last executing test programs: 1.683695304s ago: executing program 4 (id=5250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x0) 1.644547318s ago: executing program 4 (id=5254): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1800000025000100000000000000000003"], 0x18}], 0x1}, 0x40) 1.482602312s ago: executing program 4 (id=5263): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x488}}, 0x0) 1.40793249s ago: executing program 4 (id=5266): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000f4bd5979a5172e0700000000000000000000000000000000000000000000636c757374657200006db693c555d12b0101000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000004493000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.317284628s ago: executing program 3 (id=5268): r0 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='\"', &(0x7f0000000380)='\x00\x1f\x1c5\x14<\xcd\x89(j\x01\x84\xb7cen\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='#]\x00', &(0x7f0000000bc0)="91d14304", 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) close(r0) 1.288895641s ago: executing program 3 (id=5269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) 1.19270178s ago: executing program 3 (id=5272): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.143893964s ago: executing program 3 (id=5275): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009ce6e7e2cc17bca7"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 620.671072ms ago: executing program 2 (id=5289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000000)="8900002cba1800"/17, 0x11}, {&(0x7f00000005c0)="c2", 0x1}], 0x2) 560.392488ms ago: executing program 0 (id=5293): r0 = socket(0x11, 0x800000003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f0000002800)=[{{&(0x7f0000000080)=@can={0x1d, r3}, 0xc7, &(0x7f0000000640)=[{&(0x7f0000000540)="5472e330ed75561b0cbbe2ad823a", 0xe}], 0x1}}], 0x1, 0x80) 522.076461ms ago: executing program 4 (id=5294): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000850) msgrcv(0x0, &(0x7f0000000a40), 0xde, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000a20900010073797a300000000008000540000000083c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c00008008000340000093"], 0xc0}}, 0x0) 520.035052ms ago: executing program 0 (id=5295): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x14) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x19, 0x0, &(0x7f0000000840)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0) 482.446165ms ago: executing program 4 (id=5296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x42}}]}, 0x3c}}, 0x0) 474.950526ms ago: executing program 1 (id=5297): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x5}, "ed"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x95b2}}]}]}}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 448.992928ms ago: executing program 0 (id=5298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008"], 0x68}}, 0x0) 406.876532ms ago: executing program 1 (id=5299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 358.535687ms ago: executing program 0 (id=5300): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x123a8a1, 0x0) 357.488017ms ago: executing program 2 (id=5301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 275.122304ms ago: executing program 1 (id=5302): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = getuid() setresuid(0xee00, r2, 0x0) 274.457874ms ago: executing program 2 (id=5303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000680)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "3580013350b458c365d0e6761b475b91e91d8d3495eacadd2ee7440229739fe4f3ac5d26"}}}}}}}, 0x0) 273.573615ms ago: executing program 3 (id=5304): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) 262.988606ms ago: executing program 1 (id=5305): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 208.407961ms ago: executing program 2 (id=5306): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 143.565827ms ago: executing program 2 (id=5307): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0e0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000044000000080003"], 0x2c}}, 0x0) r0 = syz_io_uring_setup(0x24f7, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 125.921048ms ago: executing program 3 (id=5308): bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x600, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 92.536461ms ago: executing program 1 (id=5309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000022c0)={@multicast, @link_local, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x14, 0x3a, 0x0, @mcast2, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @local}}}}}}, 0x0) 69.509153ms ago: executing program 0 (id=5310): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 69.043013ms ago: executing program 2 (id=5311): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0x12f440000]}, 0x0, 0x8) r0 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) 43.107036ms ago: executing program 1 (id=5312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 0s ago: executing program 0 (id=5313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7f9f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): y log groups per flexible block group [ 197.352553][T25213] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 197.360794][ T80] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 197.370606][T25213] EXT4-fs (loop1): mount failed [ 197.438951][T25237] loop3: detected capacity change from 0 to 512 [ 197.445738][T25237] EXT4-fs: Ignoring removed oldalloc option [ 197.465556][T25239] loop2: detected capacity change from 0 to 512 [ 197.470564][T25241] loop1: detected capacity change from 0 to 2048 [ 197.480574][T25239] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.496608][T25239] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4492: iget: bad extended attribute block 19 [ 197.509511][T25241] loop1: p1 < > p2 p3 < p5 > p4 [ 197.510956][T25239] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4492: couldn't read orphan inode 15 (err -117) [ 197.514445][T25241] loop1: partition table partially beyond EOD, truncated [ 197.514499][T25241] loop1: p1 start 4278190080 is beyond EOD, truncated [ 197.514528][T25241] loop1: p2 start 16908800 is beyond EOD, [ 197.529385][T25239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.533403][T25241] truncated [ 197.533970][T25241] loop1: p4 start 11326 is beyond EOD, truncated [ 197.568042][T25241] loop1: p5 start 16908800 is beyond EOD, truncated [ 197.585750][T24329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.712505][T25275] loop7: detected capacity change from 0 to 16384 [ 197.726582][T25276] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25276 comm=syz.1.4505 [ 197.778558][T25275] I/O error, dev loop7, sector 4352 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 197.789628][T25275] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 197.796718][T25282] loop2: detected capacity change from 0 to 2048 [ 197.799537][T25275] buffer_io_error: 2 callbacks suppressed [ 197.799554][T25275] Buffer I/O error on dev loop7, logical block 512, lost async page write [ 197.820084][T25275] Buffer I/O error on dev loop7, logical block 513, lost async page write [ 197.828611][T25275] Buffer I/O error on dev loop7, logical block 514, lost async page write [ 197.837191][T25275] Buffer I/O error on dev loop7, logical block 515, lost async page write [ 197.837571][T25282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.845726][T25275] Buffer I/O error on dev loop7, logical block 516, lost async page write [ 197.866457][T25275] Buffer I/O error on dev loop7, logical block 517, lost async page write [ 197.870851][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.874973][T25275] Buffer I/O error on dev loop7, logical block 518, lost async page write [ 197.874999][T25275] Buffer I/O error on dev loop7, logical block 519, lost async page write [ 197.882447][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.890946][T25275] Buffer I/O error on dev loop7, logical block 520, lost async page write [ 197.899447][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.906963][T25275] Buffer I/O error on dev loop7, logical block 521, lost async page write [ 197.915442][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.939067][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.946596][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.953988][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.961456][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.969046][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.976463][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.983852][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.991274][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.998709][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.006139][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.013615][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.021050][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.028582][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.036133][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.043551][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.050969][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.058387][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.065816][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.073220][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.080721][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.088324][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.095823][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.103320][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.110747][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.117720][T25296] syzkaller0: entered promiscuous mode [ 198.118173][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.123594][T25296] syzkaller0: entered allmulticast mode [ 198.130955][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.144010][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.151541][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.159055][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.166511][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.173985][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.181384][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.188870][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.196440][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.203927][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.211325][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.218765][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.226198][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.233565][T18008] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 198.243590][T18008] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 198.290410][T24329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.407656][T25323] syz.4.4517[25323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.407724][T25323] syz.4.4517[25323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.479044][T25332] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.501071][T25331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25331 comm=syz.4.4519 [ 198.547938][T25337] loop1: detected capacity change from 0 to 128 [ 198.561872][T25337] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 198.569804][T25337] FAT-fs (loop1): Filesystem has been set read-only [ 198.576238][T25335] loop3: detected capacity change from 0 to 1024 [ 198.580962][T25340] loop4: detected capacity change from 0 to 256 [ 198.589360][T25337] syz.1.4522: attempt to access beyond end of device [ 198.589360][T25337] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 198.607412][T25340] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.613743][T25337] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 198.626022][T25337] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 198.636677][T25337] syz.1.4522: attempt to access beyond end of device [ 198.636677][T25337] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 198.657536][T25348] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25348 comm=syz.0.4538 [ 198.672827][T25346] loop3: detected capacity change from 0 to 2048 [ 198.675799][T25337] syz.1.4522: attempt to access beyond end of device [ 198.675799][T25337] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 