last executing test programs: 21.784657154s ago: executing program 0 (id=692): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r1, r0, 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 20.885387909s ago: executing program 0 (id=711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 19.075270372s ago: executing program 3 (id=742): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.932351044s ago: executing program 3 (id=743): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 18.880239088s ago: executing program 0 (id=744): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18.841600341s ago: executing program 3 (id=746): r0 = io_uring_setup(0x17f7, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300), 0xc) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18.100361154s ago: executing program 3 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x304}, "e453f079dff9d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close(r0) 13.88327661s ago: executing program 2 (id=775): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000042c0)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6dc808bd784468f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000002000000ac1e0101"], 0x190) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x90) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001e00)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x90) 13.88222065s ago: executing program 4 (id=776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) 13.374460662s ago: executing program 1 (id=736): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 13.372508093s ago: executing program 2 (id=778): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) 13.371911363s ago: executing program 4 (id=779): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000005c0)=""/223, 0xdf}], 0x3, 0x8, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 12.801215101s ago: executing program 1 (id=769): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 12.800890691s ago: executing program 2 (id=770): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b67bcb1b997ce8b6325d151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000e40)="029993440c7a0c95d3bb8cf353fd63ca88ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c364fb7ac429e434ccb0320483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca001c470155ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f80)="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", 0x186}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000", 0x7a}, {&(0x7f0000000ac0)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818", 0x42}, {&(0x7f0000000840)="d31547c4f8a72a1d1f163c917e6e9ec6044b034b0fb9ad2702a1952a1914f33cdc35f1bc4139b5b35c886ad316729ceb015bdfaaae494bd9b206f9b201fe6e3f06f72abedc12774d0fc534e9b05abf1a8df5a4a0cf9931e439d263fd5308507f32e9fc5a26752d6d5b984699efb70fb7f6f59c93dff1549946427fc420bd55256245dfe809030028caae940000823af43dbb8a8ab1e1b20809cca5d52803afb14c76b97dc2ca4f7bf783579e6fcf", 0xae}], 0x5}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b754b24bc7cf830b004819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3", 0x48}], 0x2}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 12.800649831s ago: executing program 4 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7880000000000007b8af8ff00000000bfa200000000000003020000f8fffff87f23000000000000b704000000000000850e00005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) 12.767541644s ago: executing program 4 (id=782): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000320000000c009900000000001200000005001c01"], 0x28}}, 0x0) 12.69533894s ago: executing program 1 (id=772): open(0x0, 0x149442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) 12.69505271s ago: executing program 4 (id=773): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x18) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_pid(r0, 0x0, 0xfffffe89) 9.7285987s ago: executing program 0 (id=745): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x5, &(0x7f0000000480)=[{0x8, 0x20, 0x2, 0x9}, {0x7, 0x45, 0x6, 0xb446}, {0xb2, 0x8, 0x8, 0x5a14}, {0x5ce, 0x0, 0x9, 0x11}, {0x3a1, 0xff, 0x1, 0xffffffe4}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000800000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 9.72768182s ago: executing program 1 (id=774): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 9.72644838s ago: executing program 2 (id=777): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) 9.72621677s ago: executing program 3 (id=757): r0 = socket$key(0xf, 0x3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000150000000000000000000000050005"], 0xa8}}, 0x400c0) 9.7259014s ago: executing program 4 (id=780): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.693471513s ago: executing program 2 (id=781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 9.653053026s ago: executing program 0 (id=783): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000000000000400000001000000270000e0", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) pipe2$9p(&(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @empty, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 9.652523296s ago: executing program 1 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 9.623694859s ago: executing program 2 (id=785): open(&(0x7f0000000100)='./file0\x00', 0x121bff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 9.616924759s ago: executing program 3 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000002dc0)='./bus\x00', 0x0, 0x2001408, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0xc593, &(0x7f00000004c0)=ANY=[@ANYRES8], 0x1, 0x1207, &(0x7f0000001b80)="$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") r1 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x8ec00}], 0x12, 0x300400, 0x0, 0x3) 4.097293454s ago: executing program 0 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) 0s ago: executing program 1 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000004c0)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) io_uring_setup(0x3450, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x0, 0x800}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x40}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x87}, {0xfffffffc, 0x5}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x10001}, {}, {0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2000000}, {0x0, 0x20000}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7fff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x944}, {0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x1}, {}, {0x8000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0xffff, 0xc}], [{}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.121423][ T4273] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.138203][ T4273] Process accounting resumed [ 43.144357][ T4273] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 43.156323][ T4278] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 43.165480][ T4278] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 43.175599][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.306062][ T4297] loop1: detected capacity change from 0 to 2048 [ 43.329704][ T4297] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 43.340298][ T4297] System zones: 0-7 [ 43.344883][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.378674][ T4032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.529782][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 43.561716][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 43.620765][ T4332] netlink: 'syz.0.367': attribute type 39 has an invalid length. [ 43.628772][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 43.639627][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.646968][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.657051][ T4336] pim6reg1: entered promiscuous mode [ 43.662400][ T4336] pim6reg1: entered allmulticast mode [ 43.720230][ T4344] loop1: detected capacity change from 0 to 1024 [ 43.730804][ T4346] nfs4: Bad value for 'source' [ 43.801807][ T4350] sd 0:0:1:0: device reset [ 43.847448][ T4358] loop4: detected capacity change from 0 to 512 [ 43.857808][ T4358] EXT4-fs error (device loop4): __ext4_iget:4952: inode #3: block 127754: comm syz.4.380: invalid block [ 43.869238][ T4358] EXT4-fs error (device loop4): ext4_quota_enable:7056: comm syz.4.380: Bad quota inode: 3, type: 0 [ 43.880646][ T4358] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.895508][ T4358] EXT4-fs (loop4): mount failed [ 43.907481][ T4363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.381'. [ 44.162539][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 44.202869][ T4384] SELinux: Context system_u: is not valid (left unmapped). [ 44.307456][ T4391] loop2: detected capacity change from 0 to 2048 [ 44.335160][ T4391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.355230][ T4391] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.358366][ T4401] loop3: detected capacity change from 0 to 512 [ 44.372376][ T4401] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.394699][ T4401] EXT4-fs (loop3): 1 truncate cleaned up [ 44.402389][ T4401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.403109][ T3272] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.436019][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.458686][ T4407] loop2: detected capacity change from 0 to 256 [ 44.470083][ T4409] sch_tbf: peakrate 8 is lower than or equals to rate 14 ! [ 44.502207][ T4415] loop2: detected capacity change from 0 to 764 [ 44.510596][ T4417] serio: Serial port ptm0 [ 44.518596][ T4415] hub 1-0:1.0: USB hub found [ 44.523304][ T4415] hub 1-0:1.0: 8 ports detected [ 44.544851][ T4419] bpf_get_probe_write_proto: 2 callbacks suppressed [ 44.544868][ T4419] syz.4.406[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.552303][ T4419] syz.4.406[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.563844][ T4419] syz.4.406[4419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.583044][ T4424] loop2: detected capacity change from 0 to 512 [ 44.608911][ T4424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.629807][ T4424] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.660345][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.668573][ T4435] loop3: detected capacity change from 0 to 512 [ 44.680500][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.694824][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.710047][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.724954][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.734592][ T4435] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.411: bg 0: block 248: padding at end of block bitmap is not set [ 44.752989][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.766931][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.780968][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.794554][ T4435] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.411: Failed to acquire dquot type 1 [ 44.794576][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.816483][ T4435] EXT4-fs (loop3): 1 truncate cleaned up [ 44.823215][ T3272] EXT4-fs error (device loop2): ext4_empty_dir:3090: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 44.825626][ T4435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.852049][ T4446] loop1: detected capacity change from 0 to 128 [ 44.858505][ T4435] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.903859][ T4435] syz.3.411 (4435) used greatest stack depth: 9296 bytes left [ 44.920915][ T3270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.929946][ T4446] syz.1.415: attempt to access beyond end of device [ 44.929946][ T4446] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 44.943640][ T2208] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:8: Failed to release dquot type 1 [ 44.964984][ T2208] kworker/u8:8: attempt to access beyond end of device [ 44.964984][ T2208] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 45.088337][ T4433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.383969][ T4483] chnl_net:caif_netlink_parms(): no params data found [ 45.425076][ T4520] syz.1.440[4520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.425221][ T4520] syz.1.440[4520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.436810][ T4520] syz.1.440[4520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.455718][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.474408][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.483088][ T4483] bridge_slave_0: entered allmulticast mode [ 45.489586][ T4483] bridge_slave_0: entered promiscuous mode [ 45.496703][ T4526] loop1: detected capacity change from 0 to 256 [ 45.502068][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.510143][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.517397][ T4483] bridge_slave_1: entered allmulticast mode [ 45.523916][ T4483] bridge_slave_1: entered promiscuous mode [ 45.536367][ T4524] pim6reg1: entered promiscuous mode [ 45.541738][ T4524] pim6reg1: entered allmulticast mode [ 45.559932][ T4483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.574342][ T4483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.593669][ T4483] team0: Port device team_slave_0 added [ 45.600439][ T4483] team0: Port device team_slave_1 added [ 45.615437][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.622461][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.648430][ T4483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.659857][ T4483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.666844][ T4483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.692797][ T4483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.709077][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 45.709092][ T29] audit: type=1400 audit(1729104163.277:1349): avc: denied { ioctl } for pid=4528 comm="syz.0.445" path="socket:[7981]" dev="sockfs" ino=7981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.742667][ T4529] macvlan0: entered promiscuous mode [ 45.749081][ T4529] ipvlan0: entered promiscuous mode [ 45.754681][ T4529] ipvlan0: left promiscuous mode [ 45.759913][ T4529] macvlan0: left promiscuous mode [ 45.778055][ T4483] hsr_slave_0: entered promiscuous mode [ 45.784066][ T4483] hsr_slave_1: entered promiscuous mode [ 45.789966][ T4483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.797555][ T4483] Cannot create hsr debugfs directory [ 45.830514][ T4532] loop0: detected capacity change from 0 to 512 [ 45.837874][ T4532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.851200][ T4532] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.860284][ T4532] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.867998][ T4483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.868172][ T4532] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.893321][ T4532] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.908022][ T4532] EXT4-fs (loop0): 1 truncate cleaned up [ 45.914227][ T4532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.932136][ T4532] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 45.944694][ T4483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.968158][ T3274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.000011][ T4483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.081915][ T4535] chnl_net:caif_netlink_parms(): no params data found [ 46.092854][ T4483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.129610][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.136802][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.144023][ T4535] bridge_slave_0: entered allmulticast mode [ 46.151163][ T4535] bridge_slave_0: entered promiscuous mode [ 46.158240][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.165349][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.172572][ T4535] bridge_slave_1: entered allmulticast mode [ 46.180294][ T4535] bridge_slave_1: entered promiscuous mode [ 46.191381][ T29] audit: type=1400 audit(1729104163.757:1350): avc: denied { write } for pid=4551 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.219214][ T4535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.231607][ T4535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.252770][ T4535] team0: Port device team_slave_0 added [ 46.259436][ T4535] team0: Port device team_slave_1 added [ 46.288980][ T4535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.295954][ T4535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.321889][ T4535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.335260][ T4483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.344949][ T4483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.353965][ T4535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.361104][ T4535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.361135][ T4535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.366079][ T4483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.413020][ T4483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.430017][ T4535] hsr_slave_0: entered promiscuous mode [ 46.436250][ T4535] hsr_slave_1: entered promiscuous mode [ 46.443399][ T4535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.451159][ T4535] Cannot create hsr debugfs directory [ 46.517598][ T4535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.542314][ T4483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.558833][ T4483] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.569096][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.576146][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.587792][ T4535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.601481][ T1865] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.608633][ T1865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.671463][ T4535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.689301][ T4483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.719962][ T4535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.771634][ T4483] veth0_vlan: entered promiscuous mode [ 46.779966][ T4483] veth1_vlan: entered promiscuous mode [ 46.795329][ T4483] veth0_macvtap: entered promiscuous mode [ 46.804982][ T4483] veth1_macvtap: entered promiscuous mode [ 46.821693][ T4535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.831223][ T4535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.839822][ T4535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.849215][ T4535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.857958][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.868426][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.878311][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.888900][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.898737][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.909257][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.919165][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.929679][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.940405][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.949086][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.959758][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.969679][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.980216][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.990022][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.000488][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.010425][ T4483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.020873][ T4483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.032670][ T4483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.046317][ T4483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.055255][ T4483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.064057][ T4483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.072847][ T4483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.111029][ T4579] wg2: entered promiscuous mode [ 47.112659][ T29] audit: type=1400 audit(1729104164.677:1351): avc: denied { mounton } for pid=4483 comm="syz-executor" path="/root/syzkaller.6snFXP/syz-tmp" dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 47.115916][ T4579] wg2: entered allmulticast mode [ 47.145446][ T29] audit: type=1400 audit(1729104164.677:1352): avc: denied { mount } for pid=4483 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.179961][ T29] audit: type=1400 audit(1729104164.717:1353): avc: denied { mount } for pid=4483 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.191592][ T4535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.201999][ T29] audit: type=1400 audit(1729104164.717:1354): avc: denied { mounton } for pid=4483 comm="syz-executor" path="/root/syzkaller.6snFXP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.214418][ T4535] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.235192][ T29] audit: type=1400 audit(1729104164.717:1355): avc: denied { mounton } for pid=4483 comm="syz-executor" path="/root/syzkaller.6snFXP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 47.249393][ T1865] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.269411][ T29] audit: type=1400 audit(1729104164.737:1356): avc: denied { mounton } for pid=4483 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.276310][ T1865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.322053][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.329222][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.352061][ T4535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.362576][ T4535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.438800][ T4535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.444609][ T4590] loop2: detected capacity change from 0 to 512 [ 47.512373][ T4590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 47.520849][ T4590] System zones: 0-2, 18-18, 34-34 [ 47.536029][ T4590] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.427: bg 0: block 248: padding at end of block bitmap is not set [ 47.561927][ T4590] Quota error (device loop2): write_blk: dquota write failed [ 47.569405][ T4590] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.571792][ T4596] syzkaller0: entered promiscuous mode [ 47.579457][ T4590] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.427: Failed to acquire dquot type 1 [ 47.584832][ T4596] syzkaller0: entered allmulticast mode [ 47.602126][ T4590] EXT4-fs (loop2): 1 truncate cleaned up [ 47.608289][ T4590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.621937][ T4535] veth0_vlan: entered promiscuous mode [ 47.627563][ T4590] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.666701][ T4590] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.691254][ T4612] netlink: 22 bytes leftover after parsing attributes in process `syz.3.462'. [ 48.049122][ T4632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.429443][ T4636] loop0: detected capacity change from 0 to 512 [ 48.449328][ T4636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.462200][ T4636] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.476281][ T4636] Process accounting resumed [ 48.482094][ T4636] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 48.500491][ T3274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.534029][ T4641] netlink: 'syz.3.476': attribute type 5 has an invalid length. [ 48.556647][ T4643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 48.891667][ T4665] netlink: 22 bytes leftover after parsing attributes in process `syz.0.486'. [ 49.110593][ T4632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.498373][ T4682] loop3: detected capacity change from 0 to 256 [ 49.573692][ T4667] chnl_net:caif_netlink_parms(): no params data found [ 49.611550][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.618729][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.626056][ T4667] bridge_slave_0: entered allmulticast mode [ 49.632586][ T4667] bridge_slave_0: entered promiscuous mode [ 49.640179][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.647306][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.654477][ T4667] bridge_slave_1: entered allmulticast mode [ 49.661242][ T4667] bridge_slave_1: entered promiscuous mode [ 49.685171][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.699651][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.722497][ T4667] team0: Port device team_slave_0 added [ 49.729632][ T4667] team0: Port device team_slave_1 added [ 49.751274][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.758317][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.784254][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.801580][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.808577][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.834763][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.865775][ T4707] loop4: detected capacity change from 0 to 512 [ 49.888081][ T4707] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 49.896769][ T4707] System zones: 0-2, 18-18, 34-34 [ 49.902549][ T4707] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.494: bg 0: block 248: padding at end of block bitmap is not set [ 49.904020][ T4667] hsr_slave_0: entered promiscuous mode [ 49.917172][ T4707] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.494: Failed to acquire dquot type 1 [ 49.934203][ T4667] hsr_slave_1: entered promiscuous mode [ 49.935288][ T4707] EXT4-fs (loop4): 1 truncate cleaned up [ 49.945611][ T4667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.945970][ T4707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.953973][ T4667] Cannot create hsr debugfs directory [ 49.966937][ T4707] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.998838][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.035253][ T4692] chnl_net:caif_netlink_parms(): no params data found [ 50.114376][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.121681][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.130597][ T4692] bridge_slave_0: entered allmulticast mode [ 50.134395][ T4722] loop4: detected capacity change from 0 to 8192 [ 50.137255][ T4692] bridge_slave_0: entered promiscuous mode [ 50.154285][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.161376][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.168656][ T4692] bridge_slave_1: entered allmulticast mode [ 50.175810][ T4692] bridge_slave_1: entered promiscuous mode [ 50.197349][ T4692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.211165][ T4692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.239210][ T4692] team0: Port device team_slave_0 added [ 50.245662][ T4692] team0: Port device team_slave_1 added [ 50.260852][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.267892][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.293990][ T4692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.305292][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.312270][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.338310][ T4692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.361659][ T3344] kernel write not supported for file /229/timerslack_ns (pid: 3344 comm: kworker/0:3) [ 50.375021][ T4692] hsr_slave_0: entered promiscuous mode [ 50.383142][ T4692] hsr_slave_1: entered promiscuous mode [ 50.389182][ T4692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.396818][ T4692] Cannot create hsr debugfs directory [ 50.436262][ T4738] loop4: detected capacity change from 0 to 128 [ 50.464897][ T4738] syz.4.504: attempt to access beyond end of device [ 50.464897][ T4738] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.650363][ T4632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.709921][ T4632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.724349][ T4747] loop4: detected capacity change from 0 to 32768 [ 50.756937][ T4747] loop4: p1 p2 p3 < p5 p6 > [ 50.762251][ T4747] loop4: p2 size 589824 extends beyond EOD, truncated [ 50.793123][ T4632] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.805844][ T4632] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.817549][ T4632] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.833710][ T4632] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.845739][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 50.845753][ T29] audit: type=1400 audit(1729104168.407:1443): avc: denied { create } for pid=4746 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.854540][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 50.872399][ T29] audit: type=1400 audit(1729104168.427:1444): avc: denied { write } for pid=4746 comm="syz.4.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.926021][ T28] bridge_slave_1: left allmulticast mode [ 50.931807][ T28] bridge_slave_1: left promiscuous mode [ 50.937533][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.946923][ T28] bridge_slave_0: left allmulticast mode [ 50.952643][ T28] bridge_slave_0: left promiscuous mode [ 50.958380][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.036300][ T29] audit: type=1400 audit(1729104168.597:1445): avc: denied { create } for pid=4753 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.055842][ T29] audit: type=1400 audit(1729104168.597:1446): avc: denied { connect } for pid=4753 comm="syz.4.510" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.076179][ T29] audit: type=1400 audit(1729104168.597:1447): avc: denied { setopt } for pid=4753 comm="syz.4.510" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.098090][ T29] audit: type=1400 audit(1729104168.597:1448): avc: denied { write } for pid=4753 comm="syz.4.510" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.123676][ T4756] loop0: detected capacity change from 0 to 512 [ 51.138949][ T4756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 51.147219][ T4756] System zones: 0-2, 18-18, 34-34 [ 51.147402][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.153062][ T4756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.511: bg 0: block 248: padding at end of block bitmap is not set [ 51.175267][ T4756] Quota error (device loop0): write_blk: dquota write failed [ 51.182703][ T4756] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 51.192658][ T4756] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.511: Failed to acquire dquot type 1 [ 51.192973][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.214047][ T4756] EXT4-fs (loop0): 1 truncate cleaned up [ 51.214454][ T28] bond0 (unregistering): Released all slaves [ 51.220226][ T4756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.240797][ T4756] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.255626][ T29] audit: type=1400 audit(1729104168.817:1449): avc: denied { write } for pid=4762 comm="syz.4.513" name="001" dev="devtmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.279298][ T4756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.293208][ T28] hsr_slave_0: left promiscuous mode [ 51.299544][ T28] hsr_slave_1: left promiscuous mode [ 51.305284][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.312990][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.320526][ T4764] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 51.328674][ T4764] vhci_hcd: default hub control req: 9500 v0000 i0000 l0 [ 51.338233][ T28] veth0_vlan: left promiscuous mode [ 51.356313][ T4766] loop0: detected capacity change from 0 to 2048 [ 51.365600][ T29] audit: type=1400 audit(1729104168.927:1450): avc: denied { setopt } for pid=4767 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.388841][ T4766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.401317][ T4766] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.429689][ T3274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.446651][ T28] team0 (unregistering): Port device team_slave_1 removed [ 51.459656][ T28] team0 (unregistering): Port device team_slave_0 removed [ 51.501248][ T4775] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 51.509125][ T4775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 51.519756][ T4775] bridge0: port 3(ipvlan0) entered blocking state [ 51.526216][ T4775] bridge0: port 3(ipvlan0) entered disabled state [ 51.534601][ T4775] ipvlan0: entered allmulticast mode [ 51.539984][ T4775] veth0_vlan: entered allmulticast mode [ 51.545939][ T4776] loop0: detected capacity change from 0 to 512 [ 51.546203][ T4775] ipvlan0: left allmulticast mode [ 51.557385][ T4775] veth0_vlan: left allmulticast mode [ 51.559929][ T4776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.563346][ T4775] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 51.585361][ T4776] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.614662][ T4775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 51.633157][ T3274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.669275][ T4782] loop0: detected capacity change from 0 to 512 [ 51.688269][ T4782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.700988][ T4782] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.717307][ T4782] Process accounting resumed [ 51.723147][ T4782] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.743179][ T3274] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.757932][ T4692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.769022][ T4667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.778285][ T4667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.787700][ T4667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.804756][ T4667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.851746][ T4692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.890504][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.902591][ T4667] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.918020][ T4692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.938575][ T1865] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.945642][ T1865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.959395][ T1865] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.966462][ T1865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.979492][ T4692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.030305][ T4804] loop2: detected capacity change from 0 to 512 [ 52.045965][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.056244][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.070545][ T4804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.083667][ T4804] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.110818][ T4483] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.121396][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.132014][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.144229][ T28] bond0 (unregistering): Released all slaves [ 52.152288][ T4692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.162357][ T4692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.175566][ T4692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.186656][ T4692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.204350][ T28] hsr_slave_0: left promiscuous mode [ 52.212490][ T28] hsr_slave_1: left promiscuous mode [ 52.218844][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.226254][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.234214][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.241654][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.251864][ T4823] loop2: detected capacity change from 0 to 512 [ 52.258605][ T28] veth1_macvtap: left promiscuous mode [ 52.264110][ T28] veth0_macvtap: left promiscuous mode [ 52.269677][ T28] veth1_vlan: left promiscuous mode [ 52.271697][ T4823] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.534: corrupted xattr block 95: invalid header [ 52.274891][ T28] veth0_vlan: left promiscuous mode [ 52.294698][ T4823] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 52.307797][ T4823] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.534: bg 0: block 7: invalid block bitmap [ 52.321468][ T4823] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 52.330654][ T4823] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.534: corrupted xattr block 95: invalid header [ 52.345588][ T4823] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 52.354741][ T4823] EXT4-fs (loop2): 1 orphan inode deleted [ 52.357185][ T4827] loop4: detected capacity change from 0 to 8192 [ 52.361022][ T4823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.378567][ T4827] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.400429][ T4827] program syz.4.