last executing test programs: 5.557135463s ago: executing program 0 (id=6143): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 5.412770086s ago: executing program 3 (id=6145): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) 4.263204586s ago: executing program 0 (id=6149): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x80000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0xfffc}}, 0x26) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x8bc}, {0x0}], 0x2}, 0x0) 3.718859894s ago: executing program 4 (id=6156): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r3}, 0x18) timer_gettime(0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xe4, 0x30, 0xffff, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x3, 0xffffffffffffffff, 0xe0, 0x3}}]}, {0x47}, {0xc}, {0xc}}}]}]}, 0xe4}}, 0x0) 3.574988477s ago: executing program 2 (id=6157): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) 3.327140328s ago: executing program 0 (id=6158): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vcs(0xffffffffffffff9c, 0x0, 0x22200, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0xffffffffffffff74, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40020000) 2.85408961s ago: executing program 4 (id=6161): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) eventfd2(0x46, 0x80001) 2.779067736s ago: executing program 4 (id=6162): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000001c0)={0x2, 0x0, 0x4a, 0x0, 0x1}) 2.221784635s ago: executing program 0 (id=6163): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x2, @val=@tracing}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2.160966931s ago: executing program 3 (id=6164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.090449417s ago: executing program 2 (id=6165): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000540)=""/246, 0x41, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.042719911s ago: executing program 3 (id=6166): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="7f5fa3e1d72fcb912b1349a1efa38642cd0b6fc1769f8a74907dc3430ab9746b3a6b8bad2c34e6a075f385eae90694fae5fb89b741b1127672ebd44c7f38bc53b71d1d39ca5758b78c20b52c4ceaca9b26d96c6f09809e68de648c3640b502627e5e0f034f84ed", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006}]}) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x2, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.750786496s ago: executing program 4 (id=6167): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x80000000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1c, 0x0, 0x80000004, 0xff, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) 1.60599566s ago: executing program 0 (id=6168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 1.566243163s ago: executing program 1 (id=6170): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1.538019965s ago: executing program 1 (id=6171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.122886121s ago: executing program 3 (id=6172): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r4, 0x5405, 0x0) 979.974164ms ago: executing program 2 (id=6173): getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) 920.137239ms ago: executing program 2 (id=6174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x827}]}]}, 0x20}}, 0x0) 875.790673ms ago: executing program 2 (id=6175): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0400ffff07"], 0xd) 848.878566ms ago: executing program 2 (id=6176): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=0x4, 0x71c37bf027493c63) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0xffffffffffffffff, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xfffffffa, 0x3, 0x6, 0x2000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0xb, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@private2, 0x0}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8902, &(0x7f00000002c0)={@mcast1}) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) timer_getoverrun(r4) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1}, 0x6e) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000ac0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="58d174a6e922370f804ce528015b088841dbceb08f96fad1757d7f5ab8710f52a1a1eabfe8b57437b51b58f8a81324bffa9cc038d9"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x2, &(0x7f00000007c0)={0x0, 0x3f, 0x2, @thr={&(0x7f0000000500)="277d19f1bc91db25ee1169a14a0a9d64aff6560f0749967fc13ee394b65e4c9413fcd1ed036b821846177055afda45d30edc662080337a22576aa01bb6e39f60758f", &(0x7f00000006c0)="a31dbe8775e9169c007d1e964f6e6d3f98827243aa5514dc6be4e86e7f319e5b09e0708b099b23cfdf548dfa4704267f2ad800dbc22b9f1f8f0813126174ff307827586ee5e80fe792711b4286435a6a0caa60463da9a7b9d3bc634f156ec5bfd7238d6ded2ed7f8f9305dc382b63fe9d9f4a17011cc2f8eea1ecf50606e709cbaedbdb7fc42e324cb3003cac53757394d1860bf44bf3a69b751fa58da472f52eebc58a98b8296ed7803c0e760b7726c10688b0ea83133fe0a12c31d191f85c6da35748335735ed8d24e590a"}}, &(0x7f0000000580)) ptrace(0x10, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 700.542398ms ago: executing program 0 (id=6177): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 327.237631ms ago: executing program 4 (id=6178): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 306.729173ms ago: executing program 4 (id=6179): getrlimit(0x9, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) 250.536708ms ago: executing program 1 (id=6180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r1}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r5}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r8, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) 167.461185ms ago: executing program 3 (id=6181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 139.759288ms ago: executing program 1 (id=6182): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 62.867834ms ago: executing program 3 (id=6183): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000540)=""/246, 0x41, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x28) 32.029217ms ago: executing program 1 (id=6184): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000001000000000000003552bde5c00400", 0x15}, {&(0x7f0000000340)="174640b60317a5eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) 0s ago: executing program 1 (id=6185): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x2018082, &(0x7f0000000180)={[{@clone_children}, {@clone_children}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) kernel console output (not intermixed with test programs): tivated: batadv_slave_0 [ 479.370137][T20841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.419354][T20841] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.428382][T20841] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.437383][T20841] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.446296][T20841] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.032015][T20974] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5406'. [ 481.492763][T20984] loop4: detected capacity change from 0 to 128 [ 481.511225][T20984] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 481.621679][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 481.621695][ T29] audit: type=1326 audit(1725902605.215:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20985 comm="syz.0.5411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x0 [ 481.907797][T20998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 481.921634][T20998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.930572][T20998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.952813][T20998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.960992][T20998] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.970591][T20998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.636628][T21006] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5418'. [ 482.684428][T21009] tipc: Enabling of bearer rejected, failed to enable media [ 483.490463][T21031] tipc: Enabled bearer , priority 0 [ 483.518999][T21030] tipc: Disabling bearer [ 484.074673][T21038] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 484.102931][ T29] audit: type=1326 audit(1725902607.695:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.128043][ T29] audit: type=1326 audit(1725902607.695:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.151554][ T29] audit: type=1326 audit(1725902607.715:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.175267][ T29] audit: type=1326 audit(1725902607.715:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.198836][ T29] audit: type=1326 audit(1725902607.725:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.223279][ T29] audit: type=1326 audit(1725902607.725:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.246907][ T29] audit: type=1326 audit(1725902607.725:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.270412][ T29] audit: type=1326 audit(1725902607.725:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.293886][ T29] audit: type=1326 audit(1725902607.745:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21040 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2dfdcef9 code=0x7ffc0000 [ 484.414731][T21046] loop4: detected capacity change from 0 to 128 [ 484.424887][T21046] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 484.843129][T21053] tipc: Enabling of bearer rejected, failed to enable media [ 485.583506][T21065] tipc: Enabled bearer , priority 0 [ 485.594107][T21064] tipc: Disabling bearer [ 485.752250][T21071] loop0: detected capacity change from 0 to 1024 [ 485.831134][T21071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.992777][T21089] loop4: detected capacity change from 0 to 128 [ 487.002277][T21089] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 487.098915][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.779579][T21100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.793244][T21101] tipc: Started in network mode [ 487.798280][T21101] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 487.807187][T21101] tipc: Enabling of bearer rejected, failed to enable media [ 487.816894][T21100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.853168][T21103] tipc: Enabled bearer , priority 0 [ 487.861828][T21102] tipc: Disabling bearer [ 488.859428][ T6859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.977854][ T6859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.053455][ T6859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.117318][ T6859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.123924][T21138] loop0: detected capacity change from 0 to 1024 [ 489.145825][T21138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.303574][T21121] chnl_net:caif_netlink_parms(): no params data found [ 489.315039][ T6859] bridge_slave_1: left allmulticast mode [ 489.320743][ T6859] bridge_slave_1: left promiscuous mode [ 489.326484][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.359348][ T6859] bridge_slave_0: left allmulticast mode [ 489.365044][ T6859] bridge_slave_0: left promiscuous mode [ 489.370832][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.607520][ T6859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.632106][ T6859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.658318][ T6859] bond0 (unregistering): Released all slaves [ 489.720148][ T6859] tipc: Disabling bearer [ 489.725158][ T6859] tipc: Left network mode [ 489.761433][T21121] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.768557][T21121] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.818440][T21121] bridge_slave_0: entered allmulticast mode [ 489.840042][T21121] bridge_slave_0: entered promiscuous mode [ 489.871136][ T6859] hsr_slave_0: left promiscuous mode [ 489.882576][ T6859] hsr_slave_1: left promiscuous mode [ 489.896715][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.904284][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.928282][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.935749][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.972535][ T6859] veth1_macvtap: left promiscuous mode [ 489.978151][ T6859] veth0_macvtap: left promiscuous mode [ 489.983772][ T6859] veth1_vlan: left promiscuous mode [ 489.989034][ T6859] veth0_vlan: left promiscuous mode [ 490.284293][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.294254][ T6859] team0 (unregistering): Port device team_slave_1 removed [ 490.323784][ T6859] team0 (unregistering): Port device team_slave_0 removed [ 490.383517][T21121] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.390649][T21121] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.402417][T21121] bridge_slave_1: entered allmulticast mode [ 490.410861][T21121] bridge_slave_1: entered promiscuous mode [ 490.417897][T21173] tipc: Started in network mode [ 490.422802][T21173] tipc: Node identity 0ec410103028, cluster identity 4711 [ 490.430016][T21173] tipc: Enabled bearer , priority 0 [ 490.460026][T21193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.477411][T21166] tipc: Disabling bearer [ 490.494761][T21193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.510844][T21121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.521934][T21121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.554868][T21121] team0: Port device team_slave_0 added [ 490.572149][T21121] team0: Port device team_slave_1 added [ 490.634248][T21121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.641262][T21121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.667432][T21121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.693511][T21121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.700653][T21121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.726608][T21121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.784793][T21121] hsr_slave_0: entered promiscuous mode [ 490.795243][T21121] hsr_slave_1: entered promiscuous mode [ 490.968063][ T6859] gretap0: left allmulticast mode [ 490.973150][ T6859] gretap0: left promiscuous mode [ 490.978264][ T6859] bridge0: port 3(gretap0) entered disabled state [ 490.987775][ T6859] bridge_slave_1: left allmulticast mode [ 490.993503][ T6859] bridge_slave_1: left promiscuous mode [ 490.999350][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.010857][ T6859] bridge_slave_0: left allmulticast mode [ 491.016551][ T6859] bridge_slave_0: left promiscuous mode [ 491.022374][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.024242][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 491.024259][ T29] audit: type=1400 audit(1725902614.615:1260): avc: denied { write } for pid=2943 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.057218][ T29] audit: type=1400 audit(1725902614.615:1261): avc: denied { remove_name } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.079988][ T29] audit: type=1400 audit(1725902614.615:1262): avc: denied { rename } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.102337][ T29] audit: type=1400 audit(1725902614.615:1263): avc: denied { add_name } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.125060][ T29] audit: type=1400 audit(1725902614.615:1264): avc: denied { unlink } for pid=2943 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.147606][ T29] audit: type=1400 audit(1725902614.615:1265): avc: denied { create } for pid=2943 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 491.391764][ T6859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.523423][ T6859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.555953][ T6859] bond0 (unregistering): Released all slaves [ 491.622818][ T6859] tipc: Disabling bearer [ 491.627939][ T6859] tipc: Left network mode [ 491.719427][ T6859] hsr_slave_0: left promiscuous mode [ 491.742189][ T6859] hsr_slave_1: left promiscuous mode [ 491.761743][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.769243][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.794903][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.802483][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.849911][ T6859] veth1_macvtap: left promiscuous mode [ 491.855446][ T6859] veth0_macvtap: left promiscuous mode [ 491.861068][ T6859] veth1_vlan: left promiscuous mode [ 491.866422][ T6859] veth0_vlan: left promiscuous mode [ 492.162459][ T6859] team0 (unregistering): Port device team_slave_1 removed [ 492.207702][ T6859] team0 (unregistering): Port device team_slave_0 removed [ 492.354433][T21263] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 492.374221][T21264] netlink: 'syz.3.5473': attribute type 27 has an invalid length. [ 492.521539][T21264] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.528940][T21264] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.683557][T21264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.717132][T21264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.738118][T21271] loop0: detected capacity change from 0 to 1024 [ 492.781473][T21271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.795897][T21264] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.804863][T21264] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.813776][T21264] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.822752][T21264] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.957923][T21265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.978648][T21265] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.008208][T21265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.253187][T21284] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5476'. [ 493.270088][T21121] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 493.298725][T21121] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 493.323218][T21121] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 493.337504][T21121] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 493.371181][T21291] tipc: Enabled bearer , priority 0 [ 493.409814][T21121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.430793][T21291] ªªªªªª: renamed from syzkaller0 [ 493.438372][T21291] tipc: Disabling bearer [ 493.461902][T21121] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.477741][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.484920][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.526672][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.533766][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.593643][T21121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 493.604140][T21121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.668633][T21304] loop3: detected capacity change from 0 to 128 [ 493.698461][T21304] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 493.868676][T21121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.031759][T21121] veth0_vlan: entered promiscuous mode [ 494.040516][T21121] veth1_vlan: entered promiscuous mode [ 494.060372][T21121] veth0_macvtap: entered promiscuous mode [ 494.073662][T21121] veth1_macvtap: entered promiscuous mode [ 494.103579][T21121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.114111][T21121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.124071][T21121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.134563][T21121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.149501][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.176959][T21121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.208837][T21121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.219452][T21121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.229345][T21121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.239803][T21121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.268017][T21121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.288613][T21121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.297395][T21121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.306129][T21121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.314947][T21121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.513168][T21359] loop4: detected capacity change from 0 to 1024 [ 494.532019][T21363] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 494.569814][T21359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.830013][T21420] netlink: 87 bytes leftover after parsing attributes in process `syz.0.5486'. [ 495.907866][T21430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.956769][T21430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.087292][T21435] tipc: Started in network mode [ 496.092311][T21435] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 496.101587][T21435] tipc: Enabled bearer , priority 10 [ 496.527826][T20544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.653482][T21472] loop0: detected capacity change from 0 to 128 [ 496.674698][T21472] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 496.724057][T21477] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 497.217267][ T4434] tipc: Node number set to 4269801642 [ 497.504514][T21572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 497.562383][T21572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.839259][T21581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.850032][T21581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.099133][T21586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.118078][T21586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.184370][T21589] loop2: detected capacity change from 0 to 1024 [ 498.199656][T21589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.142753][T21600] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 499.643700][T21121] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.683886][T21631] loop2: detected capacity change from 0 to 128 [ 499.692409][T21631] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 500.239835][T21708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5513'. [ 500.302586][T21708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5513'. [ 501.472603][T21733] loop0: detected capacity change from 0 to 1024 [ 501.517678][T21733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.681411][T21744] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5521'. [ 502.234672][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.295372][T21758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.317604][T21758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.944316][T21814] loop3: detected capacity change from 0 to 1024 [ 502.965229][T21814] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 502.976277][T21814] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 503.006441][T21814] EXT4-fs (loop3): invalid journal inode [ 503.026440][T21814] EXT4-fs (loop3): can't get journal size [ 503.033665][T21814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.609286][T21864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.618885][T21864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.679824][T21864] loop0: detected capacity change from 0 to 2048 [ 503.725529][T21864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.805273][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.935599][T21883] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 503.953717][T21885] loop3: detected capacity change from 0 to 1024 [ 504.150667][T21885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.893886][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.399141][T21998] tipc: Enabled bearer , priority 0 [ 506.410147][T21997] tipc: Disabling bearer [ 506.488615][T21874] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 506.513400][T21874] EXT4-fs (loop0): Remounting filesystem read-only [ 506.560811][T22006] loop3: detected capacity change from 0 to 1024 [ 506.577673][T22006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.244475][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.364652][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.580778][T22029] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 507.892268][T22038] tipc: Enabled bearer , priority 0 [ 507.909421][T22037] tipc: Disabling bearer [ 507.942924][T22042] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5561'. [ 507.970300][T22044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5560'. [ 507.986355][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.996282][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.002855][T22044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5560'. [ 508.014823][T22048] loop4: detected capacity change from 0 to 1024 [ 508.017818][T22046] loop0: detected capacity change from 0 to 2048 [ 508.038512][T22048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.054757][T22046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.458409][T20544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.780414][T22086] tipc: Enabled bearer , priority 0 [ 509.855965][T22084] tipc: Disabling bearer [ 510.439255][T22093] loop3: detected capacity change from 0 to 1024 [ 510.461034][T22093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.804856][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.937945][T22108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5578'. [ 510.947423][T22108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5578'. [ 511.741226][T22123] loop2: detected capacity change from 0 to 128 [ 511.828160][T22123] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 511.973808][T22124] tipc: Enabled bearer , priority 0 [ 512.031657][T22121] tipc: Disabling bearer [ 512.127677][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.176061][T22132] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 512.226754][T22135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.235903][T22135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.668415][T22143] loop2: detected capacity change from 0 to 1024 [ 512.706111][T22143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.655184][T22161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5595'. [ 513.675799][T22161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5595'. [ 513.790090][T22165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.807646][T22165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.830607][T22167] tipc: Enabled bearer , priority 0 [ 513.830747][T22165] loop3: detected capacity change from 0 to 2048 [ 513.849270][T22166] tipc: Disabling bearer [ 513.860257][T22165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.931594][T22171] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 513.949704][T21121] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.018605][T22176] loop0: detected capacity change from 0 to 128 [ 514.028261][T22176] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 514.102306][ T29] audit: type=1400 audit(1725902637.695:1266): avc: denied { write } for pid=22164 comm="syz.3.