last executing test programs: 8.391332835s ago: executing program 3 (id=11034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030102000000fdffffffffffffff100800010001"], 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.084880966s ago: executing program 3 (id=11036): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.59128458s ago: executing program 3 (id=11039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x18}}, './file0\x00'}) 7.454309679s ago: executing program 3 (id=11041): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@usrquota}, {@block_validity}, {@orlov}, {@user_xattr}, {@quota}]}, 0x1, 0x560, &(0x7f0000001680)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xd5ba2100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.71248312s ago: executing program 3 (id=11051): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x1e1002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x7f03) 6.441951768s ago: executing program 1 (id=11056): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x1002, 0x4, 0x3e8, 0x0, 0x1f8, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@random="c1c02e68092d", @multicast1, @rand_addr, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 6.318608667s ago: executing program 1 (id=11057): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcc9fb4802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 6.254384551s ago: executing program 1 (id=11059): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x70bd25, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 6.074336663s ago: executing program 3 (id=11061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) fcntl$lock(r1, 0x5, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x240621c0}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 6.074033673s ago: executing program 1 (id=11062): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@usrquota}, {@block_validity}, {@orlov}, {@user_xattr}, {@quota}]}, 0x1, 0x560, &(0x7f0000001680)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xd5ba2100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.644766163s ago: executing program 1 (id=11075): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x6, 0x0) 4.538154889s ago: executing program 1 (id=11080): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r2}, 0x10) unshare(0x68040200) 899.342448ms ago: executing program 0 (id=11117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) 898.461888ms ago: executing program 4 (id=11118): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) 888.043609ms ago: executing program 2 (id=11119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) geteuid() 848.097162ms ago: executing program 2 (id=11120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00+'], 0x168) listen(r1, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d97376d54ac169fef2aca59833ac1ffc"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@ack={0x1e, 0xf, 0x0, 0x4, "bece9292e5c3372a86ed2d"}]}}}}}}}}, 0x0) 829.525963ms ago: executing program 0 (id=11121): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(r2) 820.068264ms ago: executing program 4 (id=11122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x84000176) close_range(r0, 0xffffffffffffffff, 0x0) 713.869531ms ago: executing program 0 (id=11124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000f2ffffff850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x5, 0x0, 0x0, 0x0, @binary="9e"}]}]}, 0x24}}, 0x0) 699.158502ms ago: executing program 2 (id=11125): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 670.469624ms ago: executing program 4 (id=11126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 590.13175ms ago: executing program 2 (id=11127): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a656334a0d7"], 0x29) 583.19922ms ago: executing program 0 (id=11128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 518.448004ms ago: executing program 0 (id=11129): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x8, 0xc000, 0x2059, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 518.035694ms ago: executing program 4 (id=11130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='console\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 501.397905ms ago: executing program 2 (id=11131): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 169.113468ms ago: executing program 4 (id=11132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 38.863997ms ago: executing program 2 (id=11133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) 38.401867ms ago: executing program 0 (id=11141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 0s ago: executing program 4 (id=11134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x57, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4-fs (loop3): 1 orphan inode deleted [ 469.993251][T11238] EXT4-fs (loop3): 1 truncate cleaned up [ 470.046610][T11238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.137229][ T6695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.198320][T11253] syz.1.10309 (11253) used obsolete PPPIOCDETACH ioctl [ 470.335642][T11263] loop1: detected capacity change from 0 to 2048 [ 470.418795][T11263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.473033][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.625701][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10319'. [ 470.634878][T11284] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10319'. [ 470.664975][T11284] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 470.783339][T11295] loop1: detected capacity change from 0 to 512 [ 470.817761][T11295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 470.826071][T11296] loop3: detected capacity change from 0 to 4096 [ 470.843700][T11295] EXT4-fs (loop1): 1 truncate cleaned up [ 470.865875][T11295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.885006][T11305] tipc: Cannot configure node identity twice [ 470.915278][T11296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.967624][T11295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.025463][T11296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.208656][T11336] syz.2.10338[11336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.208739][T11336] syz.2.10338[11336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.250497][T11312] lo speed is unknown, defaulting to 1000 [ 471.507122][T11312] chnl_net:caif_netlink_parms(): no params data found [ 471.523954][T11364] loop2: detected capacity change from 0 to 8192 [ 471.640994][T11312] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.648381][T11312] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.655902][T11312] bridge_slave_0: entered allmulticast mode [ 471.662429][T11312] bridge_slave_0: entered promiscuous mode [ 471.669756][T11312] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.676891][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.684309][T11312] bridge_slave_1: entered allmulticast mode [ 471.690967][T11312] bridge_slave_1: entered promiscuous mode [ 471.722904][T11312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.747360][T11312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.797762][T11312] team0: Port device team_slave_0 added [ 471.805181][T11312] team0: Port device team_slave_1 added [ 471.812172][T11555] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 471.860251][T11312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.867367][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.893544][T11312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.937227][T11581] loop3: detected capacity change from 0 to 1024 [ 471.980085][T11581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.992183][T11583] loop0: detected capacity change from 0 to 1024 [ 471.994360][T11312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.005855][T11312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.031905][T11312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.086157][T11583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.139053][T11583] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.164244][ T6695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.249744][T11583] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 472.262102][T11583] EXT4-fs (loop0): This should not happen!! Data will be lost [ 472.262102][T11583] [ 472.271816][T11583] EXT4-fs (loop0): Total free blocks count 0 [ 472.277835][T11583] EXT4-fs (loop0): Free/Dirty block details [ 472.283743][T11583] EXT4-fs (loop0): free_blocks=0 [ 472.288742][T11583] EXT4-fs (loop0): dirty_blocks=0 [ 472.293773][T11583] EXT4-fs (loop0): Block reservation details [ 472.299819][T11583] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 472.309916][T11312] hsr_slave_0: entered promiscuous mode [ 472.347517][T11312] hsr_slave_1: entered promiscuous mode [ 472.369689][T11312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.406394][T11312] Cannot create hsr debugfs directory [ 472.414304][T11630] lo speed is unknown, defaulting to 1000 [ 472.434432][ T5353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.574928][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 472.574945][ T29] audit: type=1326 audit(1726446877.268:15517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 472.676549][ T29] audit: type=1326 audit(1726446877.298:15518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 472.700431][ T29] audit: type=1326 audit(1726446877.298:15519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11659 comm="syz.0.10356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.179315][T11312] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.244937][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10360'. [ 475.253957][T11741] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10360'. [ 475.325821][T11741] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 475.336467][T11312] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.407172][T11312] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.516533][T11312] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.536096][ T29] audit: type=1326 audit(1726446880.218:15520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.559836][ T29] audit: type=1326 audit(1726446880.218:15521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.583651][ T29] audit: type=1326 audit(1726446880.218:15522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.607449][ T29] audit: type=1326 audit(1726446880.228:15523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.631387][ T29] audit: type=1326 audit(1726446880.228:15524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.655177][ T29] audit: type=1326 audit(1726446880.228:15525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.678987][ T29] audit: type=1326 audit(1726446880.228:15526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11767 comm="syz.0.10370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 475.863656][T11312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.901739][T11312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.953402][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10379'. [ 475.979704][T11800] bridge_slave_0: left allmulticast mode [ 475.985710][T11800] bridge_slave_0: left promiscuous mode [ 475.991476][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.994903][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10379'. [ 476.047501][T11800] bridge_slave_1: left allmulticast mode [ 476.053265][T11800] bridge_slave_1: left promiscuous mode [ 476.059211][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.109187][T11800] bond0: (slave bond_slave_0): Releasing backup interface [ 476.148370][T11800] bond0: (slave bond_slave_1): Releasing backup interface [ 476.158237][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10384'. [ 476.173705][T11800] team0: Port device team_slave_0 removed [ 476.198781][T11800] team0: Port device team_slave_1 removed [ 476.222537][T11800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.230055][T11800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.286741][T11800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.294239][T11800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.394164][T11312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.462036][T11312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.529639][T11823] netlink: 'syz.3.10389': attribute type 6 has an invalid length. [ 476.633604][T11312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.699848][T11312] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.718828][T11841] loop2: detected capacity change from 0 to 1024 [ 476.738040][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.745157][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.753736][T11841] EXT4-fs: Ignoring removed orlov option [ 