814][ T4311] ) failed (rc=-5) [ 45.352882][ T4319] netlink: 'syz.3.285': attribute type 10 has an invalid length. [ 45.363674][ T4319] team0: Port device netdevsim1 added [ 45.417763][ T4327] loop1: detected capacity change from 0 to 512 [ 45.469370][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.482056][ T4327] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.519101][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.562338][ T4343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.575018][ T4343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.672750][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 45.675365][ T4349] hub 2-0:1.0: USB hub found [ 45.686787][ T4349] hub 2-0:1.0: 8 ports detected [ 45.703672][ T4353] hsr_slave_1 (unregistering): left promiscuous mode [ 45.994728][ T4368] loop2: detected capacity change from 0 to 128 [ 46.000923][ T4366] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 46.011637][ T4368] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.012947][ T4366] team0: Port device netdevsim1 added [ 46.030911][ T4368] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.102910][ T3272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.134516][ T4375] loop0: detected capacity change from 0 to 128 [ 46.159555][ T4381] netlink: 104 bytes leftover after parsing attributes in process `syz.2.310'. [ 46.178306][ T4375] EXT4-fs: Ignoring removed nobh option [ 46.189498][ T4375] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.206615][ T4375] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.227288][ T4384] loop1: detected capacity change from 0 to 1024 [ 46.234172][ T4384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.245406][ T4384] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.255968][ T4380] loop3: detected capacity change from 0 to 8192 [ 46.270194][ T4380] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.292369][ T4380] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 46.300451][ T4380] FAT-fs (loop3): Filesystem has been set read-only [ 46.301711][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.357356][ T4384] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 46.370285][ T3273] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.372427][ T4395] pim6reg1: entered promiscuous mode [ 46.384799][ T4395] pim6reg1: entered allmulticast mode [ 46.422024][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.425488][ T4401] loop3: detected capacity change from 0 to 128 [ 46.445020][ T4401] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 46.453141][ T4401] FAT-fs (loop3): Filesystem has been set read-only [ 46.460279][ T4401] syz.3.320: attempt to access beyond end of device [ 46.460279][ T4401] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.526630][ T4408] loop4: detected capacity change from 0 to 512 [ 46.554215][ T4409] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 46.565943][ T4408] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.583494][ T4408] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.590645][ T4408] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.605964][ T4408] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 46.613407][ T4408] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.323: bg 0: block 40: padding at end of block bitmap is not set [ 46.629335][ T4408] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.638538][ T4408] EXT4-fs (loop4): 1 truncate cleaned up [ 46.644914][ T4408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.673568][ T4408] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.323: corrupted xattr block 31: invalid header [ 46.691010][ T4414] pim6reg1: entered promiscuous mode [ 46.696398][ T4414] pim6reg1: entered allmulticast mode [ 46.702092][ T4408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.715826][ T4408] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.323: corrupted xattr block 31: invalid header [ 46.743749][ T4408] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.743843][ T4416] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.323: corrupted xattr block 31: invalid header [ 46.767124][ T4408] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.323: bad symlink. [ 46.823337][ T4416] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 46.847108][ T4416] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.323: bad symlink. [ 46.916435][ T3981] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.957805][ T4420] loop1: detected capacity change from 0 to 2048 [ 46.958018][ T4420] EXT4-fs: Ignoring removed orlov option [ 46.985517][ T4420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.150540][ T4430] ALSA: seq fatal error: cannot create timer (-22) [ 47.319106][ T4447] x_tables: ip_tables: udp match: only valid for protocol 17 [ 47.349440][ T4427] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.388302][ T4454] loop3: detected capacity change from 0 to 1024 [ 47.406689][ T4454] EXT4-fs: Ignoring removed bh option [ 47.419175][ T987] IPVS: starting estimator thread 0... [ 47.421258][ T4427] EXT4-fs (loop1): Remounting filesystem read-only [ 47.428668][ T4456] loop0: detected capacity change from 0 to 256 [ 47.439030][ T4456] FAT-fs (loop0): bogus sectors per cluster 30 [ 47.445339][ T4456] FAT-fs (loop0): Can't find a valid FAT filesystem [ 47.465856][ T4454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.507130][ T4457] IPVS: using max 2160 ests per chain, 108000 per kthread [ 47.528352][ T4465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.550067][ T4463] syzkaller0: entered promiscuous mode [ 47.555737][ T4463] syzkaller0: entered allmulticast mode [ 47.577666][ T4465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.592510][ T3966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.605904][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 47.624924][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.705159][ T4477] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 47.721365][ T4481] loop1: detected capacity change from 0 to 128 [ 47.733749][ T4481] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 47.741779][ T4481] FAT-fs (loop1): Filesystem has been set read-only [ 47.750438][ T4481] syz.1.349: attempt to access beyond end of device [ 47.750438][ T4481] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.756063][ T4484] tipc: Started in network mode [ 47.768301][ T4479] hub 2-0:1.0: USB hub found [ 47.769004][ T4484] tipc: Node identity e2b8a016c7b8, cluster identity 4711 [ 47.774231][ T4479] hub 2-0:1.0: 8 ports detected [ 47.780745][ T4484] tipc: Enabled bearer , priority 0 [ 47.802053][ T4483] tipc: Disabling bearer [ 47.893251][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 47.974116][ T4506] ref_ctr increment failed for inode: 0x131 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104589f80 [ 47.999441][ T4505] uprobe: syz.1.365:4505 failed to unregister, leaking uprobe [ 48.058951][ T4520] : renamed from vlan1 (while UP) [ 48.090958][ T4516] hub 2-0:1.0: USB hub found [ 48.098039][ T4516] hub 2-0:1.0: 8 ports detected [ 48.123327][ T4526] loop2: detected capacity change from 0 to 128 [ 48.135186][ T4526] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 48.143287][ T4526] FAT-fs (loop2): Filesystem has been set read-only [ 48.151452][ T4526] syz.2.373: attempt to access beyond end of device [ 48.151452][ T4526] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.168480][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.181394][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.249075][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 48.256227][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 48.264059][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 48.270605][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 48.278899][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 48.285495][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 48.302280][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 48.310495][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 48.317310][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 48.326079][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 48.334625][ T4542] vcan0 speed is unknown, defaulting to 1000 [ 48.388601][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 48.388616][ T29] audit: type=1326 audit(1729036802.242:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.431354][ T29] audit: type=1326 audit(1729036802.272:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.454982][ T29] audit: type=1326 audit(1729036802.282:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.478426][ T29] audit: type=1326 audit(1729036802.282:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.502049][ T29] audit: type=1326 audit(1729036802.282:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.525375][ T29] audit: type=1326 audit(1729036802.282:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.548938][ T29] audit: type=1326 audit(1729036802.282:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.572529][ T29] audit: type=1326 audit(1729036802.282:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.595933][ T29] audit: type=1326 audit(1729036802.282:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 48.619201][ T29] audit: type=1400 audit(1729036802.282:617): avc: denied { block_suspend } for pid=4544 comm="syz.4.383" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.675048][ T4547] pim6reg1: entered promiscuous mode [ 48.680664][ T4547] pim6reg1: entered allmulticast mode [ 48.691758][ T4554] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 48.735072][ T4558] loop0: detected capacity change from 0 to 128 [ 48.751990][ T4558] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.771296][ T4558] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.817110][ T4564] loop4: detected capacity change from 0 to 128 [ 48.824311][ T4566] loop2: detected capacity change from 0 to 128 [ 48.834795][ T4566] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.843420][ T4564] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.848484][ T3273] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.854913][ T4564] FAT-fs (loop4): Filesystem has been set read-only [ 48.857845][ T4564] syz.4.390: attempt to access beyond end of device [ 48.857845][ T4564] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.903244][ T4574] syz.0.393[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.903321][ T4574] syz.0.393[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.914225][ T4566] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.926335][ T4574] syz.0.393[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.017790][ T3272] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.040059][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 49.074744][ T4592] loop2: detected capacity change from 0 to 1024 [ 49.087871][ T4590] loop1: detected capacity change from 0 to 128 [ 49.100309][ T4590] EXT4-fs: Ignoring removed nobh option [ 49.132530][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 49.146258][ T4590] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.158716][ T4590] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.203488][ T4606] capability: warning: `syz.0.409' uses 32-bit capabilities (legacy support in use) [ 49.215198][ T4608] ref_ctr increment failed for inode: 0xdb offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104589a40 [ 49.226828][ T4607] uprobe: syz.3.410:4607 failed to unregister, leaking uprobe [ 49.251362][ T3268] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.271297][ T4613] loop3: detected capacity change from 0 to 128 [ 49.286913][ T4613] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 49.294910][ T4613] FAT-fs (loop3): Filesystem has been set read-only [ 49.312359][ T4614] vcan0 speed is unknown, defaulting to 1000 [ 49.320901][ T4613] syz.3.414: attempt to access beyond end of device [ 49.320901][ T4613] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 49.418505][ T4632] loop1: detected capacity change from 0 to 1024 [ 49.421533][ T4631] block device autoloading is deprecated and will be removed. [ 49.432760][ T4631] syz.3.418: attempt to access beyond end of device [ 49.432760][ T4631] loop128: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 49.441556][ T4632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.471680][ T4631] loop3: detected capacity change from 0 to 1024 [ 49.484046][ T4631] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.495025][ T4631] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.505461][ T4631] JBD2: no valid journal superblock found [ 49.511409][ T4631] EXT4-fs (loop3): Could not load journal inode [ 49.542841][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 49.554507][ T4640] loop3: detected capacity change from 0 to 128 [ 49.561229][ T4640] EXT4-fs: Ignoring removed nobh option [ 49.568860][ T4640] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.581592][ T4640] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.628885][ T3966] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.659858][ T3268] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.673725][ T3834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.750911][ T3834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.796673][ T3834] team0: Port device netdevsim1 removed [ 49.804416][ T3834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.871436][ T3834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.888016][ T4655] vcan0 speed is unknown, defaulting to 1000 [ 49.909598][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.924648][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.978297][ T4676] loop3: detected capacity change from 0 to 128 [ 49.998270][ T4655] chnl_net:caif_netlink_parms(): no params data found [ 50.009445][ T4676] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.022739][ T4676] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.060809][ T3834] bridge_slave_1: left allmulticast mode [ 50.066589][ T3834] bridge_slave_1: left promiscuous mode [ 50.072728][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.081493][ T3834] bridge_slave_0: left allmulticast mode [ 50.087278][ T3834] bridge_slave_0: left promiscuous mode [ 50.093003][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.104152][ T3966] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.164454][ T4688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.440'. [ 50.173894][ T4688] unsupported nlmsg_type 40 [ 50.200071][ T3834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.211406][ T3834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.224054][ T3834] bond0 (unregistering): Released all slaves [ 50.232790][ T4694] ref_ctr increment failed for inode: 0x1ee offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104589f80 [ 50.234909][ T3834] bond1 (unregistering): Released all slaves [ 50.250875][ T4693] uprobe: syz.2.442:4693 failed to unregister, leaking uprobe [ 50.274027][ T4692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.296802][ T4704] loop4: detected capacity change from 0 to 512 [ 50.304532][ T4704] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.320643][ T4704] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.321420][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 50.334044][ T4704] EXT4-fs (loop4): 1 truncate cleaned up [ 50.349294][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.349868][ T4655] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.369251][ T4655] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.376737][ T4655] bridge_slave_0: entered allmulticast mode [ 50.384984][ T4655] bridge_slave_0: entered promiscuous mode [ 50.392345][ T4704] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.408399][ T4692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.422851][ T3981] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.432286][ T4655] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.439515][ T4655] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.448986][ T4655] bridge_slave_1: entered allmulticast mode [ 50.455848][ T4655] bridge_slave_1: entered promiscuous mode [ 50.475206][ T4692] team0: Port device netdevsim1 removed [ 50.482629][ T4692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.528832][ T3834] hsr_slave_0: left promiscuous mode [ 50.534845][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.542339][ T3834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.552292][ T3834] veth1_macvtap: left promiscuous mode [ 50.557985][ T3834] veth0_macvtap: left promiscuous mode [ 50.563692][ T3834] veth1_vlan: left promiscuous mode [ 50.569224][ T3834] veth0_vlan: left promiscuous mode [ 50.620478][ T3834] infiniband syz1: set down [ 50.657415][ T3834] team0 (unregistering): Port device team_slave_1 removed [ 50.669530][ T3834] team0 (unregistering): Port device team_slave_0 removed [ 50.709648][ T4655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.718873][ T4713] vcan0 speed is unknown, defaulting to 1000 [ 50.725007][ T24] vcan0 speed is unknown, defaulting to 1000 [ 50.738004][ T4692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.757504][ T4722] netlink: 'syz.2.453': attribute type 4 has an invalid length. [ 50.765551][ T3806] smc: removing ib device syz1 [ 50.773722][ T4655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.782910][ T24] vcan0 speed is unknown, defaulting to 1000 [ 50.836167][ T4692] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.864978][ T4655] team0: Port device team_slave_0 added [ 50.882389][ T4729] loop2: detected capacity change from 0 to 2048 [ 50.883673][ T4655] team0: Port device team_slave_1 added [ 50.903303][ T4692] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.918611][ T4729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.941721][ T4692] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.962404][ T4692] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.973630][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.981098][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.007244][ T4655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.030662][ T4655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.037742][ T4655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.038760][ T4732] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 51.063683][ T4655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.082721][ T4732] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.094017][ T4732] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 51.106347][ T4732] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.106347][ T4732] [ 51.116072][ T4732] EXT4-fs (loop2): Total free blocks count 0 [ 51.122153][ T4732] EXT4-fs (loop2): Free/Dirty block details [ 51.128141][ T4732] EXT4-fs (loop2): free_blocks=2415919104 [ 51.133901][ T4732] EXT4-fs (loop2): dirty_blocks=2560 [ 51.139735][ T4732] EXT4-fs (loop2): Block reservation details [ 51.145779][ T4732] EXT4-fs (loop2): i_reserved_data_blocks=160 [ 51.153248][ T4732] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 51.208850][ T4655] hsr_slave_0: entered promiscuous mode [ 51.228578][ T4655] hsr_slave_1: entered promiscuous mode [ 51.241151][ T4655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.261574][ T4655] Cannot create hsr debugfs directory [ 51.478469][ T4754] loop0: detected capacity change from 0 to 8192 [ 51.509157][ T4754] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.712298][ T4655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.721261][ T4655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.730314][ T4655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.730696][ T4732] syz.2.456 (4732) used greatest stack depth: 9032 bytes left [ 51.746981][ T4655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.782774][ T4655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.796025][ T4655] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.806409][ T3833] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.813650][ T3833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.830236][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.837414][ T3806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.905732][ T4655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.985207][ T4780] loop2: detected capacity change from 0 to 1024 [ 51.997060][ T4655] veth0_vlan: entered promiscuous mode [ 52.007576][ T4780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.010893][ T4655] veth1_vlan: entered promiscuous mode [ 52.039160][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.064763][ T4655] veth0_macvtap: entered promiscuous mode [ 52.074853][ T4655] veth1_macvtap: entered promiscuous mode [ 52.089213][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.099776][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.109885][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.120739][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.130789][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.141484][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.151588][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.162065][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.180582][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.194028][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.204697][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.214624][ T4655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.225234][ T4655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.238416][ T4655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.245813][ T4798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.476'. [ 52.273202][ T4655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.282017][ T4655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.290876][ T4655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.299639][ T4655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.305932][ T4802] loop2: detected capacity change from 0 to 2048 [ 52.327562][ T4802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.347865][ T4807] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 52.522832][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.581622][ T4824] pim6reg1: entered promiscuous mode [ 52.587349][ T4824] pim6reg1: entered allmulticast mode [ 52.624092][ T4829] pim6reg1: entered promiscuous mode [ 52.629578][ T4829] pim6reg1: entered allmulticast mode [ 52.667991][ T4837] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 52.743431][ T4845] netlink: 'syz.3.497': attribute type 39 has an invalid length. [ 52.751347][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 52.771113][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.778376][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.800345][ T4853] loop4: detected capacity change from 0 to 512 [ 52.824011][ T4853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.836780][ T4853] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.852051][ T4853] Process accounting resumed [ 52.870045][ T4853] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 52.896962][ T3981] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.060636][ T4873] loop3: detected capacity change from 0 to 512 [ 53.121912][ T4876] loop0: detected capacity change from 0 to 256 [ 53.156692][ T4873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.169571][ T4873] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.184857][ T4882] sd 0:0:1:0: device reset [ 53.209828][ T3966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.279222][ T4888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.289150][ T4888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.316875][ T4894] loop3: detected capacity change from 0 to 512 [ 53.339425][ T4894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.355584][ T4894] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.398302][ T3966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.403149][ T4902] syz.4.519[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.407536][ T4902] syz.4.519[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.419402][ T4902] syz.4.519[4902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.482360][ C0] hrtimer: interrupt took 27844 ns [ 53.688708][ T4912] chnl_net:caif_netlink_parms(): no params data found [ 53.739726][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.746934][ T4912] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.754366][ T4912] bridge_slave_0: entered allmulticast mode [ 53.761043][ T4912] bridge_slave_0: entered promiscuous mode [ 53.769729][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.776877][ T4912] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.784926][ T4912] bridge_slave_1: entered allmulticast mode [ 53.792016][ T4912] bridge_slave_1: entered promiscuous mode [ 53.814713][ T4912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.825377][ T4912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.834641][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 