198.704050][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.711524][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.719097][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.726590][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.733975][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.741385][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.748824][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.756423][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.763870][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.771512][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.778924][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.786338][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.793747][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.801160][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.808576][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.816010][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.823417][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.830851][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.838302][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.845729][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.853113][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.860582][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.867987][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.875417][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.882812][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.890232][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.897901][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.905374][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.913081][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.920697][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.928452][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.935930][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.943369][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.950902][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.958390][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.966057][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.973506][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.980995][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.988553][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 198.996116][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 199.003503][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 199.010981][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 199.018501][T18008] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 199.032452][T18008] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 199.036426][T25364] loop4: detected capacity change from 0 to 256 [ 199.079776][T25364] FAT-fs (loop4): Directory bread(block 64) failed [ 199.090548][T25364] FAT-fs (loop4): Directory bread(block 65) failed [ 199.100013][T25364] FAT-fs (loop4): Directory bread(block 66) failed [ 199.115036][T25364] FAT-fs (loop4): Directory bread(block 67) failed [ 199.127938][T25364] FAT-fs (loop4): Directory bread(block 68) failed [ 199.127964][T25364] FAT-fs (loop4): Directory bread(block 69) failed [ 199.128014][T25364] FAT-fs (loop4): Directory bread(block 70) failed [ 199.128033][T25364] FAT-fs (loop4): Directory bread(block 71) failed [ 199.128064][T25364] FAT-fs (loop4): Directory bread(block 72) failed [ 199.128084][T25364] FAT-fs (loop4): Directory bread(block 73) failed [ 199.148317][T25379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4533'. [ 199.188334][T25384] syz.3.4532[25384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.188466][T25384] syz.3.4532[25384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.239592][T25390] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.292332][ T28] kworker/u8:1: attempt to access beyond end of device [ 199.292332][ T28] loop4: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 199.344247][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4545'. [ 199.423421][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 199.423436][ T29] audit: type=1326 audit(1726778453.185:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 199.461040][ T29] audit: type=1326 audit(1726778453.225:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 199.494977][ T29] audit: type=1326 audit(1726778453.255:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 199.518679][ T29] audit: type=1326 audit(1726778453.255:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 199.542278][ T29] audit: type=1326 audit(1726778453.255:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 199.565877][ T29] audit: type=1326 audit(1726778453.255:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 199.589403][ T29] audit: type=1326 audit(1726778453.255:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25421 comm="syz.3.4548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 200.356078][T25430] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.402184][T25436] loop3: detected capacity change from 0 to 128 [ 200.444749][T25444] loop4: detected capacity change from 0 to 512 [ 200.489950][T25444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.510270][T25444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0102] [ 200.522997][T25444] System zones: 1-12 [ 200.535155][ T29] audit: type=1400 audit(1726778454.295:5326): avc: denied { setopt } for pid=25440 comm="syz.2.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.554769][ T29] audit: type=1400 audit(1726778454.295:5327): avc: denied { getopt } for pid=25440 comm="syz.2.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.578213][T25444] EXT4-fs (loop4): 1 truncate cleaned up [ 200.584226][T25444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.630827][ T29] audit: type=1326 audit(1726778454.395:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25462 comm="syz.3.4562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f31abdef9 code=0x7ffc0000 [ 200.687842][T24333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.794333][T25481] atomic_op ffff88811460ed28 conn xmit_atomic 0000000000000000 [ 201.036344][T25528] syz.1.4586[25528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.036407][T25528] syz.1.4586[25528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.058762][T25522] loop3: detected capacity change from 0 to 512 [ 201.127199][T25540] syz.4.4591[25540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.127334][T25540] syz.4.4591[25540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.433739][T25578] siw: device registration error -23 [ 201.563535][T25590] tipc: Started in network mode [ 201.568513][T25590] tipc: Node identity 4, cluster identity 4711 [ 201.574827][T25590] tipc: Node number set to 4 [ 201.761777][T25635] atomic_op ffff88811df30d28 conn xmit_atomic 0000000000000000 [ 201.843826][T25646] devtmpfs: Unknown parameter 'mp' [ 201.891193][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4634'. [ 201.919355][T25651] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=25651 comm=syz.2.4635 [ 202.014163][T25662] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4640'. [ 202.071526][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 202.083576][T25673] loop3: detected capacity change from 0 to 512 [ 202.100739][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 202.185741][T25682] Cannot find add_set index 0 as target [ 202.286324][T25694] loop4: detected capacity change from 0 to 128 [ 202.354500][T25704] netlink: 332 bytes leftover after parsing attributes in process `syz.4.4660'. [ 202.363664][T25704] netlink: 652 bytes leftover after parsing attributes in process `syz.4.4660'. [ 202.417338][T25713] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 202.425159][T25713] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4663'. [ 202.434284][T25713] NCSI netlink: No device for ifindex 131092 [ 202.447718][T25717] loop1: detected capacity change from 0 to 164 [ 202.467992][T25719] loop4: detected capacity change from 0 to 128 [ 202.697122][T25717] syz.1.4664: attempt to access beyond end of device [ 202.697122][T25717] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 202.714389][T25717] syz.1.4664: attempt to access beyond end of device [ 202.714389][T25717] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 202.905695][T25746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25746 comm=syz.4.4675 [ 202.910672][T25751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 202.966181][T25755] program syz.1.4678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.000326][T25758] loop4: detected capacity change from 0 to 128 [ 203.026811][T25758] syz.4.4679: attempt to access beyond end of device [ 203.026811][T25758] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 203.063278][T25766] can0: slcan on pts0. [ 203.078744][T25765] loop1: detected capacity change from 0 to 4096 [ 203.090121][ T50] kworker/u8:3: attempt to access beyond end of device [ 203.090121][ T50] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 203.104388][T25765] EXT4-fs: Ignoring removed nobh option [ 203.110109][T25765] EXT4-fs: Ignoring removed i_version option [ 203.139748][T25764] can0 (unregistered): slcan off pts0. [ 203.146349][T25765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.161700][T25780] serio: Serial port ptm1 [ 203.194947][T21069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.251409][T25794] syz.2.4691[25794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.251837][T25794] syz.2.4691[25794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.323882][T25798] openvswitch: netlink: IPv4 tun info is not correct [ 203.358170][T25806] loop1: detected capacity change from 0 to 512 [ 203.364810][T25806] EXT4-fs: Ignoring removed oldalloc option [ 203.374167][T25806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 203.387077][T25806] EXT4-fs (loop1): 1 truncate cleaned up [ 203.393299][T25806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.486118][T25831] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4702'. [ 203.498868][T21069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.515869][T25836] loop3: detected capacity change from 0 to 2048 [ 203.573509][T25853] netem: incorrect ge model size [ 203.578550][T25853] netem: change failed [ 203.618289][T25862] tipc: Started in network mode [ 203.623277][T25862] tipc: Node identity ac1414aa, cluster identity 4711 [ 203.630688][T25862] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.637879][T25862] tipc: Enabled bearer , priority 10 [ 203.644596][T18009] IPVS: starting estimator thread 0... [ 203.644813][T25858] netlink: 'syz.3.4711': attribute type 15 has an invalid length. [ 203.730817][T25879] loop3: detected capacity change from 0 to 256 [ 203.755139][T25866] IPVS: using max 2304 ests per chain, 115200 per kthread [ 203.765122][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.849960][T25897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4728'. [ 203.864531][T25901] loop1: detected capacity change from 0 to 764 [ 203.878558][T25903] loop2: detected capacity change from 0 to 512 [ 203.888733][T25901] Symlink component flag not implemented [ 203.894632][T25901] Symlink component flag not implemented (101) [ 203.896769][T25903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 203.913464][T25903] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.915129][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.940326][T24329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 203.951976][T25912] loop1: detected capacity change from 0 to 256 [ 203.964410][T25912] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.042934][T25932] sd 0:0:1:0: device reset [ 204.047483][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.185173][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.189929][T25957] loop2: detected capacity change from 0 to 2048 [ 204.209549][T25957] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.230541][T25957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.245607][T25966] coredump: 124(syz.4.4754): written to core: VMAs: 3, size 4096; core: 2771 bytes, pos 8192 [ 204.305124][T25957] loop2: detected capacity change from 2048 to 0 [ 204.311814][T25957] EXT4-fs (loop2): shut down requested (0) [ 204.320583][T25957] syz.2.4751: attempt to access beyond end of device [ 204.320583][T25957] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 204.333897][T25957] buffer_io_error: 6 callbacks suppressed [ 204.333911][T25957] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 204.335125][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.342235][T25957] EXT4-fs (loop2): I/O error while writing superblock [ 204.361857][T25957] VFS:Filesystem freeze failed [ 204.374826][T24329] syz-executor: attempt to access beyond end of device [ 204.374826][T24329] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 204.395809][T24329] syz-executor: attempt to access beyond end of device [ 204.395809][T24329] loop2: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 204.410893][T24329] syz-executor: attempt to