476.759540][T11841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.796044][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.803257][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.845064][T11841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.899498][T11854] loop0: detected capacity change from 0 to 512 [ 476.927103][T11312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.966362][T11854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.023289][T11854] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.131479][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.154499][T11312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.195540][ T5353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.254543][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10407'. [ 477.617527][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 477.617543][ T29] audit: type=1326 audit(1726446882.308:15619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.627892][T11312] veth0_vlan: entered promiscuous mode [ 477.713592][T11931] loop0: detected capacity change from 0 to 512 [ 477.720648][T11312] veth1_vlan: entered promiscuous mode [ 477.740362][ T29] audit: type=1326 audit(1726446882.308:15620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.755625][T11933] loop3: detected capacity change from 0 to 2048 [ 477.764210][ T29] audit: type=1326 audit(1726446882.308:15621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.791001][T11312] veth0_macvtap: entered promiscuous mode [ 477.794203][ T29] audit: type=1326 audit(1726446882.308:15622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.821423][T11312] veth1_macvtap: entered promiscuous mode [ 477.823500][ T29] audit: type=1326 audit(1726446882.308:15623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.853061][ T29] audit: type=1326 audit(1726446882.338:15624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.862493][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.876827][ T29] audit: type=1326 audit(1726446882.338:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.876868][ T29] audit: type=1326 audit(1726446882.338:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.876899][ T29] audit: type=1326 audit(1726446882.358:15627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 477.887332][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.887360][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.911101][ T29] audit: type=1326 audit(1726446882.358:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11926 comm="syz.3.10423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f249800def9 code=0x7ffc0000 [ 478.002993][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.012969][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.023427][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.033252][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.043700][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.053615][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.064141][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.074041][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.084659][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.094545][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.095211][T11931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 478.105024][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.111741][T11931] EXT4-fs: Ignoring removed bh option [ 478.121645][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.137775][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.147603][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.158104][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.159942][T11931] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 478.167921][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.167941][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.167955][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.167972][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.277047][T11933] loop3: p1 < > p2 p3 < p5 > p4 [ 478.282037][T11933] loop3: partition table partially beyond EOD, truncated [ 478.321719][T11933] loop3: p1 start 4278190080 is beyond EOD, truncated [ 478.328691][T11933] loop3: p2 start 16908800 is beyond EOD, truncated [ 478.440417][T11933] loop3: p4 start 11326 is beyond EOD, truncated [ 478.446941][T11933] loop3: p5 start 16908800 is beyond EOD, truncated [ 478.508367][T11312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.585474][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.596060][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.605914][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.616566][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.626605][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.637178][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.647104][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.657635][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.667812][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.678272][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.688119][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.698670][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.708558][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.719039][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.728918][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.739368][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.749227][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.759831][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.769727][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.780213][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.790078][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.800549][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.810413][T11312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.820865][T11312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.984266][T11312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.029591][T11312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.038497][T11312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.047239][T11312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.056021][T11312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.090400][T11985] bio_check_eod: 9 callbacks suppressed [ 479.090417][T11985] syz.0.10444: attempt to access beyond end of device [ 479.090417][T11985] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 479.369984][T12005] loop4: detected capacity change from 0 to 128 [ 479.425855][T12007] xt_cgroup: xt_cgroup: no path or classid specified [ 479.445636][T12005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.519328][T12005] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.530519][T12013] syz.0.10457[12013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.530591][T12013] syz.0.10457[12013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.592043][T12005] Invalid ELF header magic: != ELF [ 479.593320][T12020] IPVS: Error joining to the multicast group [ 479.667834][T11312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.787885][T12031] loop4: detected capacity change from 0 to 512 [ 479.842378][T12017] lo speed is unknown, defaulting to 1000 [ 479.866461][T12031] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.10459: corrupted in-inode xattr: invalid ea_ino [ 479.921106][T12031] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10459: couldn't read orphan inode 15 (err -117) [ 479.958912][T12031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.162691][T12017] chnl_net:caif_netlink_parms(): no params data found [ 480.182380][T11312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.317579][T12190] syz.1.10468[12190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.317641][T12190] syz.1.10468[12190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.379624][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10468'. [ 480.400368][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10468'. [ 480.433531][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10469'. [ 480.450998][T12190] bond_slave_0: entered promiscuous mode [ 480.468848][T12190] batadv_slave_0: entered promiscuous mode [ 480.483914][T12190] hsr1: Slave A (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.533519][T12017] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.540848][T12017] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.595049][T12017] bridge_slave_0: entered allmulticast mode [ 480.597920][T12217] loop4: detected capacity change from 0 to 128 [ 480.613015][T12017] bridge_slave_0: entered promiscuous mode [ 480.639674][T12217] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 480.642792][T12017] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.655983][T12017] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.709106][T12017] bridge_slave_1: entered allmulticast mode [ 480.728856][T12017] bridge_slave_1: entered promiscuous mode [ 480.784647][T12230] loop4: detected capacity change from 0 to 512 [ 480.827434][T12230] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.10475: attempt to clear invalid blocks 2 len 1 [ 480.868881][T12017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.881502][T12230] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 480.899325][T12230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.10475: invalid indirect mapped block 1819239214 (level 0) [ 480.928792][T12230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.10475: invalid indirect mapped block 1819239214 (level 1) [ 480.930819][T12017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.976820][T12017] team0: Port device team_slave_0 added [ 480.993990][T12017] team0: Port device team_slave_1 added [ 481.022717][T12230] EXT4-fs (loop4): 1 truncate cleaned up [ 481.055254][T12230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.088456][T12017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.095696][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.121723][T12017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.196197][T12017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.203204][T12017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.229234][T12017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.240654][T12230] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.10475: Unrecognised inode hash code 20 [ 481.252386][T12230] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10475: Corrupt directory, running e2fsck is recommended [ 481.294825][T12230] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.10475: Unrecognised inode hash code 20 [ 481.306554][T12230] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.10475: Corrupt directory, running e2fsck is recommended [ 481.352937][T12230] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.10475: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 481.403384][T12017] hsr_slave_0: entered promiscuous mode [ 481.430320][T12017] hsr_slave_1: entered promiscuous mode [ 481.444990][T12318] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.10475: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 481.465140][T12017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.502707][T12017] Cannot create hsr debugfs directory [ 481.528825][T11312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.545227][T12356] SELinux: policydb version -1634696897 does not match my version range 15-33 [ 481.574486][T12356] SELinux: failed to load policy [ 481.776650][T12017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.861117][T12017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.910262][T12435] loop2: detected capacity change from 0 to 764 [ 481.975376][T12017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.024144][T12448] ./file0: Can't lookup blockdev [ 482.080782][T12017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.146711][T12462] loop4: detected capacity change from 0 to 256 [ 482.163793][T12462] vfat: Bad value for 'uid' [ 482.168480][T12462] vfat: Bad value for 'uid' [ 482.252794][T12017] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 482.304297][T12017] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 482.329032][T12483] loop4: detected capacity change from 0 to 2048 [ 482.344253][T12017] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 482.377904][T12017] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 482.400580][T12483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.512228][T11312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.539111][T12017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.592625][T12017] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.628033][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.635286][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.835852][T12533] loop1: detected capacity change from 0 to 512 [ 