last executing test programs: 5.816409318s ago: executing program 2 (id=3540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) 5.748979593s ago: executing program 2 (id=3541): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0xc8, 0x2c, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f3c00db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa0afb"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 5.746024023s ago: executing program 2 (id=3543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x5, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='cq_process\x00', r5}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc4}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000540)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x6, 0x2be, &(0x7f0000000300)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8004) setresuid(0xffffffffffffffff, 0xee01, 0xee00) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xe8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) semctl$SETALL(0x0, 0x0, 0x2, 0x0) 3.547880063s ago: executing program 4 (id=3555): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) uname(0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_gettime(r0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000022c0)=[{0x0}, {&(0x7f0000001e00)='|', 0x1}, {0x0}], 0x3, 0x4) vmsplice(r2, &(0x7f00000008c0)=[{&(0x7f00000004c0)="d6", 0x1}], 0x1, 0x0) 2.989520743s ago: executing program 1 (id=3556): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x32f, &(0x7f0000000540)="$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") socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x120) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000480)=""/172, 0xac}], 0x1) 2.695841355s ago: executing program 2 (id=3560): write(0xffffffffffffffff, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2.640392369s ago: executing program 4 (id=3561): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 2.639790649s ago: executing program 4 (id=3562): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/147}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x214886, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@nobarrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x90f, 0x0) 2.637063459s ago: executing program 2 (id=3563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x88}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2e9}]}}}]}, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x7f, 0x3, {{0xe, 0x4, 0x3, 0x8, 0x38, 0x64, 0x0, 0x4e, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0x22, 0x7ffffffffffffffc, [{0x0, 0x2}, {0x0, 0x9, "66ecfc185c898f"}, {0x0, 0x11, "e1c064acb807f419be229aefc9fae4"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x100, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xe1, 0x33, @probe_request={{{}, {}, @broadcast, @broadcast, @from_mac=@broadcast}, @val={0x0, 0x9, @random="6b625e0eb9cf357f5f"}, @void, @val={0x3, 0x1}, @void, @val={0x72, 0x6}, [{0xdd, 0x1f, "b32cae2bf99dc87a60d47aec103bbffea56b0df2c0c137be24a969ceaf0621"}, {0xdd, 0x24, "2afc2fa14426f7c63874fb2e5806a90ccc719b9f850e62038c66a1a8c3d81caeb65ef8b3"}, {0xdd, 0x51, "64163408efc3435e758edfddedd9694377bf56b47882d63e39a6d8cd7d26f7f61482d14855e31c66d11419b2c30201072acdea7978a6a2c611b5877e373d90e906f86359e464912bd24aad692ac615d41d"}, {0xdd, 0x13, "04b4e50d038cded66bf0aa262c654132de9589"}]}}]}, 0x100}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=@raw=[@printk], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=@raw=[@jmp, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38}}, @ringbuf_query, @jmp, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @btf_id], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x1, 0x0, 0xf, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x2, 0x0, 0x7}, {0x0, 0x3, 0x6}, {0x0, 0x1}, {0x0, 0x0, 0x5, 0x5}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r12, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x2c}}, 0x8000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r14, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.493041419s ago: executing program 4 (id=3566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 2.492423809s ago: executing program 2 (id=3567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x5, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='cq_process\x00', r5}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc4}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000540)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x6, 0x2be, &(0x7f0000000300)="$eJzs3EtrE1EUwPHT9JWmtMlCFAXpQTe6GdroWgzSghiw1EZ8gDBtJxoyJiUTKhGxduVW/BAuSpfdFbRfoBt3unHjrhvBhV2IkcyjjzSl1Sadtvn/oMxt7j2ZcyeTcO6QyfqDd8/zWcfImmWJRFU6REQ2RBISkUCHv4247R7Z7o1c7f/55eK9h4/upNLp0QnVsdTktaSqDg59fPGqzx+20itriSfrP5Lf186unV//M/ks52jO0UKxrKZOFb+VzSnb0pmckzdUx23LdCzNFRyr5PUXvf6sXZydrahZmBmIzZYsx1GzUNG8VdFyUculippPzVxBDcPQgZhgP5nFiQkz9Z/B001OBi1SKqXMThHp29WTWQwlIQAAEKr6+j9SK+mbV/8vXVot999fHvTr/5WeRvX/9a/ec+2o/6Mi0vL6f3dF1F4OVf/jhKjV/zH//etaeLw07Dao/wEAAAAAAAAAAAAAAAAAAAAAOAk2qtV4tVqNB9vgr1dEoiIS/B92nmgNXv/2tnXjXtegiP12LjOX8bb+gFURscWSYYnLb/d88NXawb2AWpOQT/a8Hz8/l+l0e1JZybnxIxKXRH18tTp2Oz06op6d8d0S2x6flLicaRyfbBjfI1cub4s3JC6fp6Uotsy45/VW/OsR1Vt303Xxfe44AAAAAABOA0M3NVy/G8Ze/V785vq64fUBb3093HB93iUXusKdOwAAAAAA7cKpvMybtm2VTl0jmOFBo4LvMoSSc7DzgwxekGNweCMHSrW+MSQith5278Flo73GyHiTZhr511Pi3PsPv5p3nG8sR/eZacsa3Uf3CQQAAADgqGwV/cEjN8NNCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANnQUPycW9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+JvAAAA//9JOg68") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8004) setresuid(0xffffffffffffffff, 