access beyond end of device [ 204.410893][T24329] loop2: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 204.424809][T24329] syz-executor: attempt to access beyond end of device [ 204.424809][T24329] loop2: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 204.439682][T24329] syz-executor: attempt to access beyond end of device [ 204.439682][T24329] loop2: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 204.453574][T24329] EXT4-fs error (device loop2): ext4_get_inode_loc:4571: inode #2: block 4: comm syz-executor: unable to read itable block [ 204.466418][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.473657][T24329] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 204.481992][T24329] EXT4-fs (loop2): I/O error while writing superblock [ 204.488853][T24329] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5807: IO failure [ 204.497656][T24329] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 204.506102][T24329] EXT4-fs (loop2): I/O error while writing superblock [ 204.512899][T24329] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 204.524368][T24329] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 204.534195][T24329] EXT4-fs (loop2): I/O error while writing superblock [ 204.541155][ T36] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4556: inode #2: block 4: comm kworker/u8:2: unable to read itable block [ 204.554939][ T36] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 204.563192][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 204.570477][T24329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.580227][T24329] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 204.588508][T24329] EXT4-fs (loop2): I/O error while writing superblock [ 204.597510][T25962] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 204.605900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.756178][ T3139] tipc: Node number set to 2886997162 [ 204.820944][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.859857][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 204.859871][ T29] audit: type=1400 audit(1726778458.625:5468): avc: denied { unmount } for pid=26002 comm="syz.0.4769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 204.893754][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.904217][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.951020][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.000947][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.013968][T26021] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4773'. [ 205.047306][ T29] audit: type=1400 audit(1726778458.815:5469): avc: denied { ioctl } for pid=26044 comm="syz.0.4774" path="socket:[47856]" dev="sockfs" ino=47856 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.072177][ T29] audit: type=1400 audit(1726778458.815:5470): avc: denied { setopt } for pid=26044 comm="syz.0.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.092738][ T29] audit: type=1400 audit(1726778458.815:5471): avc: denied { write } for pid=26044 comm="syz.0.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.170818][ T29] audit: type=1326 audit(1726778458.925:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26080 comm="syz.0.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42bcdef9 code=0x7ffc0000 [ 205.194354][ T29] audit: type=1326 audit(1726778458.925:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26080 comm="syz.0.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42bcdef9 code=0x7ffc0000 [ 205.196049][T26132] loop1: detected capacity change from 0 to 1024 [ 205.217949][ T29] audit: type=1326 audit(1726778458.935:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26080 comm="syz.0.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d42bcdef9 code=0x7ffc0000 [ 205.243354][T26000] chnl_net:caif_netlink_parms(): no params data found [ 205.247746][ T29] audit: type=1326 audit(1726778458.935:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26080 comm="syz.0.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42bcdef9 code=0x7ffc0000 [ 205.278108][ T29] audit: type=1326 audit(1726778458.935:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26080 comm="syz.0.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d42bcdef9 code=0x7ffc0000 [ 205.288903][T26132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.302452][ T29] audit: type=1326 audit(1726778458.985:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26080 comm="syz.0.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d42bcdef9 code=0x7ffc0000 [ 205.341591][T26079] block device autoloading is deprecated and will be removed. [ 205.357735][ T36] bridge_slave_1: left allmulticast mode [ 205.363438][ T36] bridge_slave_1: left promiscuous mode [ 205.365901][T21069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.369320][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.389903][T26179] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1282 sclass=netlink_audit_socket pid=26179 comm=syz.3.4784 [ 205.413433][ T36] bridge_slave_0: left allmulticast mode [ 205.418936][T26181] loop0: detected capacity change from 0 to 2048 [ 205.419213][ T36] bridge_slave_0: left promiscuous mode [ 205.431302][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.440955][T26185] syz.3.4786[26185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.441025][T26185] syz.3.4786[26185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.456173][T26185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4786'. [ 205.488949][T26181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.538803][T23981] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.551479][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.578683][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.593371][ T36] bond0 (unregistering): Released all slaves [ 205.639572][ T36] tipc: Disabling bearer [ 205.644553][ T36] tipc: Left network mode [ 205.649661][T26000] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.656815][T26000] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.664550][T26000] bridge_slave_0: entered allmulticast mode [ 205.671271][T26000] bridge_slave_0: entered promiscuous mode [ 205.678395][T26000] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.685524][T26000] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.692743][T26000] bridge_slave_1: entered allmulticast mode [ 205.699242][T26000] bridge_slave_1: entered promiscuous mode [ 205.738340][T26000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.762396][ T36] hsr_slave_0: left promiscuous mode [ 205.771675][ T36] hsr_slave_1: left promiscuous mode [ 205.780291][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.787801][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.795876][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.803498][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.813922][ T36] veth1_macvtap: left promiscuous mode [ 205.819551][ T36] veth0_macvtap: left promiscuous mode [ 205.825308][ T36] veth1_vlan: left promiscuous mode [ 205.830637][ T36] veth0_vlan: left promiscuous mode [ 205.858101][T26274] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 205.939207][ T36] team0 (unregistering): Port device team_slave_1 removed [ 205.950366][ T36] team0 (unregistering): Port device team_slave_0 removed [ 205.992759][T26000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.020603][T26000] team0: Port device team_slave_0 added [ 206.031171][T26000] team0: Port device team_slave_1 added [ 206.062574][T26000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.069589][T26000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.095622][T26000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.119056][T26000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.126315][T26000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.152557][T26000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.209536][T26000] hsr_slave_0: entered promiscuous mode [ 206.218523][T26000] hsr_slave_1: entered promiscuous mode [ 206.221016][T26393] syz.0.4811[26393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.229836][T26393] syz.0.4811[26393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.241574][T26000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.260766][T26000] Cannot create hsr debugfs directory [ 206.329899][T26431] loop1: detected capacity change from 0 to 128 [ 206.339586][T26431] FAT-fs (loop1): Directory bread(block 162) failed [ 206.350532][T26431] FAT-fs (loop1): Directory bread(block 163) failed [ 206.358725][T26431] FAT-fs (loop1): Directory bread(block 164) failed [ 206.369025][ T36] IPVS: stop unused estimator thread 0... [ 206.384729][T26431] FAT-fs (loop1): Directory bread(block 165) failed [ 206.393730][T26431] FAT-fs (loop1): Directory bread(block 166) failed [ 206.405230][T26431] FAT-fs (loop1): Directory bread(block 167) failed [ 206.420549][T26431] FAT-fs (loop1): Directory bread(block 168) failed [ 206.439467][T26431] FAT-fs (loop1): Directory bread(block 169) failed [ 206.447459][T26431] FAT-fs (loop1): Directory bread(block 162) failed [ 206.452046][T26468] loop3: detected capacity change from 0 to 2048 [ 206.466991][T26431] FAT-fs (loop1): Directory bread(block 163) failed [ 206.522774][T26482] sd 0:0:1:0: device reset [ 206.621527][T26000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.638062][T26000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.657086][T26000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.673879][T26000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.759967][T26000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.789454][T26000] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.811956][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.819128][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.847996][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.855112][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.864886][T26502] loop0: detected capacity change from 0 to 2048 [ 206.916727][T26000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.941010][T26502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.973403][T26343] coredump: 164(syz.0.4806): written to core: VMAs: 29, size 72253440; core: 59933358 bytes, pos 72261632 [ 207.020575][T26000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.055283][T26502] loop0: detected capacity change from 2048 to 0 [ 207.073514][T26522] EXT4-fs error (device loop0): ext4_get_inode_loc:4571: inode #12: block 5: comm syz.0.4830: unable to read itable block [ 207.099772][T26522] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 207.121035][T26527] IPv6: Can't replace route, no match found [ 207.128643][T26522] EXT4-fs (loop0): I/O error while writing superblock [ 207.181068][T26000] veth0_vlan: entered promiscuous mode [ 207.193741][T26000] veth1_vlan: entered promiscuous mode [ 207.215243][T23981] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.228049][T26000] veth0_macvtap: entered promiscuous mode [ 207.238832][T26000] veth1_macvtap: entered promiscuous mode [ 207.246907][T26534] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 207.262125][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.265704][T23981] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 207.272674][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.290722][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.301183][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.311100][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.321585][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.324835][T23981] EXT4-fs (loop0): I/O error while writing superblock [ 207.331495][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.348693][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.358719][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.369217][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.379197][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.389679][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.399803][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.410332][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.420168][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.430637][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.443126][T26000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.449942][T26508] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 