482.867256][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.874410][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.905284][T12533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 482.939686][T12533] EXT4-fs (loop1): 1 truncate cleaned up [ 482.962408][T12533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.151577][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.223277][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.459266][T12552] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 483.569010][T12017] veth0_vlan: entered promiscuous mode [ 483.600255][T12017] veth1_vlan: entered promiscuous mode [ 483.645399][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 483.645415][ T29] audit: type=1400 audit(1726446888.338:15684): avc: denied { connect } for pid=12571 comm="syz.2.10526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 483.719562][T12017] veth0_macvtap: entered promiscuous mode [ 483.770806][T12017] veth1_macvtap: entered promiscuous mode [ 483.799858][ T29] audit: type=1400 audit(1726446888.488:15685): avc: denied { ioctl } for pid=12581 comm="syz.4.10531" path="socket:[98673]" dev="sockfs" ino=98673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 483.817730][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.835421][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.845318][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.855861][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.865754][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.876215][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.886128][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.896619][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.906565][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.917060][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.926901][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.937480][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.947368][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.957941][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.967841][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.978322][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.988253][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.998713][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.008639][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.019083][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.028936][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.034758][ T29] audit: type=1400 audit(1726446888.578:15686): avc: denied { bind } for pid=12585 comm="syz.2.10533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 484.039449][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.058950][ T29] audit: type=1400 audit(1726446888.578:15687): avc: denied { listen } for pid=12585 comm="syz.2.10533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 484.068754][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.099436][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.187607][T12017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.247140][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.257902][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.268062][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.278747][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.288855][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.299579][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.309587][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.320043][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.324746][ T29] audit: type=1326 audit(1726446888.928:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.1.10535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd063f2def9 code=0x7ffc0000 [ 484.329923][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.353654][ T29] audit: type=1326 audit(1726446888.928:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.1.10535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd063f2def9 code=0x7ffc0000 [ 484.364044][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.364132][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.364149][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.364166][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.387833][ T29] audit: type=1326 audit(1726446888.928:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.1.10535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd063f2def9 code=0x7ffc0000 [ 484.397622][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.397641][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.408042][ T29] audit: type=1326 audit(1726446888.928:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.1.10535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd063f2def9 code=0x7ffc0000 [ 484.417862][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.428245][ T29] audit: type=1326 audit(1726446888.928:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.1.10535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd063f2def9 code=0x7ffc0000 [ 484.451883][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.461699][ T29] audit: type=1326 audit(1726446888.928:15693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12591 comm="syz.1.10535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd063f2def9 code=0x7ffc0000 [ 484.564302][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.574163][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.584643][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.594532][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.604971][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.614838][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.625351][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.635300][T12017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.645786][T12017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.662014][T12017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.677794][T12601] loop4: detected capacity change from 0 to 1024 [ 484.693537][T12017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.702350][T12017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.711165][T12017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.719930][T12017] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.732011][T12601] EXT4-fs: Ignoring removed orlov option [ 484.759259][T12605] syz.0.10541[12605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.759397][T12605] syz.0.10541[12605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.780383][T12601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.815973][T12606] loop2: detected capacity change from 0 to 512 [ 484.851589][T12606] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 484.897925][T12606] EXT4-fs (loop2): 1 truncate cleaned up [ 484.904222][T12606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.925155][T12614] @: renamed from bond0 (while UP) [ 484.975317][T12606] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 485.010185][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.025506][T12601] lo speed is unknown, defaulting to 1000 [ 485.047021][T12629] loop3: detected capacity change from 0 to 256 [ 485.079330][T12635] loop2: detected capacity change from 0 to 512 [ 485.101307][T12635] EXT4-fs: Ignoring removed i_version option [ 485.107441][T12635] EXT4-fs: Ignoring removed nobh option [ 485.124447][T12635] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 485.205739][T12635] EXT4-fs (loop2): 1 truncate cleaned up [ 485.211852][T12635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.283611][T11312] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /21/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 485.408500][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.411892][T12672] loop3: detected capacity change from 0 to 2048 [ 485.520196][T12672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.595565][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10560'. [ 485.672924][T12017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.689242][T12695] loop1: detected capacity change from 0 to 512 [ 485.735746][T12695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.781374][T12695] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.940049][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.955163][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.989166][T12657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.049631][T12723] vhci_hcd: default hub control req: 800e v1303 i0000 l0 [ 486.059033][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.169611][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.298404][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.299616][T12737] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 486.513471][ T55] bridge_slave_1: left allmulticast mode [ 486.519204][ T55] bridge_slave_1: left promiscuous mode [ 486.524968][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.575401][ T55] bridge_slave_0: left allmulticast mode [ 486.581083][ T55] bridge_slave_0: left promiscuous mode [ 486.587030][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.747120][T12770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10584'. [ 487.009227][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.058852][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.079353][ T55] bond0 (unregistering): Released all slaves [ 487.214493][ T55] hsr_slave_0: left promiscuous mode [ 487.246547][ T55] hsr_slave_1: left promiscuous mode [ 487.278269][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.285849][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.302325][T12797] syz.0.10594[12797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.302442][T12797] syz.0.10594[12797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.336179][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.355278][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.412500][ T55] veth1_macvtap: left promiscuous mode [ 487.418157][ T55] veth0_macvtap: left promiscuous mode [ 487.423736][ T55] veth1_vlan: left promiscuous mode [ 487.429019][ T55] veth0_vlan: left promiscuous mode [ 487.859835][ T55] team0 (unregistering): Port device team_slave_1 removed [ 487.904384][ T55] team0 (unregistering): Port device team_slave_0 removed [ 488.141347][T12738] lo speed is unknown, defaulting to 1000 [ 488.247684][T12832] loop2: detected capacity change from 0 to 512 [ 488.324594][T12832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.388821][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10601'. [ 488.466419][T12832] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 488.497114][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10601'. [ 488.559916][T12738] chnl_net:caif_netlink_parms(): no params data found [ 488.586280][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.653565][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10601'. [ 488.694863][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10601'. [ 488.729236][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 488.729250][ T29] audit: type=1400 audit(1726446893.418:15781): avc: denied { unmount } for pid=10128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 488.816066][T12967] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10605'. [ 488.850603][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10601'. [ 488.863177][T12967] 0·X: renamed from hsr0 (while UP) [ 488.867968][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10601'. [ 488.892421][T12967] 0·X: entered allmulticast mode [ 488.897511][T12967] hsr_slave_0: entered allmulticast mode [ 488.903192][T12967] hsr_slave_1: entered allmulticast mode [ 488.971084][T12967] A link change request failed with some changes committed already. Interface c0·X may have been left with an inconsistent configuration, please check. [ 488.986729][T12738] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.993879][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.032981][ T29] audit: type=1400 audit(1726446893.718:15782): avc: denied { read write } for pid=12017 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.039917][T12999] loop0: detected capacity change from 0 to 128 [ 489.067721][T12738] bridge_slave_0: entered allmulticast mode [ 489.074273][T12738] bridge_slave_0: entered promiscuous mode [ 489.114377][T12999] EXT4-fs: Ignoring removed bh option [ 489.145040][T12738] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.150118][T12999] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 489.152189][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.177353][ T29] audit: type=1400 audit(1726446893.718:15783): avc: denied { open } for pid=12017 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.201728][ T29] audit: type=1400 audit(1726446893.718:15784): avc: denied { ioctl } for pid=12017 