0xee01, 0xee00) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xe8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) semctl$SETALL(0x0, 0x0, 0x2, 0x0) 2.379176308s ago: executing program 4 (id=3568): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 2.34321684s ago: executing program 4 (id=3570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8ec0, 0x0) fcntl$setpipe(r2, 0x408, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x5, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='cq_process\x00', r5}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc4}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x37, &(0x7f0000000540)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x6, 0x2be, &(0x7f0000000300)="$eJzs3EtrE1EUwPHT9JWmtMlCFAXpQTe6GdroWgzSghiw1EZ8gDBtJxoyJiUTKhGxduVW/BAuSpfdFbRfoBt3unHjrhvBhV2IkcyjjzSl1Sadtvn/oMxt7j2ZcyeTcO6QyfqDd8/zWcfImmWJRFU6REQ2RBISkUCHv4247R7Z7o1c7f/55eK9h4/upNLp0QnVsdTktaSqDg59fPGqzx+20itriSfrP5Lf186unV//M/ks52jO0UKxrKZOFb+VzSnb0pmckzdUx23LdCzNFRyr5PUXvf6sXZydrahZmBmIzZYsx1GzUNG8VdFyUculippPzVxBDcPQgZhgP5nFiQkz9Z/B001OBi1SKqXMThHp29WTWQwlIQAAEKr6+j9SK+mbV/8vXVot999fHvTr/5WeRvX/9a/ec+2o/6Mi0vL6f3dF1F4OVf/jhKjV/zH//etaeLw07Dao/wEAAAAAAAAAAAAAAAAAAAAAOAk2qtV4tVqNB9vgr1dEoiIS/B92nmgNXv/2tnXjXtegiP12LjOX8bb+gFURscWSYYnLb/d88NXawb2AWpOQT/a8Hz8/l+l0e1JZybnxIxKXRH18tTp2Oz06op6d8d0S2x6flLicaRyfbBjfI1cub4s3JC6fp6Uotsy45/VW/OsR1Vt303Xxfe44AAAAAABOA0M3NVy/G8Ze/V785vq64fUBb3093HB93iUXusKdOwAAAAAA7cKpvMybtm2VTl0jmOFBo4LvMoSSc7DzgwxekGNweCMHSrW+MSQith5278Flo73GyHiTZhr511Pi3PsPv5p3nG8sR/eZacsa3Uf3CQQAAADgqGwV/cEjN8NNCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANnQUPycW9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+JvAAAA//9JOg68") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8004) setresuid(0xffffffffffffffff, 0xee01, 0xee00) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0xe8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) semctl$SETALL(0x0, 0x0, 0x2, 0x0) 2.100954548s ago: executing program 1 (id=3574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x82, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400000002010104000000000000000000000000060012400000000008001a40000000001885923f5e52040db11c9cce3f44f242bf70b736f751175bc53761b396efc14aabaeb0e4ed76c7dae6cf18aac133c4fb79e0209d35e41dc16bc9f5a67a3a72"], 0x24}}, 0x0) 2.018782974s ago: executing program 1 (id=3576): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40102, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) splice(r1, 0x0, r3, 0x0, 0x1800, 0x0) 1.166380156s ago: executing program 1 (id=3588): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='hrtimer_init\x00', r2}, 0x10) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 902.677485ms ago: executing program 3 (id=3593): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000006c0)=""/152}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 817.133371ms ago: executing program 3 (id=3594): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, r1, 0x0) getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523) 815.290011ms ago: executing program 3 (id=3596): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 787.655353ms ago: executing program 3 (id=3597): sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0xcc, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24008805}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 725.788217ms ago: executing program 3 (id=3599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 724.657168ms ago: executing program 3 (id=3601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x9, 0x270, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'rose0\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x6000000, 0x208, 0x270, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @private0, @loopback, @mcast2, @remote, @private0, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x10c, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x2, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 720.919278ms ago: executing program 0 (id=3602): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x7f0, &(0x7f0000001900)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x810) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) utime(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x6, 0x3}) 289.103719ms ago: executing program 1 (id=3603): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) fallocate(r0, 0x0, 0x0, 0x10000) r1 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140)) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x14) 285.3126ms ago: executing program 0 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfb, 0xf7, 0x8000, 0xfffffffa, 0x2, 0x8, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x8, 