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 514.148532][ T29] audit: type=1400 audit(1725902637.715:1267): avc: denied { nlmsg_read } for pid=22164 comm="syz.3.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 514.916927][T22193] loop4: detected capacity change from 0 to 1024 [ 514.931580][T22193] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 514.942488][T22193] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 514.952884][T22193] EXT4-fs (loop4): invalid journal inode [ 514.958793][T22193] EXT4-fs (loop4): can't get journal size [ 514.965823][T22193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.786168][T20544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.834194][T22207] tipc: Enabled bearer , priority 0 [ 515.844423][T22207] ªªªªªª: renamed from syzkaller0 [ 515.858563][T22207] tipc: Disabling bearer [ 515.969437][T22218] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 516.057635][T22227] loop4: detected capacity change from 0 to 512 [ 516.113812][T22227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.139374][T22227] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.528116][T22251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5613'. [ 516.538718][T22251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5613'. [ 516.857261][T22146] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 516.940760][T20544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.178903][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.932231][T22381] syz.0.5619[22381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.932369][T22381] syz.0.5619[22381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.335931][T22387] tipc: Enabling of bearer rejected, failed to enable media [ 518.392208][T22391] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 518.644847][T22404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.655721][T22404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.676281][T22404] loop0: detected capacity change from 0 to 2048 [ 518.702859][T22404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.828341][T22409] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5627'. [ 518.957202][T22407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 518.996688][T22407] EXT4-fs (loop0): Remounting filesystem read-only [ 519.442734][T22421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.457077][T22421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.884754][T22424] tipc: Enabling of bearer rejected, failed to enable media [ 519.933890][T22428] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 520.493579][T22440] syz.1.5636[22440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.493655][T22440] syz.1.5636[22440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.936347][ T29] audit: type=1326 audit(1725902644.525:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 520.972906][ T29] audit: type=1326 audit(1725902644.525:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 520.996979][ T29] audit: type=1326 audit(1725902644.575:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.020815][ T29] audit: type=1326 audit(1725902644.575:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.044509][ T29] audit: type=1326 audit(1725902644.575:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.068205][ T29] audit: type=1326 audit(1725902644.575:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.092241][ T29] audit: type=1326 audit(1725902644.575:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.115932][ T29] audit: type=1326 audit(1725902644.575:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.139504][ T29] audit: type=1326 audit(1725902644.595:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.162997][ T29] audit: type=1326 audit(1725902644.645:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22444 comm="syz.3.5638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 521.722651][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.765993][T22463] tipc: Enabling of bearer rejected, failed to enable media [ 521.829934][T22470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.839918][T22470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.059500][T22487] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 523.242366][T22492] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 523.662896][T22500] tipc: Enabling of bearer rejected, failed to enable media [ 523.747545][T22502] tipc: Enabling of bearer rejected, failed to enable media [ 524.140327][T22512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5659'. [ 524.150583][T22512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5659'. [ 524.294049][T22514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.303005][T22514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.990065][T22529] tipc: Enabling of bearer rejected, failed to enable media [ 525.170997][ T6894] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.192500][T22531] chnl_net:caif_netlink_parms(): no params data found [ 525.226488][ T6894] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.288460][T22531] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.295628][T22531] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.303561][T22531] bridge_slave_0: entered allmulticast mode [ 525.310102][T22531] bridge_slave_0: entered promiscuous mode [ 525.319858][ T6894] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.332476][T22531] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.339576][T22531] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.349204][T22531] bridge_slave_1: entered allmulticast mode [ 525.355713][T22531] bridge_slave_1: entered promiscuous mode [ 525.381582][ T6894] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.394261][T22531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.405523][T22531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.426375][T22531] team0: Port device team_slave_0 added [ 525.434597][T22531] team0: Port device team_slave_1 added [ 525.462435][T22531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.469436][T22531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.495595][T22531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.530873][ T6894] bridge_slave_1: left allmulticast mode [ 525.536610][ T6894] bridge_slave_1: left promiscuous mode [ 525.542480][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.579000][ T6894] bridge_slave_0: left allmulticast mode [ 525.584725][ T6894] bridge_slave_0: left promiscuous mode [ 525.590417][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.703037][ T6894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.724088][ T6894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.749154][ T6894] bond0 (unregistering): Released all slaves [ 525.767865][T22531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.774846][T22531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.800854][T22531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.859064][T22560] tipc: Enabling of bearer rejected, failed to enable media [ 525.879051][ T6894] tipc: Disabling bearer [ 525.886230][ T6894] tipc: Left network mode [ 525.909397][T22531] hsr_slave_0: entered promiscuous mode [ 525.925850][T22531] hsr_slave_1: entered promiscuous mode [ 525.935754][T22531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.958782][T22531] Cannot create hsr debugfs directory [ 525.968957][ T6894] hsr_slave_0: left promiscuous mode [ 525.975004][ T6894] hsr_slave_1: left promiscuous mode [ 525.992911][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.000426][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.024400][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.032052][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.083119][ T6894] veth1_macvtap: left promiscuous mode [ 526.088869][ T6894] veth0_macvtap: left promiscuous mode [ 526.094399][ T6894] veth1_vlan: left promiscuous mode [ 526.099723][ T6894] veth0_vlan: left promiscuous mode [ 526.358067][ T6894] team0 (unregistering): Port device team_slave_1 removed [ 526.383025][ T6894] team0 (unregistering): Port device team_slave_0 removed [ 526.589889][T22591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5676'. [ 526.599532][T22591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5676'. [ 527.038239][T22602] tipc: Enabling of bearer rejected, failed to enable media [ 527.103769][T22531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 527.124853][T22531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 527.134307][T22531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 527.144109][T22531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.189948][T22531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.204420][T22531] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.214194][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.221332][ T6894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.234595][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.241925][ T6878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.439577][T22531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.608632][T22531] veth0_vlan: entered promiscuous mode [ 527.622684][T22531] veth1_vlan: entered promiscuous mode [ 527.672070][T22531] veth0_macvtap: entered promiscuous mode [ 527.700119][T22531] veth1_macvtap: entered promiscuous mode [ 527.748844][T22531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.759421][T22531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.769373][T22531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.779822][T22531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.795633][T22531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.811019][T22531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.821530][T22531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.831442][T22531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.841999][T22531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.855725][T22531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.865869][T22531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.874731][T22531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.883680][T22531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.892514][T22531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.940148][T22660] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 528.001376][T22664] loop2: detected capacity change from 0 to 1024 [ 528.011874][T22664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.160001][T22531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.532339][T22682] tipc: Enabled bearer , priority 0 [ 528.541074][T22681] tipc: Disabling bearer [ 528.993878][T22694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.120107][T22694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.142511][T22694] loop0: detected capacity change from 0 to 512 [ 529.170964][T22694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.187036][T22694] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.194006][T22698] loop2: detected capacity change from 0 to 1024 [ 529.212480][T22698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.279644][T22701] syz.3.5692[22701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.279716][T22701] syz.3.5692[22701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.336477][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 529.336494][ T29] audit: type=1400 audit(1725902652.925:1294): avc: denied { write } for pid=22693 comm="syz.0.5693" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.409053][ T29] audit: type=1400 audit(1725902652.965:1295): avc: denied { open } for pid=22693 comm="syz.0.5693" path="/446/bus/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.447406][T22531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.619197][T22702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.658838][T22702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.426724][T22716] tipc: Started in network mode [ 530.431653][T22716] tipc: Node identity 4af8d816d7e8, cluster identity 4711 [ 530.438894][T22716] tipc: Enabled bearer , priority 0 [ 530.449331][T22715] tipc: Disabling bearer [ 530.961279][ T29] audit: type=1326 audit(1725902654.555:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22725 comm="syz.1.5702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07ee64cef9 code=0x0 [ 531.447731][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.474100][T22737] loop0: detected capacity change from 0 to 1024 [ 531.483386][T22737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.622058][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.845849][T22753] tipc: Enabled bearer , priority 0 [ 531.855629][T22751] tipc: Disabling bearer [ 532.043290][ T29] audit: type=1400 audit(1725902655.635:1297): avc: denied { read } for pid=22762 comm="syz.2.5714" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 532.066774][ T29] audit: type=1400 audit(1725902655.635:1298): avc: denied { open } for pid=22762 comm="syz.2.5714" path="/dev/input/event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 532.324181][T22768] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5715'. [ 532.352254][ T29] audit: type=1400 audit(1725902655.945:1299): avc: denied { mount } for pid=22769 comm="syz.3.5716" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 532.647201][T22778] loop0: detected capacity change from 0 to 128 [ 532.655668][T22778] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 532.670575][ T29] audit: type=1326 audit(1725902656.265:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.5720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x0 [ 533.207276][T22796] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5726'. [ 533.320332][ T29] audit: type=1326 audit(1725902656.915:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22802 comm="syz.2.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 533.345505][ T29] audit: type=1326 audit(1725902656.915:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22802 comm="syz.2.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 533.369809][ T29] audit: type=1326 audit(1725902656.945:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22802 comm="syz.2.5729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 534.481797][T22828] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5738'. [ 534.509766][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 534.509839][ T29] audit: type=1400 audit(1725902658.105:1306): avc: denied { write } for pid=22831 comm="syz.3.5740" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 534.654487][ T29] audit: type=1326 audit(1725902658.245:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22835 comm="syz.0.5741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x0 [ 536.230063][T22864] loop3: detected capacity change from 0 to 1024 [ 536.242757][T22864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.816577][T22890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.830474][T22890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.889873][ T6859] bridge_slave_1: left allmulticast mode [ 536.896021][ T6859] bridge_slave_1: left promiscuous mode [ 536.902256][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.949408][ T6859] bridge_slave_0: left allmulticast mode [ 536.955203][ T6859] bridge_slave_0: left promiscuous mode [ 536.960884][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.110363][ T6859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.138541][ T6859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.160567][ T6859] bond0 (unregistering): Released all slaves [ 537.218227][T22870] chnl_net:caif_netlink_parms(): no params data found [ 537.237906][ T6859] tipc: Left network mode [ 537.289623][ T6859] hsr_slave_0: left promiscuous mode [ 537.362270][ T6859] hsr_slave_1: left promiscuous mode [ 537.416694][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.608410][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.746998][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.880685][ T6859] team0 (unregistering): Port device team_slave_1 removed [ 537.896864][ T6859] team0 (unregistering): Port device team_slave_0 removed [ 537.975514][T22870] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.982751][T22870] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.993763][T22870] bridge_slave_0: entered allmulticast mode [ 538.000485][T22870] bridge_slave_0: entered promiscuous mode [ 538.019527][T22870] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.026630][T22870] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.042899][T22870] bridge_slave_1: entered allmulticast mode [ 538.056950][T22870] bridge_slave_1: entered promiscuous mode [ 538.090780][T22870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.115958][T22870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.288819][T22870] team0: Port device team_slave_0 added [ 538.308513][T22870] team0: Port device team_slave_1 added [ 538.336443][T22968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.344164][T22870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.351823][T22870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.377788][T22870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.389802][T22968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.504024][T22870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.511068][T22870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.537178][T22870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.783104][T22870] hsr_slave_0: entered promiscuous mode [ 538.789408][T22870] hsr_slave_1: entered promiscuous mode [ 539.455890][T23002] loop2: detected capacity change from 0 to 1024 [ 539.475633][T23002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.507000][T22870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 539.516168][T22870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.525293][T22870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.534264][T22870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.575374][T22870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.588084][T22870] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.614186][T22870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 539.624911][T22870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.642913][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.650093][ T6894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.695772][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.702977][ T6894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.948757][T22870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.255622][T22870] veth0_vlan: entered promiscuous mode [ 540.274634][T22870] veth1_vlan: entered promiscuous mode [ 540.311754][T22870] veth0_macvtap: entered promiscuous mode [ 540.336737][T22870] veth1_macvtap: entered promiscuous mode [ 540.362350][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.373039][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.382891][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.393349][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.403227][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.413715][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.447090][T22870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.475148][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.485730][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.495749][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.506296][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.516150][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.526671][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.663036][T22870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.686969][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5779'. [ 540.707242][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5779'. [ 540.718026][T22870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.726942][T22870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.735842][T22870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.744755][T22870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.967240][T22531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.432274][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5786'. [ 541.454269][T23138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'. [ 542.041076][T23234] loop4: detected capacity change from 0 to 512 [ 543.104116][ T29] audit: type=1326 audit(1725902666.415:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.127930][ T29] audit: type=1326 audit(1725902666.415:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.151467][ T29] audit: type=1326 audit(1725902666.415:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.175244][ T29] audit: type=1326 audit(1725902666.415:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.198912][ T29] audit: type=1326 audit(1725902666.415:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.222724][ T29] audit: type=1326 audit(1725902666.415:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.246373][ T29] audit: type=1326 audit(1725902666.415:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.270004][ T29] audit: type=1326 audit(1725902666.415:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.293470][ T29] audit: type=1326 audit(1725902666.415:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.316891][ T29] audit: type=1326 audit(1725902666.415:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23267 comm="syz.3.5792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 543.367622][T23293] syz.0.5795[23293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.367722][T23293] syz.0.5795[23293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.443942][T23303] loop4: detected capacity change from 0 to 128 [ 543.489509][T23304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5797'. [ 543.498835][T23304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5797'. [ 543.517455][T23303] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 543.530213][T23306] loop3: detected capacity change from 0 to 1024 [ 543.557770][T23306] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 543.568771][T23306] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 543.607536][T23306] EXT4-fs (loop3): invalid journal inode [ 543.620991][T23306] EXT4-fs (loop3): can't get journal size [ 543.637427][T23306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.461810][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.228803][T23421] loop2: detected capacity change from 0 to 512 [ 545.280993][T23415] syzkaller0: entered promiscuous mode [ 545.286516][T23415] syzkaller0: entered allmulticast mode [ 545.378979][T23431] tracefs: Bad value for 'gid' [ 545.383860][T23431] tracefs: Bad value for 'gid' [ 545.420859][T23431] loop0: detected capacity change from 0 to 1 [ 545.440383][T23431] Buffer I/O error on dev loop0, logical block 0, async page read [ 545.458494][T23431] Buffer I/O error on dev loop0, logical block 0, async page read [ 545.466335][T23431] loop0: unable to read partition table [ 545.494011][T23431] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡p¨â·û [ 545.494011][T23431] ) failed (rc=-5) [ 545.799402][T23457] loop3: detected capacity change from 0 to 