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.227633][ T29] audit: type=1400 audit(1726446893.728:15785): avc: denied { read write } for pid=12998 comm="syz.0.10610" name="loop0" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 489.249286][T12738] bridge_slave_1: entered allmulticast mode [ 489.250983][ T29] audit: type=1400 audit(1726446893.728:15786): avc: denied { open } for pid=12998 comm="syz.0.10610" path="/dev/loop0" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 489.280787][ T29] audit: type=1400 audit(1726446893.728:15787): avc: denied { ioctl } for pid=12998 comm="syz.0.10610" path="/dev/loop0" dev="devtmpfs" ino=641 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 489.287101][T12738] bridge_slave_1: entered promiscuous mode [ 489.305591][ T29] audit: type=1400 audit(1726446893.798:15788): avc: denied { map_create } for pid=13003 comm="syz.2.10612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 489.330810][ T29] audit: type=1400 audit(1726446893.798:15789): avc: denied { bpf } for pid=13003 comm="syz.2.10612" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 489.351918][ T29] audit: type=1400 audit(1726446893.798:15790): avc: denied { map_read map_write } for pid=13003 comm="syz.2.10612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 489.402122][T12999] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 489.441841][T12999] ext2 filesystem being mounted at /378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 489.497389][T12738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.546005][T12738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.657082][ T5353] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 489.668226][T12738] team0: Port device team_slave_0 added [ 489.699042][T12738] team0: Port device team_slave_1 added [ 489.777909][T12738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.784952][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.810900][T12738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.887986][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.897112][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.905160][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.912574][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.920059][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.927518][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.935071][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.942514][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.950148][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.957621][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.965038][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.972431][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.976248][T12738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.979956][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 489.987046][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.994234][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.020264][T12738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.027629][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.045690][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.053092][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.060641][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.068063][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.075490][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.082888][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.090418][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.097904][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.105374][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.112852][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.120287][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.127728][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.135187][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.142644][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.150083][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.157505][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.165038][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.172553][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.180020][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.187440][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.194919][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.202329][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.209784][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.217267][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.224661][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.232169][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.239637][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.247137][ T35] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 490.258129][T13106] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10622'. [ 490.267617][T13106] 0·X: renamed from hsr0 (while UP) [ 490.276460][T13106] 0·X: entered allmulticast mode [ 490.281526][T13106] hsr_slave_0: entered allmulticast mode [ 490.287222][T13106] hsr_slave_1: entered allmulticast mode [ 490.293505][T13106] A link change request failed with some changes committed already. Interface c0·X may have been left with an inconsistent configuration, please check. [ 490.334977][ T35] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 490.351273][T12738] hsr_slave_0: entered promiscuous mode [ 490.365991][T12738] hsr_slave_1: entered promiscuous mode [ 490.372808][T12738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.391869][T12738] Cannot create hsr debugfs directory [ 490.410215][T13138] bond0: entered promiscuous mode [ 490.415527][T13138] bond0: entered allmulticast mode [ 490.449926][T13151] random: crng reseeded on system resumption [ 490.475623][T13138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.526790][T13138] bond0 (unregistering): Released all slaves [ 491.165466][T12738] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 491.196967][T12738] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 491.240573][T12738] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 491.281906][T12738] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 491.303294][T13355] loop0: detected capacity change from 0 to 2048 [ 491.371731][T13355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.440044][T12738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.459014][T13362] loop1: detected capacity change from 0 to 1024 [ 491.484281][ T5353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.500002][T12738] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.525133][T13362] EXT4-fs: Ignoring removed orlov option [ 491.530905][T13362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.559080][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.566201][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.619856][T13362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.637079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.644182][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.674230][T13351] cgroup: fork rejected by pids controller in /syz2 [ 491.722150][T12738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.733182][T12738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.831583][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.008903][T12738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.029429][T13420] loop3: detected capacity change from 0 to 164 [ 492.065702][T13420] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 492.109511][T13420] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 492.129987][T13420] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 492.187458][T13433] loop0: detected capacity change from 0 to 256 [ 492.226875][T13433] FAT-fs (loop0): Directory bread(block 64) failed [ 492.253741][T13433] FAT-fs (loop0): Directory bread(block 65) failed [ 492.265651][T13433] FAT-fs (loop0): Directory bread(block 66) failed [ 492.301770][T13433] FAT-fs (loop0): Directory bread(block 67) failed [ 492.316203][T13433] FAT-fs (loop0): Directory bread(block 68) failed [ 492.341540][T13433] FAT-fs (loop0): Directory bread(block 69) failed [ 492.348131][T13448] loop1: detected capacity change from 0 to 512 [ 492.348462][T13448] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 492.371370][T13445] lo speed is unknown, defaulting to 1000 [ 492.394832][T13433] FAT-fs (loop0): Directory bread(block 70) failed [ 492.427836][T13433] FAT-fs (loop0): Directory bread(block 71) failed [ 492.454663][T13433] FAT-fs (loop0): Directory bread(block 72) failed [ 492.487650][T13433] FAT-fs (loop0): Directory bread(block 73) failed [ 492.524107][T12738] veth0_vlan: entered promiscuous mode [ 492.611081][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10667'. [ 492.623034][T12738] veth1_vlan: entered promiscuous mode [ 492.670853][T12738] veth0_macvtap: entered promiscuous mode [ 492.710279][T12738] veth1_macvtap: entered promiscuous mode [ 492.764170][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.774821][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.784865][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.795354][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.805288][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.815732][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.825579][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.836049][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.845915][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.856446][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.866723][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.877195][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.887235][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.897799][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.907792][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.918244][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.928123][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.938766][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.948818][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.959381][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.969275][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.979737][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.989585][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.000026][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.016939][T12738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.045577][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.056152][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.066055][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.076503][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.086351][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.097045][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.107111][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.117734][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.127947][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.138403][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.148315][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.158812][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.168673][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.179193][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.189072][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.199557][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.209390][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.219826][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.229666][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.240094][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.250028][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.260636][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.270471][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.280946][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.290820][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.301297][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.315048][T12738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.330646][T13492] netem: unknown loss type 5 [ 493.335520][T13492] netem: change failed [ 493.341285][T12738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.350219][T12738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.359053][T12738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.368008][T12738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.405820][T13504] loop0: detected capacity change from 0 to 128 [ 493.489078][T13506] lo speed is unknown, defaulting to 1000 [ 493.778700][T13526] syzkaller0: entered promiscuous mode [ 493.784229][T13526] syzkaller0: entered allmulticast mode [ 493.821930][T13564] netlink: 