207.472293][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.482847][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.492859][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.503349][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.513229][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.523695][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.533580][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.544095][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.554048][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.564661][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.574532][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.584967][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.594834][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.605385][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.615241][T26000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.625665][T26000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.642831][T26000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.658357][T26000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.667183][T26000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.676011][T26000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.684772][T26000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.771339][T26550] loop4: detected capacity change from 0 to 764 [ 207.786873][T26550] Symlink component flag not implemented [ 207.792667][T26550] Symlink component flag not implemented (101) [ 207.846074][T26563] loop3: detected capacity change from 0 to 512 [ 207.872722][T26563] EXT4-fs: Ignoring removed oldalloc option [ 207.894754][T26571] syz.1.4839[26571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.894834][T26571] syz.1.4839[26571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.930045][T26577] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 208.009099][T26605] loop3: detected capacity change from 0 to 764 [ 208.053345][T26605] Symlink component flag not implemented [ 208.066580][T26605] Symlink component flag not implemented (101) [ 208.129147][T26630] loop4: detected capacity change from 0 to 512 [ 208.135491][T26628] loop3: detected capacity change from 0 to 1024 [ 208.148655][T26630] EXT4-fs: Ignoring removed oldalloc option [ 208.157693][T26630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.183199][T26630] EXT4-fs (loop4): 1 truncate cleaned up [ 208.190737][T26630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.296237][ T361] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.312434][T26578] chnl_net:caif_netlink_parms(): no params data found [ 208.341576][T24333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.370283][ T361] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.422987][ T361] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.443084][T26793] loop4: detected capacity change from 0 to 128 [ 208.459442][T26793] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.471817][T26793] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.504563][T26578] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.511784][T26578] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.522701][T26578] bridge_slave_0: entered allmulticast mode [ 208.529702][T26578] bridge_slave_0: entered promiscuous mode [ 208.530290][T24333] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.554966][ T361] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.567866][T26578] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.574941][T26578] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.582288][T26578] bridge_slave_1: entered allmulticast mode [ 208.589029][T26578] bridge_slave_1: entered promiscuous mode [ 208.610358][T26578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.621774][T26578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.645423][T26864] loop4: detected capacity change from 0 to 2048 [ 208.658689][T26578] team0: Port device team_slave_0 added [ 208.664957][T26864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.665459][T26578] team0: Port device team_slave_1 added [ 208.704020][T26903] net_ratelimit: 1 callbacks suppressed [ 208.704090][T26903] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 208.709251][T26578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.726207][T26578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.752314][T26578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.774687][ T361] bridge_slave_1: left allmulticast mode [ 208.780554][ T361] bridge_slave_1: left promiscuous mode [ 208.786372][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.796505][T26864] loop4: detected capacity change from 2048 to 0 [ 208.803286][T26929] bio_check_eod: 24 callbacks suppressed [ 208.803301][T26929] syz.4.4876: attempt to access beyond end of device [ 208.803301][T26929] loop4: rw=524288, sector=24, nr_sectors = 4 limit=0 [ 208.825083][T26929] syz.4.4876: attempt to access beyond end of device [ 208.825083][T26929] loop4: rw=524288, sector=28, nr_sectors = 4 limit=0 [ 208.841449][T26929] syz.4.4876: attempt to access beyond end of device [ 208.841449][T26929] loop4: rw=524288, sector=32, nr_sectors = 4 limit=0 [ 208.848554][ T361] bridge_slave_0: left allmulticast mode [ 208.855408][T26929] syz.4.4876: attempt to access beyond end of device [ 208.855408][T26929] loop4: rw=12288, sector=20, nr_sectors = 4 limit=0 [ 208.860512][ T361] bridge_slave_0: left promiscuous mode [ 208.873800][T26929] EXT4-fs error (device loop4): ext4_get_inode_loc:4571: inode #12: block 5: comm syz.4.4876: unable to read itable block [ 208.879488][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.892039][T26929] syz.4.4876: attempt to access beyond end of device [ 208.892039][T26929] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 208.912949][T26929] EXT4-fs (loop4): I/O error while writing superblock [ 208.940049][T24333] syz-executor: attempt to access beyond end of device [ 208.940049][T24333] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 208.961819][T24333] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.971651][T24333] syz-executor: attempt to access beyond end of device [ 208.971651][T24333] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 208.985698][T24333] EXT4-fs (loop4): I/O error while writing superblock [ 208.992743][T26885] kmmpd-loop4: attempt to access beyond end of device [ 208.992743][T26885] loop4: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 209.057535][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.068031][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.078703][ T361] bond0 (unregistering): Released all slaves [ 209.088167][T26578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.095180][T26578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.121147][T26578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.161492][T26578] hsr_slave_0: entered promiscuous mode [ 209.167994][T26578] hsr_slave_1: entered promiscuous mode [ 209.174155][T26578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.183737][T26578] Cannot create hsr debugfs directory [ 209.189324][ T361] tipc: Left network mode [ 209.251584][ T361] hsr_slave_0: left promiscuous mode [ 209.259519][ T361] hsr_slave_1: left promiscuous mode [ 209.265499][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.272941][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.280624][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.288187][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.297799][ T361] veth1_macvtap: left promiscuous mode [ 209.303324][ T361] veth0_macvtap: left promiscuous mode [ 209.308933][ T361] veth1_vlan: left promiscuous mode [ 209.314223][ T361] veth0_vlan: left promiscuous mode [ 209.438292][ T361] team0 (unregistering): Port device team_slave_1 removed [ 209.449995][ T361] team0 (unregistering): Port device team_slave_0 removed [ 209.634505][T27006] chnl_net:caif_netlink_parms(): no params data found [ 209.673017][T27006] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.680284][T27006] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.687816][T27006] bridge_slave_0: entered allmulticast mode [ 209.694190][T27006] bridge_slave_0: entered promiscuous mode [ 209.702766][T27006] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.709883][T27006] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.718485][T27006] bridge_slave_1: entered allmulticast mode [ 209.724980][T27006] bridge_slave_1: entered promiscuous mode [ 209.744802][T27006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.755985][T27006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.780299][T27006] team0: Port device team_slave_0 added [ 209.787295][T27006] team0: Port device team_slave_1 added [ 209.807365][T27006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.814411][T27006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.840390][T27006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.851877][T27006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.858927][T27006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.884887][T27006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.922784][T27006] hsr_slave_0: entered promiscuous mode [ 209.929407][T27006] hsr_slave_1: entered promiscuous mode [ 209.935745][T27006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.943342][T27006] Cannot create hsr debugfs directory [ 209.960368][T26578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.969208][T26578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.977788][T26578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.993972][T26578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.005754][ T361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.078429][T26578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.092013][ T361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.108102][T26578] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.118179][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.125277][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.136683][ T361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.150763][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.157915][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.219980][ T361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.238083][T26578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.273959][T27392] loop3: detected capacity change from 0 to 2048 [ 210.298160][T27392] loop3: p1 < > p4 [ 210.311058][T27392] loop3: p4 size 8388608 extends beyond EOD, truncated [ 210.328662][ T361] bridge_slave_1: left allmulticast mode [ 210.334340][ T361] bridge_slave_1: left promiscuous mode [ 210.340079][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.351250][ T361] bridge_slave_0: left allmulticast mode [ 210.356975][ T361] bridge_slave_0: left promiscuous mode [ 210.362745][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.387585][T27420] loop3: detected capacity change from 0 to 2048 [ 210.423299][T27428] loop3: detected capacity change from 0 to 2048 [ 210.435156][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 210.435172][ T29] audit: type=1400 audit(1726778464.195:5572): avc: denied { mount } for pid=27427 comm="syz.3.4893" name="/" dev="configfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 210.466380][ T29] audit: type=1400 audit(1726778464.225:5573): avc: denied { mounton } for pid=27427 comm="syz.3.4893" path="/" dev="configfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.488877][ T29] audit: type=1400 audit(1726778464.235:5574): avc: denied { search } for pid=27427 comm="syz.3.4893" name="/" dev="configfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.511356][ T29] audit: type=1400 audit(1726778464.235:5575): avc: denied { unmount } for pid=21075 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 210.536738][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.547659][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.558787][ T361] bond0 (unregistering): Released all slaves [ 210.592327][T26578] veth0_vlan: entered promiscuous mode [ 210.601146][T26578] veth1_vlan: entered promiscuous mode [ 210.618072][T26578] veth0_macvtap: entered promiscuous mode [ 210.626575][ T361] hsr_slave_0: left promiscuous mode [ 210.632236][ T361] hsr_slave_1: left promiscuous mode [ 210.638537][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.646151][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.655715][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.663200][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.673063][ T361] veth1_macvtap: left promiscuous mode [ 210.678645][ T361] veth0_macvtap: left promiscuous mode [ 210.684131][ T361] veth1_vlan: left promiscuous mode [ 210.689402][ T361] veth0_vlan: left promiscuous mode [ 210.777604][ T361] team0 (unregistering): Port device team_slave_1 removed [ 210.791420][ T361] team0 (unregistering): Port device team_slave_0 removed [ 210.844928][T26578] veth1_macvtap: entered promiscuous mode [ 