53.834656][ T29] audit: type=1326 audit(1729036807.672:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 53.864828][ T29] audit: type=1326 audit(1729036807.672:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 53.888393][ T29] audit: type=1326 audit(1729036807.672:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 53.911905][ T29] audit: type=1326 audit(1729036807.672:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 53.935348][ T29] audit: type=1326 audit(1729036807.672:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 53.958981][ T29] audit: type=1326 audit(1729036807.672:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 53.982321][ T29] audit: type=1326 audit(1729036807.672:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 54.005817][ T29] audit: type=1326 audit(1729036807.672:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 54.029047][ T29] audit: type=1326 audit(1729036807.672:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 54.052416][ T29] audit: type=1326 audit(1729036807.692:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa20415dff9 code=0x7ffc0000 [ 54.091952][ T4912] team0: Port device team_slave_0 added [ 54.099985][ T4912] team0: Port device team_slave_1 added [ 54.123870][ T4940] pim6reg1: entered promiscuous mode [ 54.129324][ T4940] pim6reg1: entered allmulticast mode [ 54.145829][ T4942] bond1: entered promiscuous mode [ 54.150997][ T4942] bond1: entered allmulticast mode [ 54.156846][ T4942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.169179][ T4942] bond1 (unregistering): Released all slaves [ 54.181628][ T4912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.188776][ T4912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.214798][ T4912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.226315][ T4912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.233403][ T4912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.259445][ T4912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.292973][ T4912] hsr_slave_0: entered promiscuous mode [ 54.299223][ T4912] hsr_slave_1: entered promiscuous mode [ 54.305199][ T4912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.313387][ T4912] Cannot create hsr debugfs directory [ 54.331985][ T4951] loop3: detected capacity change from 0 to 512 [ 54.362475][ T4951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.375426][ T4951] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.396920][ T4951] Process accounting resumed [ 54.412673][ T4951] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.451315][ T3966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.492374][ T4912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.509426][ T4966] loop3: detected capacity change from 0 to 512 [ 54.530884][ T4966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.544020][ T4966] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.557819][ T4912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.573104][ T3966] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.619762][ T4912] team0: Port device netdevsim1 removed [ 54.632668][ T4912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.693382][ T5000] loop2: detected capacity change from 0 to 512 [ 54.709292][ T5002] hub 1-0:1.0: USB hub found [ 54.713988][ T5002] hub 1-0:1.0: 8 ports detected [ 54.719958][ T5000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.732975][ T5000] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.734154][ T4912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.758561][ T5000] Process accounting resumed [ 54.764904][ T5000] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.786288][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.814670][ T4912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.826386][ T4912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.845582][ T4912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.857972][ T4912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.908962][ T4912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.922686][ T4912] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.933598][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.940757][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.957952][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.965787][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.061602][ T5031] loop3: detected capacity change from 0 to 2048 [ 55.074711][ T5036] loop1: detected capacity change from 0 to 128 [ 55.097590][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 55.111087][ T4912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.132337][ T5036] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.140415][ T5036] FAT-fs (loop1): Filesystem has been set read-only [ 55.148578][ T5036] syz.1.569: attempt to access beyond end of device [ 55.148578][ T5036] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 55.162472][ T5036] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.169844][ T5047] loop2: detected capacity change from 0 to 512 [ 55.170590][ T5036] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.185207][ T5036] syz.1.569: attempt to access beyond end of device [ 55.185207][ T5036] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.200546][ T5036] syz.1.569: attempt to access beyond end of device [ 55.200546][ T5036] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.219988][ T5047] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.278497][ T4912] veth0_vlan: entered promiscuous mode [ 55.287279][ T4912] veth1_vlan: entered promiscuous mode [ 55.306442][ T4912] veth0_macvtap: entered promiscuous mode [ 55.314431][ T4912] veth1_macvtap: entered promiscuous mode [ 55.333308][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.343883][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.353877][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.364507][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.374451][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.385157][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.395025][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.405748][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.415628][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.426097][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.438205][ T4912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.451801][ T5069] netlink: 'syz.2.578': attribute type 39 has an invalid length. [ 55.459656][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 55.468984][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.476248][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.490622][ T5071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.511893][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.522475][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.532380][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.543030][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.552954][ T4912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.563539][ T4912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.576847][ T4912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.576836][ T5078] loop2: detected capacity change from 0 to 256 [ 55.588095][ T4912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.599356][ T4912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.608228][ T4912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.617449][ T4912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.629460][ T5078] msdos: Bad value for 'gid' [ 55.634119][ T5078] msdos: Bad value for 'gid' [ 55.644819][ T5071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.660766][ T5080] selinux_netlink_send: 145 callbacks suppressed [ 55.660786][ T5080] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5080 comm=syz.2.584 [ 55.701519][ T5082] loop1: detected capacity change from 0 to 512 [ 55.713926][ T5071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.717792][ T5082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.736954][ T5082] EXT4-fs (loop1): 1 truncate cleaned up [ 55.772289][ T5071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.824702][ T5071] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.838893][ T5071] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.851503][ T5071] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.869254][ T5071] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.163618][ T5121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 58.197147][ T5129] loop1: detected capacity change from 0 to 128 [ 58.204054][ T5129] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.301954][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 58.354809][ T5151] pim6reg1: entered promiscuous mode [ 58.360208][ T5151] pim6reg1: entered allmulticast mode [ 58.490440][ T5165] loop3: detected capacity change from 0 to 1024 [ 58.498945][ T5165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.839476][ T5165] ================================================================== [ 58.847711][ T5165] BUG: KCSAN: data-race in filemap_fdatawrite_wbc / xas_set_mark [ 58.855572][ T5165] [ 58.857925][ T5165] write to 0xffff8881067f9924 of 4 bytes by task 5176 on cpu 1: [ 58.865592][ T5165] xas_set_mark+0x131/0x150 [ 58.870310][ T5165] __folio_start_writeback+0x1f1/0x440 [ 58.875819][ T5165] ext4_bio_write_folio+0x58b/0x9a0 [ 58.881059][ T5165] mpage_process_page_bufs+0x486/0x5d0 [ 58.886586][ T5165] mpage_prepare_extent_to_map+0x788/0xb80 [ 58.892450][ T5165] ext4_do_writepages+0xa20/0x2130 [ 58.897603][ T5165] ext4_writepages+0x159/0x2e0 [ 58.902410][ T5165] do_writepages+0x1d8/0x480 [ 58.907048][ T5165] filemap_fdatawrite_wbc+0xdb/0x100 [ 58.912403][ T5165] file_write_and_wait_range+0xc4/0x250 [ 58.917996][ T5165] generic_buffers_fsync_noflush+0x46/0x120 [ 58.924032][ T5165] ext4_sync_file+0x1ff/0x6c0 [ 58.928844][ T5165] vfs_fsync_range+0x116/0x130 [ 58.933646][ T5165] ext4_buffered_write_iter+0x326/0x370 [ 58.939228][ T5165] ext4_file_write_iter+0x293/0xe10 [ 58.944589][ T5165] iter_file_splice_write+0x5f1/0x980 [ 58.950012][ T5165] direct_splice_actor+0x160/0x2c0 [ 58.955163][ T5165] splice_direct_to_actor+0x302/0x670 [ 58.960587][ T5165] do_splice_direct+0xd7/0x150 [ 58.965392][ T5165] do_sendfile+0x39b/0x970 [ 58.969843][ T5165] __x64_sys_sendfile64+0x110/0x150 [ 58.975077][ T5165] x64_sys_call+0xed5/0x2d60 [ 58.979724][ T5165] do_syscall_64+0xc9/0x1c0 [ 58.984253][ T5165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.990188][ T5165] [ 58.992529][ T5165] read to 0xffff8881067f9924 of 4 bytes by task 5165 on cpu 0: [ 59.000092][ T5165] filemap_fdatawrite_wbc+0x5c/0x100 [ 59.005427][ T5165] file_write_and_wait_range+0xc4/0x250 [ 59.011016][ T5165] generic_buffers_fsync_noflush+0x46/0x120 [ 59.016956][ T5165] ext4_sync_file+0x1ff/0x6c0 [ 59.021688][ T5165] vfs_fsync_range+0x116/0x130 [ 59.026604][ T5165] ext4_buffered_write_iter+0x326/0x370 [ 59.032192][ T5165] ext4_file_write_iter+0x293/0xe10 [ 59.037458][ T5165] iter_file_splice_write+0x5f1/0x980 [ 59.042866][ T5165] direct_splice_actor+0x160/0x2c0 [ 59.048099][ T5165] splice_direct_to_actor+0x302/0x670 [ 59.053508][ T5165] do_splice_direct+0xd7/0x150 [ 59.058336][ T5165] do_sendfile+0x39b/0x970 [ 59.062967][ T5165] __x64_sys_sendfile64+0x110/0x150 [ 59.068198][ T5165] x64_sys_call+0xed5/0x2d60 [ 59.072815][ T5165] do_syscall_64+0xc9/0x1c0 [ 59.077390][ T5165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.083342][ T5165] [ 59.085683][ T5165] value changed: 0x0a000021 -> 0x04000021 [ 59.091414][ T5165] [ 59.093765][ T5165] Reported by Kernel Concurrency Sanitizer on: [ 59.099971][ T5165] CPU: 0 UID: 0 PID: 5165 Comm: syz.3.619 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 59.110606][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.120785][ T5165] ================================================================== [ 59.232696][ T5176] ================================================================== [ 59.240835][ T5176] BUG: KCSAN: data-race in ext4_do_writepages / xas_set_mark [ 59.248254][ T5176] [ 59.250589][ T5176] write to 0xffff8881067f9924 of 4 bytes by task 5165 on cpu 0: [ 59.258267][ T5176] xas_set_mark+0x131/0x150 [ 59.262853][ T5176] __folio_start_writeback+0x1f1/0x440 [ 59.268375][ T5176] ext4_bio_write_folio+0x58b/0x9a0 [ 59.273641][ T5176] mpage_process_page_bufs+0x486/0x5d0 [ 59.279145][ T5176] mpage_prepare_extent_to_map+0x788/0xb80 [ 59.284986][ T5176] ext4_do_writepages+0xa20/0x2130 [ 59.290155][ T5176] ext4_writepages+0x159/0x2e0 [ 59.294958][ T5176] do_writepages+0x1d8/0x480 [ 59.299582][ T5176] filemap_fdatawrite_wbc+0xdb/0x100 [ 59.304906][ T5176] file_write_and_wait_range+0xc4/0x250 [ 59.310501][ T5176] generic_buffers_fsync_noflush+0x46/0x120 [ 59.316425][ T5176] ext4_sync_file+0x1ff/0x6c0 [ 59.321133][ T5176] vfs_fsync_range+0x116/0x130 [ 59.325935][ T5176] ext4_buffered_write_iter+0x326/0x370 [ 59.331522][ T5176] ext4_file_write_iter+0x293/0xe10 [ 59.336752][ T5176] iter_file_splice_write+0x5f1/0x980 [ 59.342172][ T5176] direct_splice_actor+0x160/0x2c0 [ 59.347304][ T5176] splice_direct_to_actor+0x302/0x670 [ 59.352725][ T5176] do_splice_direct+0xd7/0x150 [ 59.357519][ T5176] do_sendfile+0x39b/0x970 [ 59.362048][ T5176] __x64_sys_sendfile64+0x110/0x150 [ 59.367278][ T5176] x64_sys_call+0xed5/0x2d60 [ 59.371985][ T5176] do_syscall_64+0xc9/0x1c0 [ 59.376607][ T5176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.382559][ T5176] [ 59.384894][ T5176] read to 0xffff8881067f9924 of 4 bytes by task 5176 on cpu 1: [ 59.392561][ T5176] ext4_do_writepages+0xf2/0x2130 [ 59.397625][ T5176] ext4_writepages+0x159/0x2e0 [ 59.402588][ T5176] do_writepages+0x1d8/0x480 [ 59.407200][ T5176] filemap_fdatawrite_wbc+0xdb/0x100 [ 59.412510][ T5176] file_write_and_wait_range+0xc4/0x250 [ 59.418097][ T5176] generic_buffers_fsync_noflush+0x46/0x120 [ 59.424122][ T5176] ext4_sync_file+0x1ff/0x6c0 [ 59.428842][ T5176] vfs_fsync_range+0x116/0x130 [ 59.433654][ T5176] ext4_buffered_write_iter+0x326/0x370 [ 59.439226][ T5176] ext4_file_write_iter+0x293/0xe10 [ 59.444462][ T5176] iter_file_splice_write+0x5f1/0x980 [ 59.449870][ T5176] direct_splice_actor+0x160/0x2c0 [ 59.455094][ T5176] splice_direct_to_actor+0x302/0x670 [ 59.460498][ T5176] do_splice_direct+0xd7/0x150 [ 59.465312][ T5176] do_sendfile+0x39b/0x970 [ 59.469759][ T5176] __x64_sys_sendfile64+0x110/0x150 [ 59.475079][ T5176] x64_sys_call+0xed5/0x2d60 [ 59.479704][ T5176] do_syscall_64+0xc9/0x1c0 [ 59.484230][ T5176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.490167][ T5176] [ 59.492587][ T5176] value changed: 0x0a000021 -> 0x04000021 [ 59.498319][ T5176] [ 59.500652][ T5176] Reported by Kernel Concurrency Sanitizer on: [ 59.506818][ T5176] CPU: 1 UID: 0 PID: 5176 Comm: syz.3.619 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 59.517445][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.527526][ T5176] ==================================================================