'syz.1.10693': attribute type 3 has an invalid length. [ 493.858476][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 493.858494][ T29] audit: type=1400 audit(1726446898.548:16038): avc: denied { ioctl } for pid=13563 comm="syz.3.10694" path="socket:[100426]" dev="sockfs" ino=100426 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 493.945865][T13571] loop1: detected capacity change from 0 to 256 [ 493.974928][ T29] audit: type=1400 audit(1726446898.598:16039): avc: denied { read } for pid=13568 comm="syz.0.10696" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 493.998876][ T29] audit: type=1400 audit(1726446898.608:16040): avc: denied { open } for pid=13568 comm="syz.0.10696" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 494.023101][ T29] audit: type=1400 audit(1726446898.608:16041): avc: denied { ioctl } for pid=13568 comm="syz.0.10696" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 494.048934][ T29] audit: type=1400 audit(1726446898.608:16042): avc: denied { execute } for pid=13568 comm="syz.0.10696" path="/404/pids.current" dev="tmpfs" ino=2116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 494.186426][ T29] audit: type=1400 audit(1726446898.848:16043): avc: denied { setopt } for pid=13583 comm="syz.3.10700" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 494.207327][ T29] audit: type=1326 audit(1726446898.848:16044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13582 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 494.231552][ T29] audit: type=1326 audit(1726446898.848:16045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13582 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 494.255366][ T29] audit: type=1326 audit(1726446898.848:16046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13582 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 494.279143][ T29] audit: type=1400 audit(1726446898.858:16047): avc: denied { create } for pid=13585 comm="syz.2.10702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 494.313204][T13593] 9pnet: p9_errstr2errno: server reported unknown error [ 494.794359][T13640] netlink: zone id is out of range [ 494.813486][T13640] netlink: del zone limit has 4 unknown bytes [ 494.957624][T13652] loop1: detected capacity change from 0 to 2048 [ 495.006783][T13652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.058482][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.066123][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.073527][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.081048][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.088486][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.095945][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.103346][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.110830][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.118251][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.125680][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.133151][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.140597][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.148018][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.155488][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.162887][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.170411][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.177854][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.185281][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.192754][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.200185][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.207603][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.215054][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.222459][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.229950][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.237360][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.244850][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.252243][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.259797][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.267269][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.274719][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.282127][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.290146][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.297566][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.305138][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.312534][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.320013][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.327450][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.334927][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.342356][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.349810][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.357320][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.364755][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.372158][T22235] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 495.392017][T22235] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 495.421576][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.450134][T13667] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 495.660446][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10734'. [ 495.894521][T13728] loop4: detected capacity change from 0 to 512 [ 495.926896][T13728] EXT4-fs (loop4): unsupported inode size: 0 [ 495.932925][T13728] EXT4-fs (loop4): blocksize: 1024 [ 496.101392][T13751] syz.1.10753[13751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.101507][T13751] syz.1.10753[13751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.186289][T13754] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13754 comm=syz.3.10755 [ 496.479765][T13777] netlink: 'syz.3.10764': attribute type 1 has an invalid length. [ 496.517663][T13777] bond1: entered promiscuous mode [ 496.558515][T13779] loop1: detected capacity change from 0 to 2048 [ 496.598684][T13777] bond1: (slave geneve0): making interface the new active one [ 496.606236][T13777] geneve0: entered promiscuous mode [ 496.657891][T13779] loop1: p1 < > p2 p3 < p5 > [ 496.672291][T13779] loop1: p2 start 16908804 is beyond EOD, truncated [ 496.700683][T13777] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 496.735056][T13779] loop1: p5 start 16908804 is beyond EOD, truncated [ 496.849323][T13823] 9pnet_fd: Insufficient options for proto=fd [ 496.857091][T13825] pim6reg: entered allmulticast mode [ 496.911048][T13825] pim6reg: left allmulticast mode [ 496.941379][T13829] loop4: detected capacity change from 0 to 1024 [ 496.984691][T13829] EXT4-fs: Ignoring removed nobh option [ 497.006039][T13829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.200664][T12738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.487865][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10782'. [ 497.530619][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10782'. [ 498.245728][T13919] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.10802'. [ 498.260918][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10803'. [ 498.295152][T13919] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.10802'. [ 498.362734][T13926] loop4: detected capacity change from 0 to 512 [ 498.401727][T13926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.526878][T13926] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.606103][T13926] syz.4.10804[13926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.606294][T13926] syz.4.10804[13926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.695033][T13955] syz.2.10815[13955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.712286][T13958] syz.3.10817[13958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.738108][T12738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.749342][T13955] syz.2.10815[13955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.756856][T13958] syz.3.10817[13958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.880260][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 498.880277][ T29] audit: type=1400 audit(1726446903.568:16237): avc: denied { unlink } for pid=5353 comm="syz-executor" name="file0" dev="tmpfs" ino=2277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 499.000522][ T29] audit: type=1400 audit(1726446903.688:16238): avc: denied { module_request } for pid=13979 comm="syz.0.10826" kmod="crypto-gcm(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 499.038049][T13988] loop2: detected capacity change from 0 to 512 [ 499.109165][T13988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.169417][T13988] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.232396][ T29] audit: type=1400 audit(1726446903.918:16239): avc: denied { map } for pid=13986 comm="syz.2.10827" path="/135/file0/cgroup.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 499.255959][ T29] audit: type=1400 audit(1726446903.918:16240): avc: denied { execute } for pid=13986 comm="syz.2.10827" path="/135/file0/cgroup.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 499.330616][ T29] audit: type=1400 audit(1726446904.018:16241): avc: denied { read } for pid=14013 comm="syz.1.10833" path="socket:[100850]" dev="sockfs" ino=100850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.398580][T14019] loop1: detected capacity change from 0 to 512 [ 499.400190][T14019] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.10836: corrupted in-inode xattr: invalid ea_ino [ 499.400301][T14019] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.10836: couldn't read orphan inode 15 (err -117) [ 499.400930][T14019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.414352][T14023] syz.0.10834[14023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.414485][T14023] syz.0.10834[14023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.455939][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.460457][ T29] audit: type=1400 audit(499.443:16242): avc: denied { ioctl } for pid=14024 comm="syz.4.10837" path="socket:[100874]" dev="sockfs" ino=100874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 499.489486][ T29] audit: type=1326 audit(499.473:16243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.0.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 499.489537][ T29] audit: type=1326 audit(499.473:16244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.0.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 499.492357][ T29] audit: type=1326 audit(499.473:16245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.0.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 499.492572][ T29] audit: type=1326 audit(499.473:16246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14026 comm="syz.0.10839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129958def9 code=0x7ffc0000 [ 499.527850][T14033] loop4: detected capacity change from 0 to 512 [ 499.577935][T14037] netlink: 576 bytes leftover after parsing attributes in process `syz.1.10842'. [ 499.592968][T14035] loop0: detected capacity change from 0 to 4096 [ 499.621903][T14033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.625664][T14035] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.666040][T14033] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 499.703276][T12738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.795760][ T5353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.936108][T14058] loop1: detected capacity change from 0 to 512 [ 499.936439][T14058] EXT4-fs: Ignoring removed oldalloc option [ 499.936937][T14058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 499.938047][T14058] EXT4-fs (loop1): 1 truncate cleaned up [ 499.938576][T14058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.977711][T14056] hub 2-0:1.0: USB hub found [ 500.155156][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.176303][T14056] hub 2-0:1.0: 8 ports detected [ 500.231842][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.291240][T14076] loop1: detected capacity change from 0 to 164 [ 500.344321][T14076] rock: directory entry would overflow storage [ 500.350583][T14076] rock: sig=0x4f50, size=4, remaining=3 [ 500.356191][T14076] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 500.381803][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10861'. [ 500.582812][T14142] loop1: detected capacity change from 0 to 512 [ 500.620875][T14142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.698270][T14142] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.10869: path /416/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 500.754914][T14150] ALSA: seq fatal error: cannot create timer (-16) [ 500.799447][T14142] EXT4-fs (loop1): Remounting filesystem read-only [ 501.158887][T14163] netlink: 'syz.4.10876': attribute type 1 has an invalid length. [ 501.416961][T14181] netlink: 'syz.2.10886': attribute type 10 has an invalid length. [ 501.461615][T14181] team0: Device