210.856534][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.867072][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.876944][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.887423][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.897277][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.907743][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.917612][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.928148][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.938039][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.948577][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.958429][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.968882][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.978696][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.989113][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.000337][T26578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.008961][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.019498][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.029334][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.039866][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.049725][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.060167][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.070017][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.080505][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.090332][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.100759][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.110599][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.121044][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.130860][T26578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.141288][T26578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.153642][T26578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.164224][T26578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.172994][T26578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.181750][T26578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.190529][T26578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.288812][T27006] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.314723][T27006] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.322648][T27475] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4898'. [ 211.333370][T27006] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.364571][ T29] audit: type=1326 audit(1726778465.125:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27488 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc61def9 code=0x7ffc0000 [ 211.378305][T27006] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.388170][ T29] audit: type=1326 audit(1726778465.125:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27488 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc61def9 code=0x7ffc0000 [ 211.418590][ T29] audit: type=1326 audit(1726778465.125:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27488 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6acc61def9 code=0x7ffc0000 [ 211.442240][ T29] audit: type=1326 audit(1726778465.125:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27488 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc61def9 code=0x7ffc0000 [ 211.465934][ T29] audit: type=1326 audit(1726778465.125:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27488 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6acc61def9 code=0x7ffc0000 [ 211.489599][ T29] audit: type=1326 audit(1726778465.125:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27488 comm="syz.1.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6acc61def9 code=0x7ffc0000 [ 211.549915][T27006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.588046][T27006] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.623498][T27554] loop2: detected capacity change from 0 to 128 [ 211.647349][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.654513][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.680173][T27437] chnl_net:caif_netlink_parms(): no params data found [ 211.688481][T27554] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.702189][T27554] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.705983][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.740778][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.753199][T26000] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.778462][T27599] loop0: detected capacity change from 0 to 1024 [ 211.793035][T27599] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.804414][T27608] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.822182][T27625] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.4911'. [ 211.833192][T27006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.841886][T27599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.843675][T27006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.869479][T27599] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 211.892116][T27627] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 211.903366][T27627] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 211.921622][T26578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.977478][T27437] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.984615][T27437] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.994193][T27437] bridge_slave_0: entered allmulticast mode [ 212.000836][T27437] bridge_slave_0: entered promiscuous mode [ 212.003851][T27681] loop2: detected capacity change from 0 to 512 [ 212.016675][T27006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.026211][T27681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 212.034461][T27681] System zones: 0-2, 18-18, 34-34 [ 212.040784][T27681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4916: bg 0: block 248: padding at end of block bitmap is not set [ 212.045368][T27437] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.055357][T27681] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.4916: Failed to acquire dquot type 1 [ 212.062107][T27437] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.086036][T27681] EXT4-fs (loop2): 1 truncate cleaned up [ 212.090626][T27437] bridge_slave_1: entered allmulticast mode [ 212.092316][T27681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.098383][T27437] bridge_slave_1: entered promiscuous mode [ 212.121212][T27681] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.151774][T27437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.172758][ T361] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.184234][T26000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.198823][T27719] syz.0.4926[27719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.198935][T27719] syz.0.4926[27719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.200197][T27437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.262831][T27437] team0: Port device team_slave_0 added [ 212.269723][T27437] team0: Port device team_slave_1 added [ 212.293631][T27776] loop0: detected capacity change from 0 to 128 [ 212.303245][T27776] syz.0.4920: attempt to access beyond end of device [ 212.303245][T27776] loop0: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 212.318055][ T361] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.330808][T27437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.337933][T27437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.364039][T27437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.375023][ T36] kworker/u8:2: attempt to access beyond end of device [ 212.375023][ T36] loop0: rw=1, sector=153, nr_sectors = 24 limit=128 [ 212.380374][T27437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.395467][T27437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.421453][T27437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.453260][ T361] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.490706][T27437] hsr_slave_0: entered promiscuous mode [ 212.505984][T27437] hsr_slave_1: entered promiscuous mode [ 212.512422][T27437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.520532][T27437] Cannot create hsr debugfs directory [ 212.530146][ T361] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.611100][T27006] veth0_vlan: entered promiscuous mode [ 212.623189][T27006] veth1_vlan: entered promiscuous mode [ 212.648298][ T361] bridge_slave_1: left allmulticast mode [ 212.653969][ T361] bridge_slave_1: left promiscuous mode [ 212.659697][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.667558][ T361] bridge_slave_0: left allmulticast mode [ 212.673269][ T361] bridge_slave_0: left promiscuous mode [ 212.678968][T27900] loop0: detected capacity change from 0 to 512 [ 212.679101][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.704649][T27900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0102] [ 212.712879][T27900] System zones: 1-12 [ 212.717299][T27900] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.4935: corrupted in-inode xattr: invalid ea_ino [ 212.731399][T27900] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4935: couldn't read orphan inode 15 (err -117) [ 212.745246][T27900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.790030][T26578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.808833][T27906] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=27906 comm=syz.0.4928 [ 212.838390][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.849244][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.859648][ T361] bond0 (unregistering): Released all slaves [ 212.874988][T27908] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 212.900616][T27006] veth0_macvtap: entered promiscuous mode [ 212.908604][T27006] veth1_macvtap: entered promiscuous mode [ 212.923881][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.934590][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.944554][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.955208][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.965013][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.975477][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.985302][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.995753][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.005575][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.016099][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.026025][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.036478][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.046300][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.056749][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.066579][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.077118][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.087823][T27006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.097730][ T361] hsr_slave_0: left promiscuous mode [ 213.103556][ T361] hsr_slave_1: left promiscuous mode [ 213.110096][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.117677][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.125520][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.132928][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.142398][ T361] veth1_macvtap: left promiscuous mode [ 213.147940][ T361] veth0_macvtap: left promiscuous mode [ 213.153453][ T361] veth1_vlan: left promiscuous mode [ 213.158717][ T361] veth0_vlan: left promiscuous mode [ 213.252940][ T361] team0 (unregistering): Port device team_slave_1 removed [ 213.263476][ T361] team0 (unregistering): Port device team_slave_0 removed [ 213.306119][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.316759][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.326628][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.337155][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.347059][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.357689][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.367573][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.378026][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.387867][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.398531][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.408507][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.418984][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.428820][T27006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.439343][T27006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.450197][T27006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.471797][T27006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.480736][T27006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.489599][T27006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.498366][T27006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.515833][T27933] : renamed from bond0 (while UP) [ 213.588967][T27959] atomic_op ffff88810c356d28 conn xmit_atomic 0000000000000000 [ 