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.461812][ T4483] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.511690][ T28] team0 (unregistering): Port device team_slave_1 removed [ 52.522363][ T28] team0 (unregistering): Port device team_slave_0 removed [ 52.569404][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.619784][ T4692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.631857][ T4692] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.639550][ T4846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 52.655196][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.662321][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.689168][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.696238][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.712324][ T4856] @: renamed from vlan0 (while UP) [ 52.734535][ T4667] veth0_vlan: entered promiscuous mode [ 52.751641][ T4667] veth1_vlan: entered promiscuous mode [ 52.778454][ T4859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.798960][ T4667] veth0_macvtap: entered promiscuous mode [ 52.810588][ T4667] veth1_macvtap: entered promiscuous mode [ 52.824120][ T4859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.828463][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.842495][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.852316][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.862767][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.872661][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.883089][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.893059][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.903484][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.914840][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.922947][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.933509][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.943435][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.953954][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.963807][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.974471][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.984577][ T4667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.995203][ T4667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.008711][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.024301][ T4667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.033142][ T4667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.041938][ T4667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.050675][ T4667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.063257][ T4692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.091826][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 53.169184][ T4892] sd 0:0:1:0: device reset [ 53.170702][ T4692] veth0_vlan: entered promiscuous mode [ 53.182599][ T4692] veth1_vlan: entered promiscuous mode [ 53.196718][ T4692] veth0_macvtap: entered promiscuous mode [ 53.203949][ T4692] veth1_macvtap: entered promiscuous mode [ 53.220440][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.231022][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.241105][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.251606][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.261434][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.271895][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.281716][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.292197][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.302174][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.312605][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.324486][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.332795][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.343282][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.353165][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.363627][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.373540][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.384101][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.394022][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.404641][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.414626][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.425226][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.439304][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.455357][ T4692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.464260][ T4692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.473045][ T4692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.481862][ T4692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.496459][ T4902] loop1: detected capacity change from 0 to 512 [ 53.506034][ T4904] loop2: detected capacity change from 0 to 1024 [ 53.514763][ T4904] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.525317][ T4902] EXT4-fs (loop1): orphan cleanup on readonly fs [ 53.532541][ T4902] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.561: bg 0: block 248: padding at end of block bitmap is not set [ 53.533250][ T4904] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.562: Invalid block bitmap block 0 in block_group 0 [ 53.548702][ T4902] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.561: Failed to acquire dquot type 1 [ 53.572651][ T4904] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.562: Failed to acquire dquot type 0 [ 53.584175][ T4902] EXT4-fs (loop1): 1 truncate cleaned up [ 53.588213][ T4904] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.562: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.603829][ T4904] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.562: Invalid inode bitmap blk 0 in block_group 0 [ 53.619625][ T4911] veth0_vlan: entered allmulticast mode [ 53.625448][ T4904] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 53.628816][ T261] EXT4-fs error (device loop2): ext4_release_dquot:6902: comm kworker/u8:5: Failed to release dquot type 0 [ 53.635714][ T4904] EXT4-fs (loop2): 1 orphan inode deleted [ 53.673305][ T4911] ÿÿÿÿÿÿ: renamed from vlan1 [ 53.690798][ T4915] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 53.698604][ T4915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.564'. [ 53.709937][ T4915] bridge0: port 3(ipvlan0) entered blocking state [ 53.716411][ T4915] bridge0: port 3(ipvlan0) entered disabled state [ 53.724630][ T4915] ipvlan0: entered allmulticast mode [ 53.730077][ T4915] veth0_vlan: entered allmulticast mode [ 53.748271][ T4915] ipvlan0: left allmulticast mode [ 53.753334][ T4915] veth0_vlan: left allmulticast mode [ 53.755823][ T4923] loop1: detected capacity change from 0 to 512 [ 53.768596][ T4915] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 53.790395][ T4923] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.808482][ T4925] pim6reg1: entered promiscuous mode [ 53.813819][ T4925] pim6reg1: entered allmulticast mode [ 53.820446][ T4915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'. [ 53.992578][ T4954] sd 0:0:1:0: device reset [ 54.059927][ T4965] syz.4.579[4965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.060060][ T4965] syz.4.579[4965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.072729][ T4965] syz.4.579[4965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.080792][ T4967] sd 0:0:1:0: device reset [ 54.121679][ T4971] loop0: detected capacity change from 0 to 128 [ 54.152216][ T4977] syz.1.584[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.152263][ T4977] syz.1.584[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.166039][ T4977] syz.1.584[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.184324][ T4977] syz.1.584[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.216090][ T4977] syz.1.584[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.231381][ T4977] syz.1.584[4977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.372722][ T4990] loop1: detected capacity change from 0 to 8192 [ 54.478348][ T5009] syz.4.597[5009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.179405][ T5018] loop2: detected capacity change from 0 to 512 [ 55.312521][ T5028] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 55.332259][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 55.345373][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 55.353732][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 55.360009][ T5032] @: renamed from vlan0 (while UP) [ 55.368520][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 55.373416][ T5034] program syz.3.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.375041][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 55.392226][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 55.400027][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 55.475049][ T5043] loop7: detected capacity change from 0 to 16384 [ 55.487278][ T5043] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.688734][ T5073] loop4: detected capacity change from 0 to 512 [ 55.695499][ T5073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.706498][ T5073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 55.714742][ T5073] System zones: 1-12 [ 55.726040][ T5073] EXT4-fs (loop4): 1 truncate cleaned up [ 55.734469][ T2208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.759313][ T5080] loop3: detected capacity change from 0 to 1024 [ 55.766204][ T5080] EXT4-fs: Ignoring removed oldalloc option [ 55.774458][ T5080] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 55.777681][ T5073] loop4: detected capacity change from 512 to 64 [ 55.795100][ T5073] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop4 ino=15 [ 55.808257][ T5073] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop4 ino=15 [ 55.859037][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.867079][ T5092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.872628][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 55.872643][ T29] audit: type=1400 audit(1729104173.427:1680): avc: denied { remove_name } for pid=3268 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.885671][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.888921][ T29] audit: type=1400 audit(1729104173.427:1681): avc: denied { rmdir } for pid=3268 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.914289][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.962108][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.977144][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 55.991694][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 56.005482][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 56.020273][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 56.025457][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 56.034323][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 56.054921][ T3268] EXT4-fs warning (device loop4): ext4_empty_dir:3117: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 56.129597][ T2208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.151508][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.158744][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.165928][ T5081] bridge_slave_0: entered allmulticast mode [ 56.172628][ T5081] bridge_slave_0: entered promiscuous mode [ 56.179926][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.187118][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.194577][ T5081] bridge_slave_1: entered allmulticast mode [ 56.202710][ T5081] bridge_slave_1: entered promiscuous mode [ 56.216138][ T29] audit: type=1400 audit(1729104173.777:1682): avc: denied { create } for pid=5105 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.235182][ T29] audit: type=1400 audit(1729104173.777:1683): avc: denied { setopt } for pid=5105 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.257271][ T2208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.276362][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.288862][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.316811][ T5081] team0: Port device team_slave_0 added [ 56.319015][ T29] audit: type=1400 audit(1729104173.887:1684): avc: denied { sqpoll } for pid=5115 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.327768][ T5081] team0: Port device team_slave_1 added [ 56.380563][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.387664][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.413811][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.427760][ T2208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.441177][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.448206][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.474196][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.485057][ T29] audit: type=1400 audit(1729104174.047:1685): avc: denied { name_bind } for pid=5126 comm="syz.2.639" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 56.512736][ T5092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.556478][ T5081] hsr_slave_0: entered promiscuous mode [ 56.579506][ T29] audit: type=1326 audit(1729104174.137:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc39dff9 code=0x7ffc0000 [ 56.586112][ T5081] hsr_slave_1: entered promiscuous mode [ 56.603231][ T29] audit: type=1326 audit(1729104174.137:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f07dc39dff9 code=0x7ffc0000 [ 56.603262][ T29] audit: type=1326 audit(1729104174.137:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.2.