hsr_slave_0 failed to register rx_handler [ 501.504080][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.642368][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.690573][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.763152][T14210] loop1: detected capacity change from 0 to 256 [ 501.790600][T14210] FAT-fs (loop1): bogus number of FAT sectors [ 501.796785][T14210] FAT-fs (loop1): Can't find a valid FAT filesystem [ 502.127887][T14232] bpf_get_probe_write_proto: 4 callbacks suppressed [ 502.127905][T14232] syz.4.10906[14232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.157293][T14232] syz.4.10906[14232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.157950][T14234] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.292502][T14234] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.373449][T14234] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.447181][T14234] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.529831][T14234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.581089][T14234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.634084][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.687412][T14234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.697667][T14268] loop0: detected capacity change from 0 to 2048 [ 502.727151][T14234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.772448][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.815065][T14268] EXT4-fs (loop0): failed to initialize system zone (-117) [ 502.822436][T14268] EXT4-fs (loop0): mount failed [ 502.908741][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.021491][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.114330][T14324] syz.0.10931[14324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.114409][T14324] syz.0.10931[14324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.158773][T14287] lo speed is unknown, defaulting to 1000 [ 503.208683][ T55] bridge_slave_1: left allmulticast mode [ 503.214580][ T55] bridge_slave_1: left promiscuous mode [ 503.220380][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.270280][ T55] bridge_slave_0: left allmulticast mode [ 503.276038][ T55] bridge_slave_0: left promiscuous mode [ 503.281912][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.360534][T14354] loop3: detected capacity change from 0 to 2048 [ 503.409584][T14354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.482459][T14354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 503.513790][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.535820][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.549111][T14354] EXT4-fs (loop3): Remounting filesystem read-only [ 503.562556][ T55] bond0 (unregistering): Released all slaves [ 503.611662][T14378] loop1: detected capacity change from 0 to 512 [ 503.622609][T12017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.655650][T14374] loop2: detected capacity change from 0 to 512 [ 503.696876][T14378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.725184][T14374] EXT4-fs: Ignoring removed oldalloc option [ 503.738473][ T55] hsr_slave_0: left promiscuous mode [ 503.760890][ T55] hsr_slave_1: left promiscuous mode [ 503.766961][T14374] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.10943: Parent and EA inode have the same ino 15 [ 503.795561][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.804957][T14374] EXT4-fs (loop2): Remounting filesystem read-only [ 503.811585][T14374] EXT4-fs warning (device loop2): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 503.825022][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.832501][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.839970][T14374] EXT4-fs (loop2): 1 orphan inode deleted [ 503.866150][T14374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.911247][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.918793][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.955399][T14374] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 503.972856][T14374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.003097][ T55] veth1_macvtap: left promiscuous mode [ 504.008644][ T55] veth0_macvtap: left promiscuous mode [ 504.014233][ T55] veth1_vlan: left promiscuous mode [ 504.019655][ T55] veth0_vlan: left promiscuous mode [ 504.123171][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 504.123186][ T29] audit: type=1400 audit(504.103:16319): avc: denied { read } for pid=14412 comm="syz.2.10952" name="ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 504.203907][ T29] audit: type=1400 audit(504.143:16320): avc: denied { open } for pid=14412 comm="syz.2.10952" path="/dev/ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 504.227181][ T29] audit: type=1400 audit(504.143:16321): avc: denied { ioctl } for pid=14412 comm="syz.2.10952" path="/dev/ptp0" dev="devtmpfs" ino=221 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 504.292394][ T29] audit: type=1400 audit(504.273:16322): avc: denied { ioctl } for pid=14416 comm="syz.2.10954" path="socket:[103432]" dev="sockfs" ino=103432 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 504.435373][ T55] team0 (unregistering): Port device team_slave_1 removed [ 504.461192][ T55] team0 (unregistering): Port device team_slave_0 removed [ 504.614033][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10960'. [ 504.699304][ T29] audit: type=1400 audit(504.683:16323): avc: denied { bind } for pid=14449 comm="syz.0.10963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 504.701949][T14445] loop2: detected capacity change from 0 to 1024 [ 504.719588][T14450] tipc: Failed to remove unknown binding: 66,1,1/0:311210487/311210489 [ 504.733152][T14450] tipc: Failed to remove unknown binding: 66,1,1/0:311210487/311210489 [ 504.751503][ T29] audit: type=1400 audit(504.683:16324): avc: denied { lock } for pid=14435 comm="syz.1.10961" path="socket:[102531]" dev="sockfs" ino=102531 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 504.775499][ T29] audit: type=1400 audit(504.703:16325): avc: denied { setopt } for pid=14449 comm="syz.0.10963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 504.840601][T14445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.882740][ T29] audit: type=1400 audit(504.853:16326): avc: denied { read } for pid=14441 comm="syz.2.10962" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 504.904959][ T29] audit: type=1400 audit(504.853:16327): avc: denied { open } for pid=14441 comm="syz.2.10962" path="/169/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 504.928489][ T29] audit: type=1400 audit(504.853:16328): avc: denied { setattr } for pid=14441 comm="syz.2.10962" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.952047][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.992414][T14287] chnl_net:caif_netlink_parms(): no params data found [ 505.182814][T14594] syz.2.10965[14594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.182891][T14594] syz.2.10965[14594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.209391][T14528] bond2: entered promiscuous mode [ 505.226078][T14528] bond2: entered allmulticast mode [ 505.264521][T14528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.296847][T14528] bond2 (unregistering): Released all slaves [ 505.323596][T14633] random: crng reseeded on system resumption [ 505.374920][T14287] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.382112][T14287] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.464921][T14287] bridge_slave_0: entered allmulticast mode [ 505.471828][T14287] bridge_slave_0: entered promiscuous mode [ 505.503922][T14287] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.511201][T14287] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.599884][T14287] bridge_slave_1: entered allmulticast mode [ 505.620321][T14287] bridge_slave_1: entered promiscuous mode [ 505.710157][T14287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.743394][T14287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.848214][T14287] team0: Port device team_slave_0 added [ 505.865515][T14287] team0: Port device team_slave_1 added [ 505.944106][T14287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.951166][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.977329][T14287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.079012][T14287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.086106][T14287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.112175][T14287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.250198][T14287] hsr_slave_0: entered promiscuous mode [ 506.269417][T14287] hsr_slave_1: entered promiscuous mode [ 506.304240][T14287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.355199][T14287] Cannot create hsr debugfs directory [ 506.362765][T14827] siw: device registration error -23 [ 506.471251][T14859] random: crng reseeded on system resumption [ 506.832331][T14287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.878676][T14287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.904225][T14287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.965502][T14287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 507.027016][T14945] loop3: detected capacity change from 0 to 2048 [ 507.080125][T14945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.100603][T14287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.115879][T14287] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.137937][T14287] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.148436][T14287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.162380][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.169525][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.226184][T12017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.245916][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.253018][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.276728][T14956] siw: device registration error -23 [ 507.327100][T14960] random: crng reseeded on system resumption [ 507.425420][T14964] bond1: entered promiscuous mode [ 507.430500][T14964] bond1: entered allmulticast mode [ 507.480349][T14964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.529603][T14964] bond1 (unregistering): Released all slaves [ 507.551806][T15006] loop0: detected capacity change from 0 to 2048 [ 507.627636][T15006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.662295][T14287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.695882][T15047] loop3: detected capacity change from 0 to 512 [ 507.727415][T15047] EXT4-fs: Ignoring removed oldalloc option [ 507.733444][T15006] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 507.788323][T15047] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.11018: Parent and EA inode have the same ino 15 [ 507.848060][T15006] EXT4-fs (loop0): Remounting filesystem read-only [ 507.871704][T15053] loop1: detected capacity change from 0 to 2048 [ 507.888681][T15047] EXT4-fs (loop3): Remounting filesystem read-only [ 507.895295][T15047] EXT4-fs warning (device loop3): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 507.940674][ T5353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.964829][T15047] EXT4-fs (loop3): 1 orphan inode deleted [ 507.965844][T15053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.971213][T15047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.046470][T15047] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 508.102857][T15047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.129755][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.150633][T14287] veth0_vlan: entered promiscuous mode [ 508.193637][T14287] veth1_vlan: entered promiscuous mode [ 508.286905][T14287] veth0_macvtap: entered promiscuous mode [ 508.325959][T14287] veth1_macvtap: entered promiscuous mode [ 508.350470][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.361574][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.371436][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.382048][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.391938][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.402416][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.410667][T15101] loop0: detected capacity change from 0 to 1024 [ 508.412383][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.429211][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.439063][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.445072][T15101] EXT4-fs: Ignoring removed orlov option [ 