213.594312][T27437] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.611533][T27437] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.623971][T27437] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.643818][T27437] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.678634][T27975] IPv6: Can't replace route, no match found [ 213.700980][T27437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.714254][T27437] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.726010][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.733090][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.756623][T27437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.767185][T27437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.796490][T27978] loop1: detected capacity change from 0 to 128 [ 213.804804][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.811934][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.823942][T27978] syz.1.4937: attempt to access beyond end of device [ 213.823942][T27978] loop1: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 213.916751][ T11] kworker/u8:0: attempt to access beyond end of device [ 213.916751][ T11] loop1: rw=1, sector=153, nr_sectors = 24 limit=128 [ 213.950446][T27437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.998331][T27997] loop0: detected capacity change from 0 to 164 [ 214.016022][T27997] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 214.027012][T27997] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 214.150551][T27437] veth0_vlan: entered promiscuous mode [ 214.171841][T28015] syz.1.4949[28015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.172042][T28015] syz.1.4949[28015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.199003][T27437] veth1_vlan: entered promiscuous mode [ 214.217554][T28019] loop4: detected capacity change from 0 to 2048 [ 214.228236][T27437] veth0_macvtap: entered promiscuous mode [ 214.235705][T27437] veth1_macvtap: entered promiscuous mode [ 214.245457][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.256215][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.266186][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.276786][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.286703][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.297211][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.307135][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.317842][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.327784][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.338306][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.348144][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.358684][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.368525][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.378985][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.388814][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.399275][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.410054][T27437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.419563][T28019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.421258][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.442183][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.452177][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.462671][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.472505][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.482968][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.492827][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.503346][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.513216][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.523803][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.533661][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.544111][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.553945][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.564434][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.574274][T27437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.584780][T27437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.596148][T27437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.604969][T27437] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.613766][T27437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.622613][T27437] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.631344][T27437] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.668688][T27006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.747570][T28046] loop0: detected capacity change from 0 to 512 [ 214.766528][T28046] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4959: bg 0: block 5: invalid block bitmap [ 214.803176][T28046] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 214.829472][T28046] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4959: invalid indirect mapped block 3 (level 2) [ 214.870856][T28046] EXT4-fs (loop0): 1 orphan inode deleted [ 214.876698][T28046] EXT4-fs (loop0): 1 truncate cleaned up [ 214.904673][T28046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.974131][T26578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.212964][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4980'. [ 215.260492][T28085] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 215.405916][T28099] syz.3.4979[28099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.405991][T28099] syz.3.4979[28099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.437172][T28102] loop3: detected capacity change from 0 to 1024 [ 215.461154][T28102] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 215.551100][T28108] loop3: detected capacity change from 0 to 2048 [ 215.833932][T28128] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 215.840390][T28128] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 215.888422][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 215.888441][ T29] audit: type=1400 audit(1726778469.655:5670): avc: denied { ioctl } for pid=28131 comm="syz.1.4993" path="socket:[52504]" dev="sockfs" ino=52504 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.937530][ T29] audit: type=1400 audit(1726778469.705:5671): avc: denied { ioctl } for pid=28133 comm="syz.1.4994" path="socket:[52512]" dev="sockfs" ino=52512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.986123][T28136] tipc: Enabling of bearer rejected, failed to enable media [ 216.010569][ T29] audit: type=1400 audit(1726778469.775:5672): avc: denied { accept } for pid=28137 comm="syz.1.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.175120][ T29] audit: type=1400 audit(1726778469.935:5673): avc: denied { execute_no_trans } for pid=28140 comm="syz.4.4997" path="/15/file1" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.305811][ T29] audit: type=1400 audit(1726778470.075:5674): avc: denied { bind } for pid=28154 comm="syz.4.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.344996][T28160] 9pnet_virtio: no channels available for device 127.0.0.1 [ 216.394395][T28166] serio: Serial port ptm0 [ 216.472275][ T29] audit: type=1400 audit(1726778470.235:5675): avc: denied { name_bind } for pid=28171 comm="syz.0.5005" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 216.579672][T28175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5006'. [ 216.791018][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.967036][T28194] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 217.130468][T28182] chnl_net:caif_netlink_parms(): no params data found [ 217.203803][T28182] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.211120][T28182] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.245103][T28351] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 217.251498][T28351] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 217.261433][T28182] bridge_slave_0: entered allmulticast mode [ 217.268138][T28182] bridge_slave_0: entered promiscuous mode [ 217.281822][T28182] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.288979][T28182] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.311996][T28182] bridge_slave_1: entered allmulticast mode [ 217.333046][T28182] bridge_slave_1: entered promiscuous mode [ 217.347127][T28353] xt_CT: No such helper "pptp" [ 217.355189][ T29] audit: type=1326 audit(1726778471.095:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28349 comm="syz.1.5023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6acc61def9 code=0x0 [ 217.418644][T28182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.432949][T28382] loop4: detected capacity change from 0 to 512 [ 217.444344][T28182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.454787][T28382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.493746][T28382] EXT4-fs (loop4): 1 truncate cleaned up [ 217.500737][T28382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.525233][T28182] team0: Port device team_slave_0 added [ 217.532020][T28182] team0: Port device team_slave_1 added [ 217.549343][T27006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.574840][T28182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.581932][T28182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.607877][T28182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.620650][T28182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.627690][T28182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.653722][T28182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.686080][T28182] hsr_slave_0: entered promiscuous mode [ 217.695509][T28182] hsr_slave_1: entered promiscuous mode [ 217.701463][T28182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.711504][T28182] Cannot create hsr debugfs directory [ 218.189783][T28523] loop1: detected capacity change from 0 to 2048 [ 218.200294][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.240631][T28523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.274408][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.376137][T21069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.389471][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.444904][T28569] netlink: 'syz.4.5025': attribute type 3 has an invalid length. [ 218.453274][ T55] bridge_slave_1: left allmulticast mode [ 218.459045][ T55] bridge_slave_1: left promiscuous mode [ 218.464725][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.489981][ T29] audit: type=1400 audit(1726778472.255:5677): avc: denied { read } for pid=28560 comm="syz.0.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 218.535906][ T55] bridge_slave_0: left allmulticast mode [ 218.541597][ T55] bridge_slave_0: left promiscuous mode [ 218.547280][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.648509][T28586] syz.0.5030[28586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.648668][T28586] syz.0.5030[28586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.688117][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.713221][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.723589][ T55] bond0 (unregistering): Released all slaves [ 218.829231][ T29] audit: type=1326 audit(1726778472.585:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08fa9def9 code=0x7ffc0000 [ 218.852419][ T29] audit: type=1326 audit(1726778472.585:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28592 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb08fa9def9 code=0x7ffc0000 [ 218.880882][T28598] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5034'. [ 218.892270][ T55] hsr_slave_0: left promiscuous mode [ 218.900449][ T55] hsr_slave_1: left promiscuous mode [ 218.906372][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.913894][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.924137][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.931781][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.944951][ T55] veth1_macvtap: left promiscuous mode [ 218.950576][ T55] veth0_macvtap: left promiscuous mode [ 218.956263][ T55] veth1_vlan: left promiscuous mode [ 218.961548][ T55] veth0_vlan: left promiscuous mode [ 219.072255][ T55] team0 (unregistering): Port device team_slave_1 removed [ 219.086346][ T55] team0 (unregistering): Port device team_slave_0 removed [ 219.141241][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5036'. [ 219.220810][T28611] netlink: 'syz.0.5039': attribute type 3 has an invalid length. [ 219.431332][T28182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.441115][T28182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.450279][T28182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.461118][T28182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.504305][T28182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.543577][T28182] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.553489][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.560596][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.579833][T28182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.590265][T28182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.603866][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.611068][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.721351][T28182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.730928][T28643] syz.4.5043[28643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.730992][T28643] syz.4.5043[28643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.787196][T28647] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5044'. [ 