512 [ 545.949505][T23457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.962082][T23457] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.471571][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.596205][T23471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.623616][T23471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.722347][T23482] ªªªªªª: renamed from vlan0 (while UP) [ 546.890368][T23493] loop4: detected capacity change from 0 to 1024 [ 546.905076][T23493] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 546.916049][T23493] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 546.944484][T23493] EXT4-fs (loop4): invalid journal inode [ 546.955406][T23493] EXT4-fs (loop4): can't get journal size [ 546.964772][T23493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 547.116027][T22870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.129389][T23503] syz.0.5828[23503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.129450][T23503] syz.0.5828[23503] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.075950][T23519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5836'. [ 548.098960][T23519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5836'. [ 548.221426][T23526] loop2: detected capacity change from 0 to 512 [ 549.120955][T23602] syz.0.5846[23602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.121029][T23602] syz.0.5846[23602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.676929][T23646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.702089][T23646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.714700][T23645] loop3: detected capacity change from 0 to 1024 [ 549.813902][T23645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.007504][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 550.007523][ T29] audit: type=1400 audit(1725902673.555:1356): avc: denied { write } for pid=23641 comm="syz.1.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.034022][ T29] audit: type=1400 audit(1725902673.555:1357): avc: denied { nlmsg_write } for pid=23641 comm="syz.1.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.314920][T23658] loop4: detected capacity change from 0 to 1024 [ 550.351052][T23658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.475667][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.624377][T23672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.664587][T23672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.690351][T23674] loop2: detected capacity change from 0 to 512 [ 550.723557][T23674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.748097][T23674] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 550.775768][T22531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.243940][ T29] audit: type=1400 audit(1725902674.835:1358): avc: denied { bind } for pid=23708 comm="syz.0.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.292528][ T29] audit: type=1400 audit(1725902674.835:1359): avc: denied { setopt } for pid=23708 comm="syz.0.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.588160][T22870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.046863][ T29] audit: type=1326 audit(1725902676.625:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 553.070617][ T29] audit: type=1326 audit(1725902676.625:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 553.094303][ T29] audit: type=1326 audit(1725902676.625:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 553.118051][ T29] audit: type=1326 audit(1725902676.625:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 553.141876][ T29] audit: type=1326 audit(1725902676.625:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 553.185530][ T29] audit: type=1326 audit(1725902676.765:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23795 comm="syz.2.5870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 553.207801][T23804] syz.3.5866[23804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.209166][T23804] syz.3.5866[23804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.792092][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.814430][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.991762][T23833] loop4: detected capacity change from 0 to 512 [ 554.522562][T23840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.560026][T23840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.571582][T23850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.582295][T23850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.654087][T23850] loop2: detected capacity change from 0 to 2048 [ 554.690323][T23850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.719411][T23851] syz.1.5889[23851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.719534][T23851] syz.1.5889[23851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.207295][ T3274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.316170][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 555.316188][ T29] audit: type=1326 audit(1725902678.895:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.345972][ T29] audit: type=1326 audit(1725902678.895:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.369689][ T29] audit: type=1326 audit(1725902678.895:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.393202][ T29] audit: type=1326 audit(1725902678.895:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.416753][ T29] audit: type=1326 audit(1725902678.895:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.440334][ T29] audit: type=1326 audit(1725902678.895:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.463872][ T29] audit: type=1326 audit(1725902678.895:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.487472][ T29] audit: type=1326 audit(1725902678.895:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.511022][ T29] audit: type=1326 audit(1725902678.895:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.534437][ T29] audit: type=1326 audit(1725902678.895:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23858 comm="syz.0.5893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7826cef9 code=0x7ffc0000 [ 555.612989][ T3274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.769513][ T3274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.890180][ T3274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.243735][ T3274] bridge_slave_1: left allmulticast mode [ 556.249453][ T3274] bridge_slave_1: left promiscuous mode [ 556.255162][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.270816][ T3274] bridge_slave_0: left allmulticast mode [ 556.276601][ T3274] bridge_slave_0: left promiscuous mode [ 556.282428][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.423264][ T3274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.434366][ T3274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.445423][ T3274] bond0 (unregistering): Released all slaves [ 556.469799][T23862] chnl_net:caif_netlink_parms(): no params data found [ 556.565585][ T3274] hsr_slave_0: left promiscuous mode [ 556.573049][ T3274] hsr_slave_1: left promiscuous mode [ 556.583241][ T3274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.590854][ T3274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.670282][ T3274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.677820][ T3274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.691063][ T3274] veth1_macvtap: left promiscuous mode [ 556.696634][ T3274] veth0_macvtap: left promiscuous mode [ 556.702344][ T3274] veth1_vlan: left promiscuous mode [ 556.707769][ T3274] veth0_vlan: left promiscuous mode [ 557.107397][T23854] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 557.224297][T23854] EXT4-fs (loop2): Remounting filesystem read-only [ 557.509247][T23919] syz.3.5906[23919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.509376][T23919] syz.3.5906[23919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.521398][ T3274] team0 (unregistering): Port device team_slave_1 removed [ 557.545928][ T3274] team0 (unregistering): Port device team_slave_0 removed [ 557.637693][T22531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.666171][T23862] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.673538][T23862] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.712357][T23862] bridge_slave_0: entered allmulticast mode [ 557.743149][T23862] bridge_slave_0: entered promiscuous mode [ 557.767812][T23862] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.774936][T23862] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.825267][T23862] bridge_slave_1: entered allmulticast mode [ 557.834761][T23862] bridge_slave_1: entered promiscuous mode [ 558.014072][T23862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.061862][T23862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.161753][T23862] team0: Port device team_slave_0 added [ 558.185217][T23862] team0: Port device team_slave_1 added [ 558.238273][T23938] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5912'. [ 558.321502][T23862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.328614][T23862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.354588][T23862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.371483][T23960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.380227][T23960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.391304][T23862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.398388][T23862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.424537][T23862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.777731][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5914'. [ 558.946169][T23862] hsr_slave_0: entered promiscuous mode [ 558.996849][T23862] hsr_slave_1: entered promiscuous mode [ 559.164490][T23978] batadv_slave_1: entered promiscuous mode [ 559.609493][T23994] loop3: detected capacity change from 0 to 128 [ 559.682194][T23994] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 559.879073][T23862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.902455][T23862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.917754][T23862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.934019][T23862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.995199][T23862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.014323][T23862] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.025737][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.032915][ T6903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.053029][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.060219][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.251735][T23862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.487068][T23862] veth0_vlan: entered promiscuous mode [ 560.508821][T23862] veth1_vlan: entered promiscuous mode [ 560.552802][T23862] veth0_macvtap: entered promiscuous mode [ 560.575983][T23862] veth1_macvtap: entered promiscuous mode [ 560.592650][T23862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.603185][T23862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.613045][T23862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.623582][T23862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.633486][T23862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.643953][T23862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.701537][T23862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.715152][T23862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.725706][T23862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.735574][T23862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.746057][T23862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.755967][T23862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.766452][T23862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.777797][T24060] syz.3.5925[24060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.777857][T24060] syz.3.5925[24060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.791793][T23862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.814006][T23862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.822842][T23862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.831704][T23862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.840442][T23862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.891690][T24066] loop4: detected capacity change from 0 to 128 [ 560.926876][T24066] syz.4.5895: attempt to access beyond end of device [ 560.926876][T24066] loop4: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 