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dc39dff9 code=0x7ffc0000 [ 56.657144][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.664751][ T5081] Cannot create hsr debugfs directory [ 56.683958][ T5092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.698937][ T5141] netlink: 'syz.0.644': attribute type 29 has an invalid length. [ 56.727403][ T2208] bridge_slave_1: left allmulticast mode [ 56.733078][ T2208] bridge_slave_1: left promiscuous mode [ 56.738782][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.746755][ T2208] bridge_slave_0: left allmulticast mode [ 56.752407][ T2208] bridge_slave_0: left promiscuous mode [ 56.758174][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.764176][ T5144] netlink: 500 bytes leftover after parsing attributes in process `syz.0.644'. [ 56.859156][ T2208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.869688][ T2208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.880167][ T2208] bond0 (unregistering): Released all slaves [ 56.887651][ T5141] netlink: 'syz.0.644': attribute type 29 has an invalid length. [ 56.901414][ T5092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.954347][ T29] audit: type=1400 audit(1729104174.517:1689): avc: denied { cmd } for pid=5150 comm="syz.2.648" path="socket:[12569]" dev="sockfs" ino=12569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.977497][ T2208] hsr_slave_0: left promiscuous mode [ 56.983328][ T2208] hsr_slave_1: left promiscuous mode [ 56.990224][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.997715][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.005518][ T2208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.013064][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.023821][ T2208] veth1_macvtap: left promiscuous mode [ 57.029371][ T2208] veth0_macvtap: left promiscuous mode [ 57.034975][ T2208] veth1_vlan: left promiscuous mode [ 57.040325][ T2208] veth0_vlan: left promiscuous mode [ 57.140095][ T2208] team0 (unregistering): Port device team_slave_1 removed [ 57.149987][ T2208] team0 (unregistering): Port device team_slave_0 removed [ 57.201216][ T5161] ip6_vti0: entered promiscuous mode [ 57.206691][ T5161] vlan1: entered promiscuous mode [ 57.212807][ T5161] ip6_vti0: left promiscuous mode [ 57.254183][ T5092] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.267693][ T5092] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.290808][ T5092] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.303654][ T5092] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.350042][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 57.389148][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.396394][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.417029][ T5121] bridge_slave_0: entered allmulticast mode [ 57.426662][ T5121] bridge_slave_0: entered promiscuous mode [ 57.433868][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.441047][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.448215][ T5121] bridge_slave_1: entered allmulticast mode [ 57.454680][ T5121] bridge_slave_1: entered promiscuous mode [ 57.482990][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.487129][ T5188] loop3: detected capacity change from 0 to 512 [ 57.510222][ T5188] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.663: bg 0: block 248: padding at end of block bitmap is not set [ 57.515864][ T5190] syzkaller0: entered promiscuous mode [ 57.524728][ T5188] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.663: Failed to acquire dquot type 1 [ 57.530059][ T5190] syzkaller0: entered allmulticast mode [ 57.548314][ T5188] EXT4-fs (loop3): 1 truncate cleaned up [ 57.555406][ T5188] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.571746][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.605607][ T5197] loop0: detected capacity change from 0 to 512 [ 57.606052][ T5121] team0: Port device team_slave_0 added [ 57.619644][ T5121] team0: Port device team_slave_1 added [ 57.640044][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.647204][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.649804][ T5197] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.673138][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.674064][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.701056][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.727012][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.754433][ T5121] hsr_slave_0: entered promiscuous mode [ 57.760639][ T5121] hsr_slave_1: entered promiscuous mode [ 57.766590][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.774165][ T5121] Cannot create hsr debugfs directory [ 57.774646][ T5197] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.666: corrupted inode contents [ 57.791558][ T5197] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.666: mark_inode_dirty error [ 57.803055][ T5197] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.666: corrupted inode contents [ 57.815347][ T5197] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.666: mark_inode_dirty error [ 57.827448][ T5197] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.666: mark inode dirty (error -117) [ 57.847990][ T5197] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 57.852174][ T5081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.874638][ T5081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.890286][ T5203] vlan0: entered allmulticast mode [ 57.907538][ T5081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.919830][ T5081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.940550][ T5206] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 57.950423][ T5206] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.966610][ T5121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.999643][ T5210] loop2: detected capacity change from 0 to 1024 [ 58.015093][ T5206] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.024985][ T5206] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.041560][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.067882][ T5121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.081506][ T5206] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.091315][ T5206] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.109371][ T5121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.125846][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.138451][ T5206] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.148262][ T5206] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.159876][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.166993][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.175595][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.182668][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.195784][ T5121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.261859][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.273000][ T5206] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.281269][ T5206] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.292241][ T5206] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.300457][ T5206] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.312206][ T5206] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.320454][ T5206] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.333243][ T5206] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.341452][ T5206] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.373545][ T5121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.386339][ T5121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.403265][ T5121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.415906][ T5121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.436058][ T5235] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 58.472654][ T5081] veth0_vlan: entered promiscuous mode [ 58.487600][ T5081] veth1_vlan: entered promiscuous mode [ 58.504715][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.523975][ T5081] veth0_macvtap: entered promiscuous mode [ 58.539138][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.548310][ T5081] veth1_macvtap: entered promiscuous mode [ 58.561645][ T261] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.568721][ T261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.583625][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.590695][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.601385][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.611951][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.621869][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.632446][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.642346][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.652874][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.662922][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.673441][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.683375][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.693867][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.705032][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.717692][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.728190][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.738101][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.748625][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.758584][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.769205][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.779090][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.789531][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.799365][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.809854][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.821092][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.835902][ T5081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.845013][ T5081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.853952][ T5081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.862806][ T5081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.893788][ T5121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.973662][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.065113][ T5267] loop3: detected capacity change from 0 to 8192 [ 59.110964][ T5121] veth0_vlan: entered promiscuous mode [ 59.120794][ T5121] veth1_vlan: entered promiscuous mode [ 59.120847][ T5276] capability: warning: `syz.3.685' uses 32-bit capabilities (legacy support in use) [ 59.140708][ T5121] veth0_macvtap: entered promiscuous mode [ 59.149877][ T5121] veth1_macvtap: entered promiscuous mode [ 59.162223][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.172764][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.182762][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.193219][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.203056][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.213571][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.223422][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.233879][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.243819][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.254306][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.264137][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.274565][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.286957][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.299266][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.309861][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.319828][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.330265][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.340190][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.350641][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.360453][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.370920][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.380731][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.391220][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.401090][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.411521][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.422403][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.433984][ T5121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.442723][ T5121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.451508][ T5121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.460371][ T5121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.508722][ T5284] bpf_get_probe_write_proto: 5 callbacks suppressed [ 59.508746][ T5284] syz.3.697[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.514040][ T5283] loop4: detected capacity change from 0 to 128 [ 59.515392][ T5284] syz.3.697[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.533128][ T5284] syz.3.697[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.546916][ T5284] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.566249][ T5284] vhci_hcd: invalid port number 23 [ 59.584670][ T5283] syz.4.637: attempt to access beyond end of device [ 59.584670][ T5283] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 59.599148][ T5283] syz.4.637: attempt to access beyond end of device [ 59.599148][ T5283] loop4: rw=2049, sector=153, nr_sectors = 24 limit=128 [ 59.613054][ T5283] syz.4.637: attempt to access beyond end of