219.842628][T28182] veth0_vlan: entered promiscuous mode [ 219.854454][T28182] veth1_vlan: entered promiscuous mode [ 219.896513][T28182] veth0_macvtap: entered promiscuous mode [ 219.904872][T28182] veth1_macvtap: entered promiscuous mode [ 219.919074][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.929684][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.939544][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.950165][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.960223][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.970818][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.980699][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.991155][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.001021][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.011638][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.021511][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.032049][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.041937][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.052450][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.062396][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.072860][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.084243][T28182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.094450][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.105016][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.114849][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.125318][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.135178][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.145714][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.155578][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.166018][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.175858][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.186321][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.196179][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.206711][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.216539][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.227003][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.236845][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.247432][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.258783][T28182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.267785][T28182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.276629][T28182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.285467][T28182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.294244][T28182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.464691][T28682] bridge0: port 3(syz_tun) entered blocking state [ 220.471256][T28682] bridge0: port 3(syz_tun) entered disabled state [ 220.495506][T28682] syz_tun: entered allmulticast mode [ 220.510743][T28682] syz_tun: entered promiscuous mode [ 220.530541][T28682] bridge0: port 3(syz_tun) entered blocking state [ 220.537046][T28682] bridge0: port 3(syz_tun) entered forwarding state [ 220.675649][T28702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'. [ 220.713024][T28706] loop3: detected capacity change from 0 to 128 [ 220.782466][T28717] loop3: detected capacity change from 0 to 512 [ 220.789233][T28717] EXT4-fs: Ignoring removed orlov option [ 220.801436][T28719] bridge0: port 3(syz_tun) entered blocking state [ 220.807939][T28719] bridge0: port 3(syz_tun) entered disabled state [ 220.824749][T28719] syz_tun: entered allmulticast mode [ 220.837698][T28719] syz_tun: entered promiscuous mode [ 220.844014][T28719] bridge0: port 3(syz_tun) entered blocking state [ 220.850513][T28719] bridge0: port 3(syz_tun) entered forwarding state [ 220.903230][T28727] loop1: detected capacity change from 0 to 512 [ 220.920574][T28727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.941977][T28727] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.958805][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 220.958821][ T29] audit: type=1400 audit(1726778474.725:5712): avc: denied { read } for pid=28725 comm="syz.1.5074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.999192][T21069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.085799][ T29] audit: type=1326 audit(1726778474.855:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.109488][T28744] PM: Enabling pm_trace changes system date and time during resume. [ 221.109488][T28744] PM: Correct system time has to be restored manually after resume. [ 221.142619][T28744] PM: Enabling pm_trace changes system date and time during resume. [ 221.142619][T28744] PM: Correct system time has to be restored manually after resume. [ 221.160953][ T29] audit: type=1326 audit(1726778474.895:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.184606][ T29] audit: type=1326 audit(1726778474.895:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.208198][ T29] audit: type=1326 audit(1726778474.895:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.231922][ T29] audit: type=1326 audit(1726778474.895:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.255516][ T29] audit: type=1326 audit(1726778474.895:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.279018][ T29] audit: type=1326 audit(1726778474.895:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.302577][ T29] audit: type=1326 audit(1726778474.895:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28742 comm="syz.3.5080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f586a99def9 code=0x7ffc0000 [ 221.326138][ T29] audit: type=1400 audit(1726778474.895:5721): avc: denied { ioctl } for pid=28742 comm="syz.3.5080" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 221.612672][T28777] bridge0: port 4(vlan2) entered blocking state [ 221.619103][T28777] bridge0: port 4(vlan2) entered disabled state [ 221.636997][T28777] vlan2: entered allmulticast mode [ 221.643354][T28777] vlan2: left allmulticast mode [ 221.647553][T28784] loop4: detected capacity change from 0 to 512 [ 221.678218][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 221.686073][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 221.694226][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.701986][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.709840][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.717930][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.725735][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.733404][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.741172][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.748876][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.756544][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.764195][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.771896][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.779677][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.787441][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.795277][T18015] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 221.804255][T18015] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 221.817879][T28784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.852552][T28784] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.909766][T28784] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.5096: Directory hole found for htree leaf block 0 [ 221.932340][T28805] loop1: detected capacity change from 0 to 128 [ 221.943090][T28807] syz.0.5103: attempt to access beyond end of device [ 221.943090][T28807] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 221.970461][T28784] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 222.032115][T27006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.110556][T18009] IPVS: starting estimator thread 0... [ 222.205252][T28827] IPVS: using max 2064 ests per chain, 103200 per kthread [ 223.945506][T28865] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 224.281495][T28862] chnl_net:caif_netlink_parms(): no params data found [ 224.350529][T28862] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.357760][T28862] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.369356][T28862] bridge_slave_0: entered allmulticast mode [ 224.375974][T28862] bridge_slave_0: entered promiscuous mode [ 224.384841][T28862] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.391961][T28862] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.399235][T28862] bridge_slave_1: entered allmulticast mode [ 224.405737][T28862] bridge_slave_1: entered promiscuous mode [ 224.436865][T29054] netlink: 'syz.4.5130': attribute type 3 has an invalid length. [ 224.454112][T28862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.474326][T28862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.513868][T28862] team0: Port device team_slave_0 added [ 224.526206][T28862] team0: Port device team_slave_1 added [ 224.537788][T29106] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 224.626122][T28862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.633098][T28862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.659066][T28862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.670546][T28862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.677613][T28862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.703638][T28862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.733536][T28862] hsr_slave_0: entered promiscuous mode [ 224.745367][T28862] hsr_slave_1: entered promiscuous mode [ 224.752454][T28862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.760432][T28862] Cannot create hsr debugfs directory [ 224.859719][T28862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.920078][T29234] syz.0.5144[29234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.920282][T29234] syz.0.5144[29234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.954186][T28862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.011036][T28862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.078278][T28862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.098879][T29256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5151'. [ 225.110702][T29256] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.123733][T29256] bridge_slave_0 (unregistering): left allmulticast mode [ 225.130900][T29256] bridge_slave_0 (unregistering): left promiscuous mode [ 225.137891][T29256] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.201402][T28862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.213625][T28862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.249959][T28862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.261404][T29277] syz.1.5152[29277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.261487][T29277] syz.1.5152[29277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.275380][T28862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.308451][T28862] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.315662][T28862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.323113][T28862] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.330209][T28862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.342138][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.350548][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.402050][T28862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.417313][T28862] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.429728][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.436895][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.461997][T28862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.472448][T28862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.491021][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.498115][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.577493][T28862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.720916][T28862] veth0_vlan: entered promiscuous mode [ 225.741913][T28862] veth1_vlan: entered promiscuous mode [ 225.769493][T28862] veth0_macvtap: entered promiscuous mode [ 225.777926][T28862] veth1_macvtap: entered promiscuous mode [ 