0x101, 0x400, 0x1, 0x1, 0x4, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0xb, 0xb, 0x5, 0x0, 0xa, 0xffffff67, 0x8}}, {0x14, 0x2, [0x200, 0x92d3, 0x80, 0xfff, 0xfff, 0x1, 0xff, 0x8]}}]}]}, 0xe0}}, 0x0) 232.897053ms ago: executing program 0 (id=3604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) 193.628296ms ago: executing program 0 (id=3605): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="01", 0x1, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x6) 179.183827ms ago: executing program 0 (id=3606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x171, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60001200013b0000fc010000000000000000000000000000fe8800000000000000000000000000012b02"], 0x0) 148.424829ms ago: executing program 0 (id=3607): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x37) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000080601040000000000000000050000090900020073797a31000000000900020073797a32000000000900022b00797a30000700000900020073797a30000000000500010007"], 0x54}, 0x1, 0x0, 0x0, 0x240084d0}, 0x4008010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$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") 0s ago: executing program 1 (id=3608): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) kernel console output (not intermixed with test programs): [ 188.177741][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.233057][T12546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.289632][T12546] veth0_vlan: entered promiscuous mode [ 188.297614][T12546] veth1_vlan: entered promiscuous mode [ 188.311307][T12546] veth0_macvtap: entered promiscuous mode [ 188.319017][T12546] veth1_macvtap: entered promiscuous mode [ 188.328795][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.339267][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.349160][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.359577][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.369436][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.380058][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.389917][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.400341][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.410202][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.420751][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.431411][T12546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.442682][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.453196][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.463025][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.473476][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.483347][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.493765][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.503555][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.514012][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.523911][T12546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.534312][T12546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.545507][T12546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.555907][T12546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.564726][T12546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.573499][T12546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.582279][T12546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.647571][T12587] loop3: detected capacity change from 0 to 512 [ 188.655186][T12587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.674669][T12587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.687218][T12587] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.715157][T12546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.746007][T12594] loop3: detected capacity change from 0 to 1024 [ 188.752615][T12594] EXT4-fs: Ignoring removed nobh option [ 188.828689][T12603] loop3: detected capacity change from 0 to 512 [ 188.844880][T12603] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.895941][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 188.895955][ T29] audit: type=1326 audit(2000000105.580:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 188.925602][ T29] audit: type=1326 audit(2000000105.580:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 188.949174][ T29] audit: type=1326 audit(2000000105.580:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 188.972636][ T29] audit: type=1326 audit(2000000105.580:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 188.996180][ T29] audit: type=1326 audit(2000000105.580:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 189.019742][ T29] audit: type=1326 audit(2000000105.580:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 189.043225][ T29] audit: type=1326 audit(2000000105.580:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 189.067144][ T29] audit: type=1326 audit(2000000105.580:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 189.090814][ T29] audit: type=1326 audit(2000000105.580:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 189.114250][ T29] audit: type=1326 audit(2000000105.580:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12608 comm="syz.1.