device [ 59.613054][ T5283] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 59.626556][ T5283] Buffer I/O error on dev loop4, logical block 177, lost async page write [ 59.677835][ T5288] loop3: detected capacity change from 0 to 128 [ 59.684342][ T5292] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.740603][ T5292] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.835204][ T5310] veth1_macvtap: left promiscuous mode [ 59.840761][ T5310] macsec0: entered promiscuous mode [ 59.858584][ T5292] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.890834][ T5314] syz.3.703[5314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.890940][ T5314] syz.3.703[5314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.903415][ T5314] syz.3.703[5314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.927901][ T5292] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.228763][ T28] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.278623][ T28] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.328182][ T28] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.368324][ T28] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.441217][ T28] bridge_slave_1: left allmulticast mode [ 60.446897][ T28] bridge_slave_1: left promiscuous mode [ 60.452527][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.460637][ T28] bridge_slave_0: left allmulticast mode [ 60.466321][ T28] bridge_slave_0: left promiscuous mode [ 60.472194][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.569633][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.580012][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.590042][ T28] bond0 (unregistering): Released all slaves [ 60.629494][ T28] hsr_slave_0: left promiscuous mode [ 60.635191][ T28] hsr_slave_1: left promiscuous mode [ 60.641259][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.648691][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.656343][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.663752][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.673072][ T28] veth1_macvtap: left promiscuous mode [ 60.678684][ T28] veth0_macvtap: left promiscuous mode [ 60.684216][ T28] veth1_vlan: left promiscuous mode [ 60.689562][ T28] veth0_vlan: left promiscuous mode [ 60.776125][ T28] team0 (unregistering): Port device team_slave_1 removed [ 60.786375][ T28] team0 (unregistering): Port device team_slave_0 removed [ 60.951389][ T5292] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.962069][ T5292] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973088][ T5292] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.983850][ T5292] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.129677][ T5339] loop3: detected capacity change from 0 to 256 [ 61.146846][ T5339] vfat: Bad value for 'fmask' [ 61.163123][ T5341] loop4: detected capacity change from 0 to 1024 [ 61.179335][ T5341] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.194176][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 61.194187][ T29] audit: type=1400 audit(1729104178.767:1772): avc: denied { ioctl } for pid=5340 comm="syz.4.715" path="/3/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.226996][ T5341] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 61.239310][ T5341] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.239310][ T5341] [ 61.248969][ T5341] EXT4-fs (loop4): Total free blocks count 0 [ 61.254966][ T5341] EXT4-fs (loop4): Free/Dirty block details [ 61.260890][ T5341] EXT4-fs (loop4): free_blocks=0 [ 61.265887][ T5341] EXT4-fs (loop4): dirty_blocks=0 [ 61.270929][ T5341] EXT4-fs (loop4): Block reservation details [ 61.276964][ T5341] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 61.302574][ T29] audit: type=1400 audit(1729104178.867:1773): avc: denied { cpu } for pid=5356 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 61.322927][ T5357] ref_ctr increment failed for inode: 0x27 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881041a9f80 [ 61.334501][ T5356] uprobe: syz.4.717:5356 failed to unregister, leaking uprobe [ 61.347125][ T5344] chnl_net:caif_netlink_parms(): no params data found [ 61.367975][ T5362] syz.3.718[5362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.368087][ T5362] syz.3.718[5362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.379515][ T5362] syz.3.718[5362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.411264][ T5362] net_ratelimit: 25 callbacks suppressed [ 61.411283][ T5362] ebtables: ebtables: counters copy to user failed while replacing table [ 61.442008][ T5344] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.449250][ T5344] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.456435][ T5344] bridge_slave_0: entered allmulticast mode [ 61.462995][ T5344] bridge_slave_0: entered promiscuous mode [ 61.478377][ T5344] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.485486][ T5344] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.492690][ T5344] bridge_slave_1: entered allmulticast mode [ 61.499346][ T5344] bridge_slave_1: entered promiscuous mode [ 61.508791][ T29] audit: type=1400 audit(1729104179.077:1774): avc: denied { setopt } for pid=5373 comm="syz.4.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.543900][ T5344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.558515][ T5344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.568526][ T5377] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 61.593114][ T5344] team0: Port device team_slave_0 added [ 61.602246][ T5344] team0: Port device team_slave_1 added [ 61.619243][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.626210][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.652256][ T5344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.664867][ T5344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.671859][ T5344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.697852][ T5344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.708522][ T29] audit: type=1326 audit(1729104179.237:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.732223][ T29] audit: type=1326 audit(1729104179.237:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.755807][ T29] audit: type=1326 audit(1729104179.237:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.779211][ T29] audit: type=1326 audit(1729104179.237:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.802746][ T29] audit: type=1326 audit(1729104179.237:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.826633][ T29] audit: type=1326 audit(1729104179.237:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.849993][ T29] audit: type=1326 audit(1729104179.237:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9af8a8dff9 code=0x7ffc0000 [ 61.884933][ T5344] hsr_slave_0: entered promiscuous mode [ 61.891289][ T5344] hsr_slave_1: entered promiscuous mode [ 61.897511][ T5344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.905118][ T5344] Cannot create hsr debugfs directory [ 61.919096][ T5388] loop4: detected capacity change from 0 to 512 [ 61.930705][ T5388] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.939231][ T5388] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.729: bg 0: block 248: padding at end of block bitmap is not set [ 61.954532][ T5388] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.729: Failed to acquire dquot type 1 [ 61.962837][ T5391] loop3: detected capacity change from 0 to 4096 [ 61.967338][ T5388] EXT4-fs (loop4): 1 truncate cleaned up [ 62.042948][ T5399] loop3: detected capacity change from 0 to 2048 [ 62.060147][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.075170][ T5401] loop4: detected capacity change from 0 to 512 [ 62.084278][ T5401] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.105656][ T5401] EXT4-fs (loop4): 1 truncate cleaned up [ 62.120360][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.212698][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.249400][ T5421] loop4: detected capacity change from 0 to 1024 [ 62.266287][ T5421] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 62.283715][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 62.316381][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.332492][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.339573][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.346863][ T5405] bridge_slave_0: entered allmulticast mode [ 62.353154][ T5405] bridge_slave_0: entered promiscuous mode [ 62.368766][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.375892][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.383052][ T5405] bridge_slave_1: entered allmulticast mode [ 62.389634][ T5405] bridge_slave_1: entered promiscuous mode [ 62.406548][ T5429] loop4: detected capacity change from 0 to 512 [ 62.415121][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.437264][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.450733][ T5429] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.471099][ T5429] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.740: corrupted inode contents [ 62.495517][ T5429] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #18: comm syz.4.740: mark_inode_dirty error [ 62.509673][ T5405] team0: Port device team_slave_0 added [ 62.516180][ T5405] team0: Port device team_slave_1 added [ 62.525261][ T5429] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #18: comm syz.4.740: corrupted inode contents [ 62.542755][ T5429] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.740: mark_inode_dirty error [ 62.554850][ T5429] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.740: mark inode dirty (error -117) [ 62.575758][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.582774][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.608803][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.623207][ T5429] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 62.638983][ T5344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.657710][ T28] bridge_slave_1: left allmulticast mode [ 62.663598][ T28] bridge_slave_1: left promiscuous mode [ 62.669454][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.680879][ T28] bridge_slave_0: left allmulticast mode [ 62.686586][ T28] bridge_slave_0: left promiscuous mode [ 62.692288][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.790244][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.801121][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.812870][ T28] bond0 (unregistering): Released all slaves [ 62.812883][ T5453] TCP: out of memory -- consider tuning tcp_mem [ 62.813809][ T5453] ------------[ cut here ]------------ [ 62.830608][ T5453] WARNING: CPU: 0 PID: 5453 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x444/0x450 [ 62.840180][ T5453] Modules linked in: [ 62.844146][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz.4.752 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 62.854751][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.864911][ T5453] RIP: 0010:inet_sock_destruct+0x444/0x450 [ 62.870775][ T5453] Code: 0f 0b 90 e9 ab fe ff ff e8 49 35 c3 fc 90 0f 0b 90 e9 c5 fe ff ff e8 3b 35 c3 fc 90 0f 0b 90 e9 df fe ff ff e8 2d 35 c3 fc 90 <0f> 0b 90 e9 35 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 [ 62.890544][ T5453] RSP: 0018:ffffc9000193fce0 EFLAGS: 00010287 [ 62.896708][ T5453] RAX: ffffffff846cf893 RBX: 0000000080002000 RCX: 0000000000040000 [ 62.904686][ T5453] RDX: ffffc90002cea000 RSI: 00000000000006a8 RDI: 00000000000006a9 [ 62.912674][ T5453] RBP: ffff888103f0cc00 R08: ffffffff846cf7c4 R09: 0000000000000000 [ 62.920684][ T5453] R10: 0001ffffffffffff R11: 0001888103f0cd60 R12: ffff888103f0cc00 [ 62.928701][ T5453] R13: ffff888103f0cee8 R14: ffff888103f0cc28 R15: ffff888103f0cc12 [ 62.936711][ T5453] FS: 00007f9af77076c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 62.945653][ T5453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.952259][ T5453] CR2: 0000001b33f1bff8 CR3: 0000000114006000 CR4: 00000000003506f0 [ 62.960363][ T5453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.968339][ C0] TCP: out of memory -- consider tuning tcp_mem [ 62.974740][ T5453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.982768][ T5453] Call Trace: [ 62.986037][ T5453] [ 62.988970][ T5453] ? __warn+0x141/0x350 [ 62.993214][ T5453] ? report_bug+0x315/0x420 [ 62.997783][ T5453] ? inet_sock_destruct+0x444/0x450 [ 63.003030][ T5453] ? handle_bug+0x60/0x90 [ 63.007444][ T5453] ? exc_invalid_op+0x1a/0x50 [ 63.012214][ T5453] ? asm_exc_invalid_op+0x1a/0x20 [ 63.017329][ T5453] ? inet_sock_destruct+0x374/0x450 [ 63.022675][ T5453] ? inet_sock_destruct+0x443/0x450 [ 63.027975][ T5453] ? inet_sock_destruct+0x444/0x450 [ 63.033181][ T5453] ? __pfx_inet_sock_destruct+0x10/0x10 [ 63.038813][ T5453] __sk_destruct+0x3d/0x440 [ 63.043329][ T5453] __sk_free+0x284/0x2d0 [ 63.047654][ T5453] sk_free+0x39/0x80 [ 63.051560][ T5453] tcp_close+0x8b/0xd0 [ 63.055704][ T5453] inet_release+0xce/0xf0 [ 63.060119][ T5453] sock_close+0x68/0x150 [ 63.064378][ T5453] ? __pfx_sock_close+0x10/0x10 [ 63.069258][ T5453] __fput+0x17a/0x6d0 [ 63.073299][ T5453] ? _raw_spin_unlock+0x26/0x50 [ 63.078251][ T5453] ____fput+0x1c/0x30 [ 63.082309][ T5453] task_work_run+0x13a/0x1a0 [ 63.086946][ T5453] syscall_exit_to_user_mode+0xbe/0x130 [ 63.092673][ T5453] do_syscall_64+0xd6/0x1c0 [ 63.097213][ T5453] ? clear_bhb_loop+0x55/0xb0 [ 63.101971][ T5453] ? clear_bhb_loop+0x55/0xb0 [ 63.106699][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.112621][ T5453] RIP: 0033:0x7f9af8a8dff9 [ 63.117221][ T5453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.136937][ T5453] RSP: 002b:00007f9af7707038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 63.145453][ T5453] RAX: 0000000000000000 RBX: 00007f9af8c45f80 RCX: 00007f9af8a8dff9 [ 63.153457][ T5453] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 63.161498][ T5453] RBP: 00007f9af8b00296 R08: 0000000000000000 R09: 0000000000000000 [ 63.169563][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.177661][ T5453] R13: 0000000000000000 R14: 00007f9af8c45f80 R15: 00007ffe6f196288 [ 63.185634][ T5453] [ 63.188700][ T5453] ---[ end trace 0000000000000000 ]--- [ 63.199671][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.206735][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.229641][ T5455] loop4: detected capacity change from 0 to 1024 [ 63.232737][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.239533][ T5455] EXT4-fs: Ignoring removed oldalloc option [ 63.256187][ T5344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.265626][ T5455] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 63.276927][ T28] hsr_slave_0: left promiscuous mode [ 63.282608][ T28] hsr_slave_1: left promiscuous mode [ 63.288533][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.296014][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.303914][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.311424][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.321158][ T28] veth0_macvtap: left promiscuous mode [ 63.326703][ T28] veth1_vlan: left promiscuous mode [ 63.331994][ T28] veth0_vlan: left promiscuous mode [ 63.422159][ T28] team0 (unregistering): Port device team_slave_1 removed [ 63.432506][ T28] team0 (unregistering): Port device team_slave_0 removed [ 63.473923][ T5344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.483401][ T5344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.509637][ T5461] bridge_slave_0: left allmulticast mode [ 63.515291][ T5461] bridge_slave_0: left promiscuous mode [ 63.520934][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.529957][ T5461] bridge_slave_1: left allmulticast mode [ 63.535702][ T5461] bridge_slave_1: left promiscuous mode [ 63.541444][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.550787][ T5461] bond0: (slave bond_slave_0): Releasing backup interface [ 63.560716][ T5461] bond0: (slave bond_slave_1): Releasing backup interface [ 63.573447][ T5461] team0: Port device team_slave_0 removed [ 63.582514][ T5461] team0: Port device team_slave_1 removed [ 63.589635][ T5461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.597092][ T5461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.605341][ T5461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.612792][ T5461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.633408][ T5462] bond0: entered promiscuous mode [ 63.639265][ T5462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.648786][ T5462] bond0: left promiscuous mode [ 63.685606][ T5405] hsr_slave_0: entered promiscuous mode [ 63.693625][ T5405] hsr_slave_1: entered promiscuous mode [ 63.699874][ T5405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.709304][ T5405] Cannot create hsr debugfs directory [ 63.797914][ T5485] loop4: detected capacity change from 0 to 512 [ 63.821403][ T5485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.759: bg 0: block 393: padding at end of block bitmap is not set [ 63.839831][ T5485] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.850769][ T5485] EXT4-fs (loop4): 2 truncates cleaned up [ 63.870079][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.904913][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.930595][ T5439] chnl_net:caif_netlink_parms(): no params data found [ 63.940322][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.947554][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.986563][ T261] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.993700][ T261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.048492][ T28] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.071235][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 64.080489][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.087693][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.095116][ T5439] bridge_slave_0: entered allmulticast mode [ 64.101744][ T5439] bridge_slave_0: entered promiscuous mode [ 64.115819][ T28] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.128824][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.135935][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.143388][ T5439] bridge_slave_1: entered allmulticast mode [ 64.149955][ T5439] bridge_slave_1: entered promiscuous mode [ 64.193142][ T5439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.203814][ T28] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.234451][ T5439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.248252][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.255322][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.262853][ T5464] bridge_slave_0: entered allmulticast mode [ 64.269315][ T5464] bridge_slave_0: entered promiscuous mode [ 64.281121][ T5509] can0: slcan on ttyS3. [ 64.295205][ T28] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.305745][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.312944][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.320191][ T5464] bridge_slave_1: entered allmulticast mode [ 64.326723][ T5464] bridge_slave_1: entered promiscuous mode [ 64.333124][ T5405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.360522][ T5405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.369474][ T5405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.379175][ T5439] team0: Port device team_slave_0 added [ 64.386028][ T5439] team0: Port device team_slave_1 added [ 64.386790][ T5509] can0 (unregistered): slcan off ttyS3. [ 64.393636][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.406494][ T5509] Falling back ldisc for ttyS3. [ 64.412145][ T5405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.443310][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.456151][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.463230][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.489160][ T5439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.531030][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.538057][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.564020][ T5439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.590415][ T5464] team0: Port device team_slave_0 added [ 64.598473][ T5464] team0: Port device team_slave_1 added [ 64.617450][ T5439] hsr_slave_0: entered promiscuous mode [ 64.623805][ T5439] hsr_slave_1: entered promiscuous mode [ 64.629906][ T5439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.637532][ T5439] Cannot create hsr debugfs directory [ 64.645914][ T28] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.655725][ T28] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.685697][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.692726][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.718827][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.731439][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.738461][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.764399][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.778244][ T28] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.788243][ T28] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.818390][ T5344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.843376][ T5464] hsr_slave_0: entered promiscuous mode [ 64.849495][ T5464] hsr_slave_1: entered promiscuous mode [ 64.855695][ T5464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.863527][ T5464] Cannot create hsr debugfs directory [ 64.872647][ T28] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.882429][ T28] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.928447][ T28] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 64.938331][ T28] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.005107][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.039473][ T5344] veth0_vlan: entered promiscuous mode [ 65.045541][ T28] bridge_slave_1: left allmulticast mode [ 65.051239][ T28] bridge_slave_1: left promiscuous mode [ 65.057083][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.065119][ T28] bridge_slave_0: left allmulticast mode [ 65.070911][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.079421][ T28] bridge_slave_1: left allmulticast mode [ 65.085147][ T28] bridge_slave_1: left promiscuous mode [ 65.090858][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.098773][ T28] bridge_slave_0: left allmulticast mode [ 65.104417][ T28] bridge_slave_0: left promiscuous mode [ 65.110122][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.368859][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.379066][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.389516][ T28] bond0 (unregistering): Released all slaves [ 65.398460][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.409273][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.419343][ T28] bond0 (unregistering): Released all slaves [ 65.436097][ T5344] veth1_vlan: entered promiscuous mode [ 65.444997][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.457229][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.464385][ T2208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.473103][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.480169][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.497340][ T28] tipc: Disabling bearer [ 65.502329][ T28] tipc: Left network mode [ 65.516981][ T5344] veth0_macvtap: entered promiscuous mode [ 65.525727][ T5344] veth1_macvtap: entered promiscuous mode [ 65.534943][ T28] hsr_slave_0: left promiscuous mode [ 65.540786][ T28] hsr_slave_1: left promiscuous mode [ 65.546438][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.553880][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.561606][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.569261][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.578550][ T28] hsr_slave_0: left promiscuous mode [ 65.584274][ T28] hsr_slave_1: left promiscuous mode [ 65.590082][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.597562][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.605074][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.612742][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.623198][ T28] veth1_macvtap: left promiscuous mode [ 65.628849][ T28] veth0_macvtap: left promiscuous mode [ 65.634365][ T28] veth1_vlan: left promiscuous mode [ 65.639665][ T28] veth0_vlan: left promiscuous mode [ 65.645347][ T28] veth1_macvtap: left promiscuous mode [ 65.650879][ T28] veth0_macvtap: left promiscuous mode [ 65.656426][ T28] veth1_vlan: left promiscuous mode [ 65.772072][ T28] team0 (unregistering): Port device team_slave_1 removed [ 65.782704][ T28] team0 (unregistering): Port device team_slave_0 removed [ 65.844900][ T28] team0 (unregistering): Port device team_slave_1 removed [ 65.854854][ T28] team0 (unregistering): Port device team_slave_0 removed [ 65.900366][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.910942][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.920800][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.931417][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.942034][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.954113][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.964638][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.974487][ T5344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.984972][ T5344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.996087][ T5344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.009236][ T5344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.018080][ T5344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.026900][ T5344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.035621][ T5344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.051703][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.113380][ T5439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.121960][ T5439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.842539][ T28] bridge_slave_1: left allmulticast mode [ 66.848339][ T28] bridge_slave_1: left promiscuous mode [ 66.854026][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.887411][ T28] bridge_slave_0: left allmulticast mode [ 66.893102][ T28] bridge_slave_0: left promiscuous mode [ 66.898792][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.110399][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.128246][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.149403][ T28] bond0 (unregistering): Released all slaves [ 67.210473][ T28] hsr_slave_0: left promiscuous mode [ 67.216047][ T28] hsr_slave_1: left promiscuous mode [ 67.229895][ T28] veth1_macvtap: left promiscuous mode [ 67.235541][ T28] veth0_macvtap: left promiscuous mode [ 67.241153][ T28] veth1_vlan: left promiscuous mode [ 67.246462][ T28] veth0_vlan: left promiscuous mode [ 67.558521][ T28] team0 (unregistering): Port device team_slave_1 removed [ 67.587184][ T28] team0 (unregistering): Port device team_slave_0 removed [ 67.627014][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 67.627027][ T29] audit: type=1400 audit(1729104185.197:1905): avc: denied { create } for pid=5544 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.643240][ T5545] syz.2.775[5545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.653238][ T5545] syz.2.775[5545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.676212][ T5545] syz.2.775[5545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.678498][ T5439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.712240][ T29] audit: type=1400 audit(1729104185.277:1906): avc: denied { setopt } for pid=5544 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.721317][ T5405] veth0_vlan: entered promiscuous mode [ 67.745966][ T5464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.754673][ T5439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.772580][ T5405] veth1_vlan: entered promiscuous mode [ 67.778993][ T5464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.790516][ T5464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.801454][ T5464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.830025][ T5405] veth0_macvtap: entered promiscuous mode [ 67.840483][ T5405] veth1_macvtap: entered promiscuous mode [ 67.859623][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.870207][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.880191][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.890720][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.900544][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.910983][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.921698][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.938922][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.947164][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.957669][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.967628][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.978130][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.988049][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.998502][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.009026][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.025273][ T5405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.034065][ T5405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.042842][ T5405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.051642][ T5405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.070950][ T5439] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.081947][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.101203][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.108387][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.130554][ T5548] loop1: detected capacity change from 0 to 128 [ 68.137384][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.155483][ T5464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.165867][ T5464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.179610][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.186686][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.198897][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.205969][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.214691][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.221771][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.246586][ T29] audit: type=1400 audit(1729104185.797:1907): avc: denied { create } for pid=5551 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.266270][ T29] audit: type=1400 audit(1729104185.797:1908): avc: denied { setopt } for pid=5551 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.294094][ T5439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.304591][ T5439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.325045][ T5548] EXT4-fs mount: 34 callbacks suppressed [ 68.325057][ T5548] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.352920][ T29] audit: type=1400 audit(1729104185.917:1909): avc: denied { mount } for pid=5547 comm="syz.1.736" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.365538][ T5548] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.379633][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.431367][ T5439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.438653][ T29] audit: type=1400 audit(1729104186.007:1910): avc: denied { write } for pid=5547 comm="syz.1.736" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.446397][ T5548] syz.1.736[5548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.460304][ T29] audit: type=1400 audit(1729104186.007:1911): avc: denied { add_name } for pid=5547 comm="syz.1.736" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.472713][ T5548] syz.1.736[5548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.513553][ T5548] syz.1.736[5548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.519843][ T29] audit: type=1400 audit(1729104186.007:1912): avc: denied { create } for pid=5547 comm="syz.1.736" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.577522][ T29] audit: type=1400 audit(1729104186.007:1913): avc: denied { write open } for pid=5547 comm="syz.1.736" path="/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.645269][ T29] audit: type=1400 audit(1729104186.147:1914): avc: denied { link } for pid=5547 comm="syz.1.736" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.658654][ T5439] veth0_vlan: entered promiscuous mode [ 68.699155][ T5464] veth0_vlan: entered promiscuous mode [ 68.708310][ T5464] veth1_vlan: entered promiscuous mode [ 68.725831][ T5464] veth0_macvtap: entered promiscuous mode [ 68.735216][ T5439] veth1_vlan: entered promiscuous mode [ 68.743079][ T5405] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.744915][ T5464] veth1_macvtap: entered promiscuous mode [ 68.773068][ T5439] veth0_macvtap: entered promiscuous mode [ 68.782151][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.794047][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.804050][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.814853][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.824755][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.835329][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.845236][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.855723][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.866871][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.874821][ T5439] veth1_macvtap: entered promiscuous mode [ 68.886065][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.896545][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.906412][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.916918][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.926881][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.937327][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.947240][ T5464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.957679][ T5464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.968411][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.982367][ T5464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.991145][ T5464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.999961][ T5464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.008712][ T5464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.024221][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.034828][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.044718][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.055159][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.065073][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.075508][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.085404][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.095843][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.105849][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.116333][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.128425][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.140672][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.151476][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.161374][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.171880][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.181778][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.192212][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.202040][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.212463][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.222297][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.232744][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.243769][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.254819][ T5439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.263605][ T5439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.272479][ T5439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.281332][ T5439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.777200][ T5592] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 71.935519][ T5611] loop3: detected capacity change from 0 to 8192 [ 71.942236][ T5611] vfat: Unknown parameter 'ÿ' [ 92.006612][ C1] ================================================================== [ 92.014717][ C1] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote [ 92.022913][ C1] [ 92.025253][ C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 92.032624][ C1] __tmigr_cpu_activate+0x55/0x200 [ 92.037747][ C1] tmigr_cpu_activate+0x8a/0xc0 [ 92.042592][ C1] timer_clear_idle+0x28/0x100 [ 92.047347][ C1] tick_nohz_restart_sched_tick+0x22/0x110 [ 92.053169][ C1] tick_nohz_idle_exit+0xfe/0x1d0 [ 92.058198][ C1] do_idle+0x1ee/0x230 [ 92.062268][ C1] cpu_startup_entry+0x25/0x30 [ 92.067044][ C1] rest_init+0xef/0xf0 [ 92.071118][ C1] start_kernel+0x586/0x5e0 [ 92.075625][ C1] x86_64_start_reservations+0x2a/0x30 [ 92.081084][ C1] x86_64_start_kernel+0x9a/0xa0 [ 92.086015][ C1] common_startup_64+0x12c/0x137 [ 92.090974][ C1] [ 92.093312][ C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1: [ 92.100839][ C1] tmigr_handle_remote+0x26e/0x940 [ 92.105940][ C1] run_timer_softirq+0x5f/0x70 [ 92.110697][ C1] handle_softirqs+0xbf/0x280 [ 92.115363][ C1] irq_exit_rcu+0x3e/0x90 [ 92.119687][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 92.125318][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.131297][ C1] acpi_safe_halt+0x21/0x30 [ 92.135793][ C1] acpi_idle_do_entry+0x1d/0x30 [ 92.140647][ C1] acpi_idle_enter+0x96/0xb0 [ 92.145222][ C1] cpuidle_enter_state+0xc5/0x260 [ 92.150245][ C1] cpuidle_enter+0x40/0x70 [ 92.154657][ C1] do_idle+0x195/0x230 [ 92.158723][ C1] cpu_startup_entry+0x25/0x30 [ 92.163499][ C1] start_secondary+0x96/0xa0 [ 92.168096][ C1] common_startup_64+0x12c/0x137 [ 92.173070][ C1] [ 92.175380][ C1] value changed: 0x00 -> 0x01 [ 92.180040][ C1] [ 92.182355][ C1] Reported by Kernel Concurrency Sanitizer on: [ 92.188490][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 92.200286][ C1] Tainted: [W]=WARN [ 92.204068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.214111][ C1] ==================================================================