225.807132][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.817703][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.827573][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.838208][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.848219][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.858862][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.868809][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.879347][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.889184][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.899736][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.909590][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.920021][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.929933][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.940358][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.950221][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.960948][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.970813][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.981245][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.996880][T28862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.005458][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.016000][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.025860][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.036391][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.046323][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.056766][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.066608][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.077067][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.086924][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.097378][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.107220][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.117746][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.127646][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.138260][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.148089][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.158516][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.168354][T28862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.178858][T28862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.198949][T28862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.216277][T28862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.225141][T28862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.233854][T28862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.242587][T28862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.342980][T29303] loop4: detected capacity change from 0 to 512 [ 226.365123][T29301] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 226.371812][T29301] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 226.379750][T29301] vhci_hcd vhci_hcd.0: Device attached [ 226.392664][T29303] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.5157: corrupted in-inode xattr: invalid ea_ino [ 226.413622][T29303] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5157: couldn't read orphan inode 15 (err -117) [ 226.418462][T29294] bridge0: port 1(vlan2) entered blocking state [ 226.431862][T29294] bridge0: port 1(vlan2) entered disabled state [ 226.432281][T29304] vhci_hcd: connection closed [ 226.445339][T29314] loop3: detected capacity change from 0 to 512 [ 226.446336][T29294] vlan2: entered allmulticast mode [ 226.452808][T29303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.473868][ T28] vhci_hcd: stop threads [ 226.478232][ T28] vhci_hcd: release socket [ 226.482767][ T28] vhci_hcd: disconnect device [ 226.498227][T29314] loop3: detected capacity change from 0 to 512 [ 226.515344][T29294] vlan2: left allmulticast mode [ 226.555123][T27006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.713166][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 226.713182][ T29] audit: type=1326 audit(1726778480.475:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29344 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 226.742860][ T29] audit: type=1326 audit(1726778480.475:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29344 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 226.817632][T29350] loop3: detected capacity change from 0 to 512 [ 226.824260][T29350] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.900075][T29358] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 227.069768][T29371] usb usb8: usbfs: process 29371 (syz.3.5176) did not claim interface 0 before use [ 227.158738][T29380] loop2: detected capacity change from 0 to 512 [ 227.166924][T29380] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 227.182772][T29382] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 227.268074][ T29] audit: type=1326 audit(1726778481.015:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.274358][T29392] loop3: detected capacity change from 0 to 128 [ 227.291709][ T29] audit: type=1326 audit(1726778481.025:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.332892][ T29] audit: type=1326 audit(1726778481.095:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.356455][ T29] audit: type=1326 audit(1726778481.095:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.380114][ T29] audit: type=1326 audit(1726778481.095:5768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.403709][ T29] audit: type=1326 audit(1726778481.095:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.427416][ T29] audit: type=1326 audit(1726778481.095:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.450932][ T29] audit: type=1326 audit(1726778481.095:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29389 comm="syz.2.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb506def9 code=0x7ffc0000 [ 227.580558][T29400] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5187'. [ 227.662900][T29412] can0: slcan on ttyS3. [ 227.717123][T29417] tunl0: entered promiscuous mode [ 227.735247][T29412] can0 (unregistered): slcan off ttyS3. [ 227.741221][T29412] Falling back ldisc for ttyS3. [ 227.748840][T29417] netlink: 'syz.2.5192': attribute type 1 has an invalid length. [ 227.756712][T29417] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5192'. [ 227.989405][T29453] loop2: detected capacity change from 0 to 1024 [ 228.013285][T29453] EXT4-fs: Ignoring removed oldalloc option [ 228.052806][T29453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.075688][T29453] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 228.106339][T29464] loop1: detected capacity change from 0 to 128 [ 228.132792][T29453] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 228.205032][T28862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.371548][T29488] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 228.371548][T29488] program syz.4.5217 not setting count and/or reply_len properly [ 228.393334][T29494] loop1: detected capacity change from 0 to 128 [ 228.723953][T29519] hub 9-0:1.0: USB hub found [ 228.738621][T29519] hub 9-0:1.0: 8 ports detected [ 228.746549][T29521] loop2: detected capacity change from 0 to 2048 [ 228.805611][T29521] loop2: p2 < > [ 228.820587][ C1] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 228.897825][T29536] loop2: detected capacity change from 0 to 2048 [ 228.926740][T29540] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.964810][T29536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.028388][T28862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.142702][T29555] bridge0: port 3(vlan2) entered blocking state [ 229.149133][T29555] bridge0: port 3(vlan2) entered disabled state [ 229.209294][T29555] vlan2: entered allmulticast mode [ 229.266417][T29555] vlan2: left allmulticast mode [ 229.417499][T29580] loop3: detected capacity change from 0 to 128 [ 229.488485][T29582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5254'. [ 229.600059][T29606] loop1: detected capacity change from 0 to 1024 [ 229.612161][T29606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.649584][T29606] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 229.695763][T29606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.701279][T29615] loop2: detected capacity change from 0 to 4096 [ 229.715958][T29612] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 229.729296][T29612] vhci_hcd: default hub control req: 8007 v2000 i0000 l0 [ 229.742479][T29615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.790100][T21069] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.842071][T29632] loop3: detected capacity change from 0 to 128 [ 229.850676][T29634] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5271'. [ 229.873690][T29637] loop0: detected capacity change from 0 to 256 [ 229.924593][T28862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.939444][T29647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.970730][T29647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.012396][T29647] loop3: detected capacity change from 0 to 1024 [ 230.027883][T29661] loop0: detected capacity change from 0 to 512 [ 230.041209][T29647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 230.068696][T29661] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.082524][T29647] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 230.103685][T29647] EXT4-fs (loop3): invalid journal inode [ 230.111875][T29647] EXT4-fs (loop3): can't get journal size [ 230.125942][T29647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.141675][T29668] loop2: detected capacity change from 0 to 1024 [ 230.150529][T29668] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 230.150580][T29666] loop1: detected capacity change from 0 to 1024 [ 230.167447][T29666] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 230.176278][T29661] EXT4-fs (loop0): 1 truncate cleaned up [ 230.177113][T29647] 9pnet: p9_errstr2errno: server reported unknown error  $ [ 230.182388][T29661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.200435][T29668] JBD2: no valid journal superblock found [ 230.207948][T29668] EXT4-fs (loop2): Could not load journal inode [ 230.254416][T26578] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.280118][T29668] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 230.536495][T29716] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 230.593619][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 230.626240][T29722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.636953][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 230.656108][T29732] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5299'. [ 230.672855][T29732] gretap0: entered promiscuous mode [ 230.739835][T29722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.777499][T28182] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.814380][T29722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.883896][T29722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.972160][T29722] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.000140][T29722] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.026482][T29722] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.042590][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5312'. [ 231.056986][T29722] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.075650][ T36] ================================================================== [ 231.083760][ T36] BUG: KCSAN: data-race in alloc_pid / copy_process [ 231.090360][ T36] [ 231.092681][ T36] read-write to 0xffffffff8665d8f8 of 4 bytes by task 11 on cpu 1: [ 231.100570][ T36] alloc_pid+0x542/0x6f0 [ 231.104813][ T36] copy_process+0xfdf/0x1f70 [ 231.109405][ T36] kernel_clone+0x167/0x5e0 [ 231.113912][ T36] user_mode_thread+0x7d/0xb0 [ 231.118595][ T36] call_usermodehelper_exec_work+0x41/0x150 [ 231.124504][ T36] process_scheduled_works+0x483/0x9a0 [ 231.129977][ T36] worker_thread+0x51d/0x6f0 [ 231.134566][ T36] kthread+0x1d1/0x210 [ 231.138639][ T36] ret_from_fork+0x4b/0x60 [ 231.143059][ T36] ret_from_fork_asm+0x1a/0x30 [ 231.147844][ T36] [ 231.150167][ T36] read to 0xffffffff8665d8f8 of 4 bytes by task 36 on cpu 0: [ 231.157534][ T36] copy_process+0x15ca/0x1f70 [ 231.162221][ T36] kernel_clone+0x167/0x5e0 [ 231.166730][ T36] user_mode_thread+0x7d/0xb0 [ 231.171419][ T36] call_usermodehelper_exec_work+0x41/0x150 [ 231.177414][ T36] process_scheduled_works+0x483/0x9a0 [ 231.182896][ T36] worker_thread+0x51d/0x6f0 [ 231.187490][ T36] kthread+0x1d1/0x210 [ 231.191564][ T36] ret_from_fork+0x4b/0x60 [ 231.195985][ T36] ret_from_fork_asm+0x1a/0x30 [ 231.200756][ T36] [ 231.203075][ T36] value changed: 0x800000e5 -> 0x800000e6 [ 231.208788][ T36] [ 231.211123][ T36] Reported by Kernel Concurrency Sanitizer on: [ 231.217302][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 231.229124][ T36] Tainted: [W]=WARN [ 231.232930][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 231.242990][ T36] Workqueue: events_unbound call_usermodehelper_exec_work [ 231.250125][ T36] ================================================================== [ 231.271981][T29776] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2