560.943130][T24066] syz.4.5895[24066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.943253][T24066] syz.4.5895[24066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.551458][T23970] batadv_slave_1: left promiscuous mode [ 561.842180][ T6900] kworker/u8:20: attempt to access beyond end of device [ 561.842180][ T6900] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 562.368099][T24085] loop0: detected capacity change from 0 to 512 [ 562.894612][T24085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.907506][T24085] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.118686][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 563.118702][ T29] audit: type=1404 audit(1725902686.715:1424): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 563.172764][ T29] audit: type=1400 audit(1725902686.735:1425): avc: denied { prog_load } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 563.192224][ T29] audit: type=1400 audit(1725902686.765:1426): avc: denied { write } for pid=24096 comm="syz.4.5934" name="net" dev="proc" ino=66208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 563.214217][ T29] audit: type=1400 audit(1725902686.765:1427): avc: denied { append } for pid=24096 comm="syz.4.5934" name="pfkey" dev="proc" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 563.237340][ T29] audit: type=1400 audit(1725902686.765:1428): avc: denied { create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 563.258089][ T29] audit: type=1400 audit(1725902686.765:1429): avc: denied { create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 563.278739][ T29] audit: type=1400 audit(1725902686.765:1430): avc: denied { mount } for pid=24096 comm="syz.4.5934" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 563.300593][ T29] audit: type=1400 audit(1725902686.765:1431): avc: denied { map_create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 563.319950][ T29] audit: type=1400 audit(1725902686.765:1432): avc: denied { prog_load } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 563.339156][ T29] audit: type=1400 audit(1725902686.765:1433): avc: denied { map_create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Sep 9 17:24:46 syzkaller kern.notice kernel: [ 563.172764][ T29] audit: type=1400 audit(1725902686.735:1425): avc: denied { prog_load } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Sep 9 17:24:46 syzkaller kern.notice kernel: [ 563.192224][ T29] audit: type=1400 audit(1725902686.765:1426): avc: denied { write } for pid=24096 comm="syz.4.5934" name="net" dev="proc" ino=66208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass= Sep 9 17:24:46 syzkaller kern.notice kernel: [ 563.214217][ T29] audit: type=1400 audit(1725902686.765:1427): avc: denied { append } for pid=24096 comm="syz.4.5934" name="pfkey" dev="proc" ino=4026533180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc Sep 9 17:24:46 syzkaller kern.notice kernel: [ 563.237340][ T29] audit: type=1400 audit(1725902686.765:1428): avc: denied { create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissi Sep 9 17:24:47 syzkaller kern.notice kernel: [ 563.258089][ T29] audit: type=1400 audit(1725902686.765:1429): avc: denied { create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissi Sep 9 17:24:47 syzkaller kern.notice kernel: [ 563.278739][ T29] audit: type=1400 audit(1725902686.765:1430): avc: denied { mount } for pid=24096 comm="syz.4.5934" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=file Sep 9 17:24:47 syzkaller kern.notice kernel: [ 563.300593][ T29] audit: type=1400 audit(1725902686.765:1431): avc: denied { map_create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Sep 9 17:24:47 syzkaller kern.notice kernel: [ 563.319950][ T29] audit: type=1400 audit(1725902686.765:1432): avc: denied { prog_load } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Sep 9 17:24:47 syzkaller kern.notice kernel: [ 563.339156][ T29] audit: type=1400 audit(1725902686.765:1433): avc: denied { map_create } for pid=24096 comm="syz.4.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 563.691265][T12968] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.754761][T24106] syz.1.5937[24106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.754860][T24106] syz.1.5937[24106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.910269][ T3378] bridge_slave_1: left allmulticast mode [ 563.927651][ T3378] bridge_slave_1: left promiscuous mode [ 563.933452][ T3378] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.947073][ T3378] bridge_slave_0: left allmulticast mode [ 563.952868][ T3378] bridge_slave_0: left promiscuous mode [ 563.958669][ T3378] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.090827][ T3378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.102835][ T3378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.116480][ T3378] bond0 (unregistering): Released all slaves [ 564.171448][ T3378] tipc: Left network mode [ 564.230980][ T3378] hsr_slave_0: left promiscuous mode [ 564.236967][ T3378] hsr_slave_1: left promiscuous mode [ 564.244292][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.252336][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.312543][ T3378] team0 (unregistering): Port device team_slave_1 removed [ 564.327011][ T3378] team0 (unregistering): Port device team_slave_0 removed [ 564.560191][T24109] chnl_net:caif_netlink_parms(): no params data found [ 564.942152][T24109] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.949488][T24109] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.013363][T24109] bridge_slave_0: entered allmulticast mode [ 565.039410][T24109] bridge_slave_0: entered promiscuous mode [ 565.046567][T24109] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.053812][T24109] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.087422][T24109] bridge_slave_1: entered allmulticast mode [ 565.107047][T24109] bridge_slave_1: entered promiscuous mode [ 565.181526][T24109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.225744][T24109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.732017][T24109] team0: Port device team_slave_0 added [ 565.767580][T24109] team0: Port device team_slave_1 added [ 565.867586][T24109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.874799][T24109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.901119][T24109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.916700][T24219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.016379][T24219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.136511][T24109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.143562][T24109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.169767][T24109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.308324][T24109] hsr_slave_0: entered promiscuous mode [ 566.314479][T24109] hsr_slave_1: entered promiscuous mode [ 566.321992][T24109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.331792][T24109] Cannot create hsr debugfs directory [ 567.774692][T24325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5958'. [ 567.871979][T24325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5958'. [ 567.968716][T24109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.979242][T24109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.990658][T24109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 568.009268][T24109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 568.081283][T24333] mmap: syz.2.5953 (24333) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 568.111800][T24109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.128591][T24109] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.149999][T15620] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.157161][T15620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.165244][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 568.165259][ T29] audit: type=1400 audit(1725902691.755:1515): avc: denied { setopt } for pid=24278 comm="syz.2.5953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 568.200536][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.207693][ T6896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.258132][T24279] syzkaller0: entered promiscuous mode [ 568.263668][T24279] syzkaller0: entered allmulticast mode [ 568.319940][ T29] audit: type=1400 audit(1725902691.915:1516): avc: denied { bind } for pid=24278 comm="syz.2.5953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 568.333294][T24109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 568.350083][T24109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.465319][T24109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.729897][T24109] veth0_vlan: entered promiscuous mode [ 568.838618][T24109] veth1_vlan: entered promiscuous mode [ 568.867080][T24109] veth0_macvtap: entered promiscuous mode [ 568.882911][T24109] veth1_macvtap: entered promiscuous mode [ 568.915369][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.925885][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.935856][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.946372][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.956212][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.966760][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.976772][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.987220][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.232487][T24109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.286111][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.296662][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.306589][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.317162][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.327044][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.337672][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.347681][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.358171][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.607098][T24109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.655213][T24458] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 569.682120][T24109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.690962][T24109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.699699][T24109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.708529][T24109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.871794][ T29] audit: type=1400 audit(1725902693.465:1517): avc: denied { mounton } for pid=24109 comm="syz-executor" path="/root/syzkaller.KfEMXY/syz-tmp" dev="sda1" ino=1996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 569.979581][ T29] audit: type=1400 audit(1725902693.465:1518): avc: denied { mount } for pid=24109 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 570.001977][ T29] audit: type=1400 audit(1725902693.465:1519): avc: denied { unmount } for pid=24109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 570.021975][ T29] audit: type=1400 audit(1725902693.495:1520): avc: denied { mounton } for pid=24109 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 570.294466][ T29] audit: type=1400 audit(1725902693.665:1521): avc: denied { audit_write } for pid=24466 comm="syz.3.5966" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 570.315942][ T29] audit: type=1107 audit(1725902693.665:1522): pid=24466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 571.109560][ T29] audit: type=1326 audit(1725902694.705:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24487 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 571.145011][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5970'. [ 571.188028][T24489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5970'. [ 571.289777][ T29] audit: type=1326 audit(1725902694.725:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24487 comm="syz.2.5971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2072ccef9 code=0x7ffc0000 [ 571.956392][T24514] vlan2: entered promiscuous mode [ 571.961632][T24514] veth0_to_hsr: entered promiscuous mode [ 573.275409][T24579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.327030][T24579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.453791][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 573.453807][ T29] audit: type=1400 audit(1725902697.035:1528): avc: denied { create } for pid=24530 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 573.479548][ T29] audit: type=1400 audit(1725902697.035:1529): avc: denied { setopt } for pid=24530 comm="syz.2.5982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 573.504051][T24616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5986'. [ 573.544351][T24579] loop3: detected capacity change from 0 to 2048 [ 573.592741][ T29] audit: type=1400 audit(1725902697.165:1530): avc: denied { ioctl } for pid=24618 comm="syz.0.5989" path="socket:[67869]" dev="sockfs" ino=67869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 573.617980][T24616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5986'. [ 573.686373][T24579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.699980][ T29] audit: type=1400 audit(1725902697.295:1531): avc: denied { mount } for pid=24578 comm="syz.3.5987" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 574.036037][T24646] loop0: detected capacity change from 0 to 128 [ 574.045073][ T29] audit: type=1400 audit(1725902697.635:1532): avc: denied { mount } for pid=24643 comm="syz.0.5990" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 574.083814][T24646] syz.0.5990: attempt to access beyond end of device [ 574.083814][T24646] loop0: rw=34817, sector=121, nr_sectors = 120 limit=128 [ 574.123961][T15624] kworker/u8:24: attempt to access beyond end of device [ 574.123961][T15624] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 574.126265][ T29] audit: type=1400 audit(1725902697.695:1533): avc: denied { unmount } for pid=24109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 574.157936][ T29] audit: type=1400 audit(1725902697.715:1534): avc: denied { create } for pid=24578 comm="syz.3.