508.449505][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.455545][T15101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.465077][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.482335][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.492349][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.502800][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.512630][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.523232][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.533080][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.543891][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.553752][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.564284][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.574133][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.584584][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.594498][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.604952][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.711373][T15101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.726414][T15104] loop1: detected capacity change from 0 to 2048 [ 508.760180][T15109] loop2: detected capacity change from 0 to 2048 [ 508.866354][T14287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.870253][T15109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.893224][T15104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.911685][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.922171][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.932045][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.942527][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.952393][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.962854][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.972699][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.983452][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.984259][T15104] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 508.993285][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.993309][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.993335][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.001633][T15104] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 509.012009][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.012030][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.061561][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.071396][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.081970][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.091818][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.102325][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.112185][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.122649][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.132864][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.143415][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.153474][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.163947][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.173784][T14287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.184253][T14287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.198508][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 509.198526][ T29] audit: type=1400 audit(509.183:16372): avc: denied { mount } for pid=15118 comm="syz.3.11039" name="/" dev="configfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 509.229370][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.276261][ T5353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.305004][T15104] EXT4-fs (loop1): Remounting filesystem read-only [ 509.341711][T14287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.365468][ T29] audit: type=1400 audit(509.253:16373): avc: denied { unmount } for pid=12017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 509.387602][T15128] vhci_hcd: invalid port number 61 [ 509.392790][T15128] vhci_hcd: default hub control req: 000d v0000 i003d l0 [ 509.405733][T15121] loop3: detected capacity change from 0 to 1024 [ 509.406529][T14287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.420827][T14287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.429620][T14287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.435155][T15121] EXT4-fs: Ignoring removed orlov option [ 509.438358][T14287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.453725][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.457544][T15129] loop2: detected capacity change from 0 to 2048 [ 509.519112][T15129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.532450][T15121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.534790][ T29] audit: type=1326 audit(509.513:16374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.592250][ T29] audit: type=1326 audit(509.553:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.614785][ T29] audit: type=1326 audit(509.553:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.637291][ T29] audit: type=1326 audit(509.553:16377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.659839][ T29] audit: type=1326 audit(509.573:16378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.758587][ T29] audit: type=1400 audit(509.703:16379): avc: denied { mounton } for pid=15120 comm="syz.3.11041" path="/114/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 509.768209][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.781675][ T29] audit: type=1326 audit(509.723:16380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.813394][ T29] audit: type=1326 audit(509.723:16381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ee3d0def9 code=0x7ffc0000 [ 509.844526][T15121] lo speed is unknown, defaulting to 1000 [ 509.933332][T15167] loop2: detected capacity change from 0 to 512 [ 509.989948][T12017] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /114/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 510.048890][T15167] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.11045: Parent and EA inode have the same ino 15 [ 510.125488][T15167] EXT4-fs (loop2): Remounting filesystem read-only [ 510.132047][T15167] EXT4-fs (loop2): 1 orphan inode deleted [ 510.186545][T15167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.246851][T15167] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 510.291916][T15167] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.310854][T15198] syz.1.11056[15198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.310968][T15198] syz.1.11056[15198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.525917][T15211] tipc: Failed to remove unknown binding: 66,1,1/0:3353156432/3353156434 [ 510.546223][T15211] tipc: Failed to remove unknown binding: 66,1,1/0:3353156432/3353156434 [ 510.555847][T15172] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.640275][T15214] loop1: detected capacity change from 0 to 1024 [ 510.685149][T15214] EXT4-fs: Ignoring removed orlov option [ 510.765818][ T3270] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.776854][T15214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.839283][T15214] lo speed is unknown, defaulting to 1000 [ 510.865291][ T3270] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.928532][ T3270] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.004070][ T4709] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /453/file0: bad entry in directory: inode out of bounds - offset=76, inode=2320, rec_len=16, size=1024 fake=0 [ 511.035575][ T3270] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.110188][T15219] lo speed is unknown, defaulting to 1000 [ 511.219233][T15283] netem: unknown loss type 5 [ 511.223884][T15283] netem: change failed [ 511.270685][ T3270] bridge_slave_1: left allmulticast mode [ 511.276511][ T3270] bridge_slave_1: left promiscuous mode [ 511.282204][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.304120][ T3270] bridge_slave_0: left allmulticast mode [ 511.309951][ T3270] bridge_slave_0: left promiscuous mode [ 511.315667][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.330136][T15299] loop4: detected capacity change from 0 to 512 [ 511.358092][T15299] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.11070: Parent and EA inode have the same ino 15 [ 511.380215][T15299] EXT4-fs (loop4): Remounting filesystem read-only [ 511.398033][T15299] EXT4-fs (loop4): 1 orphan inode deleted [ 511.428632][T15299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.428772][ T3270] bond1 (unregistering): (slave geneve0): Releasing active interface [ 511.450070][ T3270] geneve0 (unregistering): left promiscuous mode [ 511.465039][T15299] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 511.475445][T15299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.518005][ T3270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.530243][ T3270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.580915][ T3270] bond0 (unregistering): Released all slaves [ 511.608171][ T3270] bond1 (unregistering): Released all slaves [ 511.837719][ T3270] hsr_slave_0: left promiscuous mode [ 511.858760][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.866248][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.873880][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.881416][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.888952][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.896423][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.903853][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.911267][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.918685][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.926226][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.933617][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.941185][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.948680][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.956090][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.963505][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.971101][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.978619][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.986093][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 511.993556][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.000948][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.008402][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.015882][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.023333][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.030739][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.038138][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.045754][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.053226][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.060822][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.068228][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.075642][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.083038][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.090451][T15417] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 512.098010][ T3270] hsr_slave_1: left promiscuous mode [ 512.117318][T15246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.124989][T15417] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 512.145401][ T3270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.152942][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.218027][ T3270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.225610][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.271935][ T3270] veth1_macvtap: left promiscuous mode [ 512.277638][ T3270] veth0_macvtap: left promiscuous mode [ 512.283158][ T3270] veth1_vlan: left promiscuous mode [ 512.288476][ T3270] veth0_vlan: left promiscuous mode [ 512.662447][ T3270] team0 (unregistering): Port device team_slave_1 removed [ 512.707412][ T3270] team0 (unregistering): Port device team_slave_0 removed [ 512.843071][T15219] chnl_net:caif_netlink_parms(): no params data found [ 512.862022][T15418] netem: unknown loss type 5 [ 512.866821][T15418] netem: change failed [ 512.871384][T15427] IPv6: Can't replace route, no match found [ 512.877851][T15435] tipc: Started in network mode [ 512.882830][T15435] tipc: Node identity ac1414aa, cluster identity 4711 [ 512.928136][T15435] tipc: New replicast peer: 100.1.1.1 [ 512.933619][T15435] tipc: Enabled bearer , priority 10 [ 513.059086][T15454] vhci_hcd: invalid port number 97 [ 513.064419][T15454] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 513.142901][T15219] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.150071][T15219] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.157618][T15219] bridge_slave_0: entered allmulticast mode [ 513.164191][T15219] bridge_slave_0: entered promiscuous mode [ 513.171510][T15219] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.178837][T15219] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.186293][T15219] bridge_slave_1: entered allmulticast mode [ 513.192782][T15219] bridge_slave_1: entered promiscuous mode [ 513.214215][T15420] lo speed is unknown, defaulting to 1000 [ 513.268922][T15219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.280361][T15509] lo speed is unknown, defaulting to 1000 [ 513.302501][T15219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.383246][ T3270] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.431594][T15219] team0: Port device team_slave_0 added [ 513.449150][T15219] team0: Port device team_slave_1 added [ 513.481061][ T3270] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.558086][T15219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.565180][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.591430][T15219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.638009][T15631] loop2: detected capacity change from 0 to 512 [ 513.652816][ T3270] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.665608][T15631] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 513.688545][T15219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.695557][T15219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.721485][T15219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.763480][T15631] EXT4-fs (loop2): 1 truncate cleaned up [ 513.777560][ T3270] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.783241][T15631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.807426][T15219] hsr_slave_0: entered promiscuous mode [ 513.813706][T15219] hsr_slave_1: entered promiscuous mode [ 513.839968][T15219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.858132][T15219] Cannot create hsr debugfs directory [ 513.874042][T15420] chnl_net:caif_netlink_parms(): no params data found [ 513.909545][T15631] syz.2.11104[15631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.909751][T15631] syz.2.11104[15631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.954970][T15631] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 514.044769][ T35] tipc: Node number set to 2886997162 [ 514.102280][T10128] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.205767][ T3270] bridge_slave_1: left allmulticast mode [ 514.211521][ T3270] bridge_slave_1: left promiscuous mode [ 514.217625][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.252183][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 514.252197][ T29] audit: type=1400 audit(514.233:16476): avc: denied { ioctl } for pid=15838 comm="syz.2.11109" path="socket:[104386]" dev="sockfs" ino=104386 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.309496][ T3270] bridge_slave_0: left allmulticast mode [ 514.315369][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.355677][ T29] audit: type=1400 audit(514.343:16477): avc: denied { create } for pid=15857 comm="syz.2.11111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 514.426822][ T29] audit: type=1400 audit(514.373:16478): avc: denied { setopt } for pid=15857 comm="syz.2.11111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 514.446440][ T29] audit: type=1400 audit(514.403:16479): avc: denied { create } for pid=15857 comm="syz.2.11111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 514.466789][ T29] audit: type=1400 audit(514.413:16480): avc: denied { write } for pid=15857 comm="syz.2.11111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 514.486893][ T29] audit: type=1400 audit(514.413:16481): avc: denied { nlmsg_read } for pid=15857 comm="syz.2.11111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 514.687766][ T3270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.734924][ T3270] bond0 (unregistering): Released all slaves [ 514.775492][ T29] audit: type=1400 audit(514.763:16482): avc: denied { read write } for pid=15865 comm="syz.0.11114" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 514.798784][ T29] audit: type=1400 audit(514.763:16483): avc: denied { open } for pid=15865 comm="syz.0.11114" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 514.834756][T15420] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.841913][T15420] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.888952][T15420] bridge_slave_0: entered allmulticast mode [ 514.905654][T15420] bridge_slave_0: entered promiscuous mode [ 514.928606][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11112'. [ 514.937920][ T29] audit: type=1400 audit(514.843:16484): avc: denied { create } for pid=15865 comm="syz.0.11114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 514.972230][T15420] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.979425][T15420] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.004954][T15420] bridge_slave_1: entered allmulticast mode [ 515.014942][T15420] bridge_slave_1: entered promiscuous mode [ 515.138406][ T29] audit: type=1400 audit(515.123:16485): avc: denied { create } for pid=15896 comm="syz.0.11116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 515.158426][ T3270] bond_slave_0: left promiscuous mode [ 515.164247][ T3270] batadv_slave_0: left promiscuous mode [ 515.193166][ T3270] hsr_slave_0: left promiscuous mode [ 515.203111][ T3270] hsr_slave_1: left promiscuous mode [ 515.220597][ T3270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.228184][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.267434][ T3270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.274917][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.314299][ T3270] veth1_macvtap: left promiscuous mode [ 515.319875][ T3270] veth0_macvtap: left promiscuous mode [ 515.463767][ T3270] team0 (unregistering): Port device team_slave_1 removed [ 515.487318][ T3270] team0 (unregistering): Port device team_slave_0 removed [ 515.602370][T15420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.613742][T15897] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 515.626797][T15885] lo speed is unknown, defaulting to 1000 [ 515.668170][T15420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.756031][T15420] team0: Port device team_slave_0 added [ 515.838687][T15420] team0: Port device team_slave_1 added [ 515.932792][T16015] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 515.944088][T15420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.951360][T15420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.977348][T15420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.088750][T15420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.095784][T15420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.121963][T15420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.308155][T16050] pim6reg1: entered promiscuous mode [ 516.313543][T16050] pim6reg1: entered allmulticast mode [ 516.349986][T15219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.388799][T15219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.482945][T15420] hsr_slave_0: entered promiscuous mode [ 516.515239][T15420] hsr_slave_1: entered promiscuous mode [ 516.534768][T15420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.542410][T15420] Cannot create hsr debugfs directory [ 516.548863][T15219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.588458][T15219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 516.725138][T16306] ================================================================== [ 516.733330][T16306] BUG: KCSAN: data-race in alloc_pid / copy_process [ 516.739927][T16306] [ 516.742245][T16306] read-write to 0xffffffff8665d8f8 of 4 bytes by task 36 on cpu 0: [ 516.750140][T16306] alloc_pid+0x542/0x6f0 [ 516.754400][T16306] copy_process+0xff8/0x1f90 [ 516.758996][T16306] kernel_clone+0x167/0x5e0 [ 516.763509][T16306] user_mode_thread+0x7d/0xb0 [ 516.768195][T16306] call_usermodehelper_exec_work+0x41/0x150 [ 516.774115][T16306] process_scheduled_works+0x483/0x9a0 [ 516.779591][T16306] worker_thread+0x51d/0x6f0 [ 516.784196][T16306] kthread+0x1d1/0x210 [ 516.788270][T16306] ret_from_fork+0x4b/0x60 [ 516.792708][T16306] ret_from_fork_asm+0x1a/0x30 [ 516.797580][T16306] [ 516.799920][T16306] read to 0xffffffff8665d8f8 of 4 bytes by task 16306 on cpu 1: [ 516.807557][T16306] copy_process+0x15e3/0x1f90 [ 516.812242][T16306] kernel_clone+0x167/0x5e0 [ 516.816751][T16306] user_mode_thread+0x7d/0xb0 [ 516.821530][T16306] call_usermodehelper_exec_work+0x41/0x150 [ 516.827439][T16306] process_scheduled_works+0x483/0x9a0 [ 516.832927][T16306] worker_thread+0x51d/0x6f0 [ 516.837562][T16306] kthread+0x1d1/0x210 [ 516.841637][T16306] ret_from_fork+0x4b/0x60 [ 516.846059][T16306] ret_from_fork_asm+0x1a/0x30 [ 516.850832][T16306] [ 516.853151][T16306] value changed: 0x80000115 -> 0x80000116 [ 516.858864][T16306] [ 516.861184][T16306] Reported by Kernel Concurrency Sanitizer on: [ 516.867329][T16306] CPU: 1 UID: 0 PID: 16306 Comm: kworker/u8:7 Not tainted 6.11.0-syzkaller #0 [ 516.876179][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 516.886239][T16306] Workqueue: events_unbound call_usermodehelper_exec_work [ 516.893371][T16306] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.153659][T16141] lo speed is unknown, defaulting to 1000 [ 517.729043][ T3270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.819103][ T3270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.898031][ T3270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.978542][ T3270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.095630][ T3270] bridge_slave_1: left allmulticast mode [ 518.101309][ T3270] bridge_slave_1: left promiscuous mode [ 518.107272][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.125482][ T3270] bridge_slave_0: left allmulticast mode [ 518.131202][ T3270] bridge_slave_0: left promiscuous mode [ 518.136960][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.497141][ T3270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.530202][ T3270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.559948][ T3270] bond0 (unregistering): Released all slaves [ 518.579047][ T3270] bond0 (unregistering): Released all slaves [ 518.738757][ T3270] hsr_slave_0: left promiscuous mode [ 518.745530][ T3270] hsr_slave_1: left promiscuous mode [ 518.767943][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.775842][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.801148][ T3270] hsr_slave_0: left promiscuous mode [ 518.818319][ T3270] hsr_slave_1: left promiscuous mode [ 518.834889][ T3270] veth1_macvtap: left promiscuous mode [ 518.840569][ T3270] veth0_macvtap: left promiscuous mode [ 518.846134][ T3270] veth1_vlan: left promiscuous mode [ 518.851439][ T3270] veth0_vlan: left promiscuous mode [ 519.052780][ T3270] team0 (unregistering): Port device team_slave_1 removed [ 519.078583][ T3270] team0 (unregistering): Port device team_slave_0 removed [ 520.048775][ T3270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.147966][ T3270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.210754][ T3270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.268279][ T3270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.391930][ T3270] bridge_slave_1: left allmulticast mode [ 520.397772][ T3270] bridge_slave_1: left promiscuous mode [ 520.403539][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.438060][ T3270] bridge_slave_0: left allmulticast mode [ 520.443744][ T3270] bridge_slave_0: left promiscuous mode [ 520.449503][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.475901][ T3270] bridge_slave_1: left allmulticast mode [ 520.481605][ T3270] bridge_slave_1: left promiscuous mode [ 520.487302][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.515411][ T3270] bridge_slave_0: left allmulticast mode [ 520.521093][ T3270] bridge_slave_0: left promiscuous mode [ 520.526910][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.817069][ T3270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.830614][ T3270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.868937][ T3270] bond0 (unregistering): Released all slaves [ 520.889254][ T3270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.915467][ T3270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.946156][ T3270] bond0 (unregistering): Released all slaves [ 520.996661][ T3270] tipc: Disabling bearer [ 521.001901][ T3270] tipc: Left network mode [ 521.079694][ T3270] hsr_slave_0: left promiscuous mode [ 521.085651][ T3270] hsr_slave_1: left promiscuous mode [ 521.104873][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.125180][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.140594][ T3270] hsr_slave_0: left promiscuous mode [ 521.146567][ T3270] hsr_slave_1: left promiscuous mode [ 521.152435][ T3270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.159987][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.188070][ T3270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.195615][ T3270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.221020][ T3270] veth1_macvtap: left promiscuous mode [ 521.226643][ T3270] veth0_macvtap: left promiscuous mode [ 521.232185][ T3270] veth1_vlan: left promiscuous mode [ 521.237531][ T3270] veth0_vlan: left promiscuous mode [ 521.415622][ T3270] team0 (unregistering): Port device team_slave_1 removed [ 521.436392][ T3270] team0 (unregistering): Port device team_slave_0 removed [ 521.597750][ T3270] team0 (unregistering): Port device team_slave_1 removed [ 521.625305][ T3270] team0 (unregistering): Port device team_slave_0 removed