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 574.253961][ T29] audit: type=1400 audit(1725902697.765:1535): avc: denied { write } for pid=24578 comm="syz.3.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 574.274603][ T29] audit: type=1400 audit(1725902697.765:1536): avc: denied { nlmsg_read } for pid=24578 comm="syz.3.5987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 575.268744][T24678] loop0: detected capacity change from 0 to 1024 [ 575.289442][T24678] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 575.300452][T24678] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 575.379708][T24678] EXT4-fs (loop0): invalid journal inode [ 575.395663][T24678] EXT4-fs (loop0): can't get journal size [ 575.412062][T24678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 575.875938][ T29] audit: type=1400 audit(1725902699.465:1537): avc: denied { read write } for pid=24680 comm="syz.1.5998" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 576.321903][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.479512][T24717] loop3: detected capacity change from 0 to 256 [ 576.963304][T24109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.858174][T24818] loop2: detected capacity change from 0 to 1024 [ 578.887330][T24818] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 578.898351][T24818] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 578.925049][T24818] EXT4-fs (loop2): invalid journal inode [ 578.936016][T24818] EXT4-fs (loop2): can't get journal size [ 579.051743][T24818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 579.397509][T24851] loop4: detected capacity change from 0 to 512 [ 579.901269][T24851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.914175][T24851] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 580.110128][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.121249][T24860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.167401][T24860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.186895][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 580.186913][ T29] audit: type=1400 audit(1725902703.775:1549): avc: denied { append } for pid=24858 comm="syz.0.6028" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 580.222627][T22531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.254716][ T29] audit: type=1400 audit(1725902703.825:1550): avc: denied { name_bind } for pid=24866 comm="syz.1.6032" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 580.276555][ T29] audit: type=1400 audit(1725902703.825:1551): avc: denied { node_bind } for pid=24866 comm="syz.1.6032" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 581.244978][ T29] audit: type=1400 audit(1725902704.835:1552): avc: denied { name_bind } for pid=24946 comm="syz.3.6035" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 581.326081][ T29] audit: type=1326 audit(1725902704.915:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7134cef9 code=0x7ffc0000 [ 581.349726][ T29] audit: type=1326 audit(1725902704.915:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7134cef9 code=0x7ffc0000 [ 581.421480][ T29] audit: type=1326 audit(1725902704.965:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f0f7134cef9 code=0x7ffc0000 [ 581.445371][ T29] audit: type=1326 audit(1725902704.965:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7134cef9 code=0x7ffc0000 [ 581.469078][ T29] audit: type=1326 audit(1725902704.965:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24956 comm="syz.4.6039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7134cef9 code=0x7ffc0000 [ 581.533870][T24974] loop3: detected capacity change from 0 to 256 [ 581.650919][T24977] loop4: detected capacity change from 0 to 512 [ 582.152690][T24977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.165527][T24977] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 582.325836][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.460304][T24991] loop4: detected capacity change from 0 to 128 [ 582.665622][T25002] loop3: detected capacity change from 0 to 512 [ 582.672734][T25002] EXT4-fs (loop3): blocks per group (34) and clusters per group (32768) inconsistent [ 583.125100][ T29] audit: type=1400 audit(1725902706.715:1558): avc: denied { write } for pid=25004 comm="syz.4.6052" name="net" dev="proc" ino=68694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 583.163652][T25005] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 583.184626][T25005] netlink: 'syz.4.6052': attribute type 27 has an invalid length. [ 583.306199][T25009] loop0: detected capacity change from 0 to 1024 [ 583.307662][T25005] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.319925][T25005] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.370483][T25009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.524194][T25019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.597857][T25020] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 583.629226][T25019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.638752][T25005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.721614][T25005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.752427][T25005] veth0_to_hsr: left promiscuous mode [ 583.890504][T25005] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.899612][T25005] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.908660][T25005] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.917582][T25005] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.972535][T25005] vlan2: left promiscuous mode [ 584.037018][T25007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.073137][T25007] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.097110][T25007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.140078][T24109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.464151][T25053] loop0: detected capacity change from 0 to 512 [ 585.483077][T25053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.496357][T25053] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.557476][T24109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.700477][T25063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.709385][T25063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.796541][T25068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6066'. [ 585.951928][T25072] loop3: detected capacity change from 0 to 2048 [ 586.002398][T25072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.086186][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 586.086202][ T29] audit: type=1400 audit(1725902709.675:1578): avc: denied { write } for pid=25071 comm="syz.3.6070" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 586.119188][ T29] audit: type=1400 audit(1725902709.715:1579): avc: denied { add_name } for pid=25071 comm="syz.3.6070" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 586.140132][ T29] audit: type=1400 audit(1725902709.715:1580): avc: denied { create } for pid=25071 comm="syz.3.6070" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 586.160649][ T29] audit: type=1400 audit(1725902709.715:1581): avc: denied { read write } for pid=25071 comm="syz.3.6070" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 586.183546][ T29] audit: type=1400 audit(1725902709.715:1582): avc: denied { open } for pid=25071 comm="syz.3.6070" path="/169/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 586.270053][T25082] loop4: detected capacity change from 0 to 512 [ 586.278332][T25082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 586.298747][T25082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.311605][T25082] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.050797][ T29] audit: type=1400 audit(1725902710.135:1583): avc: denied { connect } for pid=25081 comm="syz.4.6073" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 587.071581][ T29] audit: type=1400 audit(1725902710.595:1584): avc: denied { create } for pid=25071 comm="syz.3.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 587.098498][T25091] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 587.113333][T25091] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 587.125726][T25091] EXT4-fs (loop3): This should not happen!! Data will be lost [ 587.125726][T25091] [ 587.135420][T25091] EXT4-fs (loop3): Total free blocks count 0 [ 587.141504][T25091] EXT4-fs (loop3): Free/Dirty block details [ 587.147588][T25091] EXT4-fs (loop3): free_blocks=2415919104 [ 587.153442][T25091] EXT4-fs (loop3): dirty_blocks=64 [ 587.158588][T25091] EXT4-fs (loop3): Block reservation details [ 587.164658][T25091] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 587.321541][T25094] loop0: detected capacity change from 0 to 256 [ 587.330618][ T29] audit: type=1400 audit(1725902710.695:1585): avc: denied { getopt } for pid=25071 comm="syz.3.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 587.350933][ T29] audit: type=1400 audit(1725902710.905:1586): avc: denied { read append open } for pid=25071 comm="syz.3.6070" path="/169/file0/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 587.508062][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.517519][ T6896] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 587.714098][T25103] loop3: detected capacity change from 0 to 512 [ 587.726910][T25101] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 587.790727][T25103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.803432][T25103] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 587.839564][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.988769][T25113] loop4: detected capacity change from 0 to 1024 [ 588.033913][T25113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.101608][T25118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.115442][T25118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.134297][ T29] audit: type=1326 audit(1725902711.645:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25104 comm="syz.1.6079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee64cef9 code=0x7ffc0000 [ 588.362393][T25121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.379579][T25121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.391919][T25121] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 588.908867][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.296105][T25140] loop4: detected capacity change from 0 to 512 [ 589.304289][T25141] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 589.318955][T25140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.331765][T25140] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.350617][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.388491][T25148] loop0: detected capacity change from 0 to 256 [ 589.390822][T25146] loop4: detected capacity change from 0 to 1024 [ 589.425048][T25146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.772617][T25154] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 589.859044][T25154] netlink: 'syz.1.6095': attribute type 27 has an invalid length. [ 589.976450][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.171206][T25154] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.178402][T25154] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.203981][T25165] loop4: detected capacity change from 0 to 128 [ 590.474773][T25154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.492871][T25154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.546684][T25154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.555879][T25154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.565434][T25154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.574571][T25154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.632811][T25155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.643121][T25155] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.659808][T25155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.833742][T25179] loop0: detected capacity change from 0 to 512 [ 590.863296][T25179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.875984][T25179] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 590.900799][T24109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.550300][T25193] xt_hashlimit: size too large, truncated to 1048576 [ 591.915710][T25202] loop0: detected capacity change from 0 to 128 [ 593.065453][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 593.065471][ T29] audit: type=1326 audit(1725902716.655:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25228 comm="syz.3.6120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x0 [ 593.808953][T15637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.969270][T25259] loop3: detected capacity change from 0 to 128 [ 593.989304][T15637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.015050][T25257] loop4: detected capacity change from 0 to 512 [ 594.035647][T25257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.048550][T25257] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 594.058133][T25239] chnl_net:caif_netlink_parms(): no params data found [ 594.081819][T15637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.117668][T25268] syz.3.6128[25268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.117749][T25268] syz.3.6128[25268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.148573][T15637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.202864][T25239] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.210321][T25239] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.217580][T25239] bridge_slave_0: entered allmulticast mode [ 594.224047][T25239] bridge_slave_0: entered promiscuous mode [ 594.231134][T25239] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.238273][T25239] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.245632][T25239] bridge_slave_1: entered allmulticast mode [ 594.252224][T25239] bridge_slave_1: entered promiscuous mode [ 594.274276][T25239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.285147][T25239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.324435][T25239] team0: Port device team_slave_0 added [ 594.336172][T25239] team0: Port device team_slave_1 added [ 594.342539][T15637] bridge_slave_1: left allmulticast mode [ 594.348433][T15637] bridge_slave_1: left promiscuous mode [ 594.354251][T15637] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.380454][T15637] bridge_slave_0: left allmulticast mode [ 594.386187][T15637] bridge_slave_0: left promiscuous mode [ 594.391946][T15637] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.580476][T15637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.601290][T15637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.617791][T15637] bond0 (unregistering): Released all slaves [ 594.659381][T25239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.666423][T25239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.692533][T25239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.704426][T25277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6129'. [ 594.714447][T25277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6129'. [ 594.723922][T25239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.730908][T25239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.757024][T25239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.788375][T23862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.825377][T15637] tipc: Left network mode [ 594.871551][T25239] hsr_slave_0: entered promiscuous mode [ 594.882802][T25292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.902881][T25239] hsr_slave_1: entered promiscuous mode [ 594.912389][T25239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.922264][T25292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.952091][T25239] Cannot create hsr debugfs directory [ 594.976604][T25304] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 595.037655][T15637] hsr_slave_0: left promiscuous mode [ 595.045747][T15637] hsr_slave_1: left promiscuous mode [ 595.057376][T15637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.065024][T15637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.106699][T15637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.114693][T15637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.178245][T15637] veth1_macvtap: left promiscuous mode [ 595.183881][T15637] veth0_macvtap: left promiscuous mode [ 595.189533][T15637] veth1_vlan: left promiscuous mode [ 595.194842][T15637] veth0_vlan: left promiscuous mode [ 595.789403][T15637] team0 (unregistering): Port device team_slave_1 removed [ 595.811811][T15637] team0 (unregistering): Port device team_slave_0 removed [ 596.603806][T25239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 596.650102][T25239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 596.673447][T25239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 596.701609][T25239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 596.766902][T25422] netlink: 87 bytes leftover after parsing attributes in process `syz.3.6140'. [ 596.809764][T25239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.852817][T25239] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.870631][T25431] syz.3.6141[25431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.870723][T25431] syz.3.6141[25431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.884580][T15637] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.903166][T15637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.953533][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.960679][ T3274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.100802][T25239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.202141][T25239] veth0_vlan: entered promiscuous mode [ 597.216597][T25239] veth1_vlan: entered promiscuous mode [ 597.236562][T25239] veth0_macvtap: entered promiscuous mode [ 597.250580][T25239] veth1_macvtap: entered promiscuous mode [ 597.348885][T25239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.359452][T25239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.369324][T25239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 597.379811][T25239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.390786][T25239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.399416][T25239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.410226][T25239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.420245][T25239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.430782][T25239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.448769][T25239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.468431][T25239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.477229][T25239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.486014][T25239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.494846][T25239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.597558][ T29] audit: type=1400 audit(1725902721.195:1606): avc: denied { create } for pid=25491 comm="syz.2.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 597.683868][T25500] loop3: detected capacity change from 0 to 2048 [ 597.709486][T25500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.740250][T25500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6145'. [ 597.989985][T25532] usb usb8: usbfs: process 25532 (syz.3.6145) did not claim interface 0 before use [ 599.038006][T25599] netlink: 87 bytes leftover after parsing attributes in process `syz.4.6150'. [ 599.120949][T25607] pim6reg1: entered promiscuous mode [ 599.126498][T25607] pim6reg1: entered allmulticast mode [ 599.414337][T25618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6156'. [ 599.431843][T25618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6156'. [ 600.060431][T25629] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 600.910252][T19790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.990844][T25645] loop2: detected capacity change from 0 to 128 [ 601.002554][T25645] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 601.012208][T25647] loop3: detected capacity change from 0 to 256 [ 601.027432][ T29] audit: type=1326 audit(1725902724.615:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.055197][ T29] audit: type=1326 audit(1725902724.645:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.078821][ T29] audit: type=1326 audit(1725902724.645:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.102352][ T29] audit: type=1326 audit(1725902724.645:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.125909][ T29] audit: type=1326 audit(1725902724.645:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.149597][ T29] audit: type=1326 audit(1725902724.645:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.173274][ T29] audit: type=1326 audit(1725902724.645:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 601.197244][ T29] audit: type=1326 audit(1725902724.645:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.220862][ T29] audit: type=1326 audit(1725902724.645:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 601.244372][ T29] audit: type=1326 audit(1725902724.645:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25646 comm="syz.3.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb30ecef9 code=0x7ffc0000 [ 602.295564][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.355496][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.850822][T25735] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 602.946930][T25746] serio: Serial port ptm0 [ 602.969812][T25752] loop3: detected capacity change from 0 to 128 [ 602.979551][T25752] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 603.131678][T25768] syz.1.6185[25768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.131761][T25768] syz.1.6185[25768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.212547][T15626] ================================================================== [ 603.232004][T15626] BUG: KCSAN: data-race in alloc_pid / copy_process [ 603.238620][T15626] [ 603.240943][T15626] read-write to 0xffffffff8665d8f8 of 4 bytes by task 15637 on cpu 0: [ 603.249089][T15626] alloc_pid+0x542/0x6f0 [ 603.253335][T15626] copy_process+0xff8/0x1f90 [ 603.257930][T15626] kernel_clone+0x167/0x5e0 [ 603.262441][T15626] user_mode_thread+0x7d/0xb0 [ 603.267123][T15626] call_usermodehelper_exec_work+0x7a/0x150 [ 603.273038][T15626] process_scheduled_works+0x483/0x9a0 [ 603.278510][T15626] worker_thread+0x526/0x6e0 [ 603.283200][T15626] kthread+0x1d1/0x210 [ 603.287272][T15626] ret_from_fork+0x4b/0x60 [ 603.291694][T15626] ret_from_fork_asm+0x1a/0x30 [ 603.296464][T15626] [ 603.298783][T15626] read to 0xffffffff8665d8f8 of 4 bytes by task 15626 on cpu 1: [ 603.306411][T15626] copy_process+0x15e3/0x1f90 [ 603.311091][T15626] kernel_clone+0x167/0x5e0 [ 603.315600][T15626] user_mode_thread+0x7d/0xb0 [ 603.320375][T15626] call_usermodehelper_exec_work+0x7a/0x150 [ 603.326288][T15626] process_scheduled_works+0x483/0x9a0 [ 603.331759][T15626] worker_thread+0x526/0x6e0 [ 603.336361][T15626] kthread+0x1d1/0x210 [ 603.340439][T15626] ret_from_fork+0x4b/0x60 [ 603.344860][T15626] ret_from_fork_asm+0x1a/0x30 [ 603.349634][T15626] [ 603.351951][T15626] value changed: 0x80000101 -> 0x80000102 [ 603.357661][T15626] [ 603.359976][T15626] Reported by Kernel Concurrency Sanitizer on: [ 603.366135][T15626] CPU: 1 UID: 0 PID: 15626 Comm: kworker/u8:25 Tainted: G W 6.11.0-rc7-syzkaller #0 [ 603.376903][T15626] Tainted: [W]=WARN [ 603.380699][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 603.390755][T15626] Workqueue: events_unbound call_usermodehelper_exec_work [ 603.397883][T15626] ==================================================================