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 189.160666][T12614] loop3: detected capacity change from 0 to 764 [ 189.307761][T12628] syz.3.3041[12628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.307812][T12628] syz.3.3041[12628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.429924][T12645] loop1: detected capacity change from 0 to 1024 [ 189.518393][T12645] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 189.549969][T12645] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 189.562257][T12645] EXT4-fs (loop1): This should not happen!! Data will be lost [ 189.562257][T12645] [ 189.571988][T12645] EXT4-fs (loop1): Total free blocks count 0 [ 189.578037][T12645] EXT4-fs (loop1): Free/Dirty block details [ 189.583951][T12645] EXT4-fs (loop1): free_blocks=68451041280 [ 189.589832][T12645] EXT4-fs (loop1): dirty_blocks=16 [ 189.594940][T12645] EXT4-fs (loop1): Block reservation details [ 189.600911][T12645] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 189.681321][T12665] syz.1.3055[12665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.681418][T12665] syz.1.3055[12665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.717300][T12667] loop3: detected capacity change from 0 to 128 [ 189.736114][T12667] vfat: Unknown parameter '' [ 190.545259][T12696] syz.2.3068[12696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.545305][T12696] syz.2.3068[12696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.727527][T12709] loop1: detected capacity change from 0 to 128 [ 190.754080][T12709] vfat: Unknown parameter '' [ 192.668658][T12735] syz.4.3082[12735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.668743][T12735] syz.4.3082[12735] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.776526][T12745] loop3: detected capacity change from 0 to 1024 [ 192.844915][T12759] __nla_validate_parse: 8 callbacks suppressed [ 192.844930][T12759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3094'. [ 192.844990][T12757] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.853613][T12759] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.860312][T12757] vhci_hcd: invalid port number 23 [ 192.867301][T12759] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.867341][T12759] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.867371][T12759] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 192.923363][T12759] geneve2: entered allmulticast mode [ 192.986575][T12762] syzkaller0: entered promiscuous mode [ 192.992190][T12762] syzkaller0: entered allmulticast mode [ 193.097531][T12767] loop3: detected capacity change from 0 to 1024 [ 193.104863][T12767] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 193.830621][T12783] chnl_net:caif_netlink_parms(): no params data found [ 193.880203][T12783] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.887395][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.896724][T12783] bridge_slave_0: entered allmulticast mode [ 193.903230][T12783] bridge_slave_0: entered promiscuous mode [ 193.924844][ T3937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.938763][T12783] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.945931][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.954524][T12783] bridge_slave_1: entered allmulticast mode [ 193.960922][T12783] bridge_slave_1: entered promiscuous mode [ 193.999028][ T3937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.012844][T12783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.028244][T12783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.054282][ T3937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.069885][T12783] team0: Port device team_slave_0 added [ 194.076499][T12783] team0: Port device team_slave_1 added [ 194.084703][T12546] EXT4-fs unmount: 9 callbacks suppressed [ 194.084745][T12546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.104138][ T3937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.120792][T12783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.127877][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.153852][T12783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.165042][T12783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.172010][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.198333][T12783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.226346][T12783] hsr_slave_0: entered promiscuous mode [ 194.232232][T12783] hsr_slave_1: entered promiscuous mode [ 194.238186][T12783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.245760][T12783] Cannot create hsr debugfs directory [ 194.268725][ T3937] bridge_slave_1: left allmulticast mode [ 194.274388][ T3937] bridge_slave_1: left promiscuous mode [ 194.280023][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.287741][ T3937] bridge_slave_0: left allmulticast mode [ 194.293473][ T3937] bridge_slave_0: left promiscuous mode [ 194.299093][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.425018][ T3937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.435402][ T3937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.445400][ T3937] bond0 (unregistering): Released all slaves [ 194.510898][ T3937] hsr_slave_0: left promiscuous mode [ 194.516533][ T3937] hsr_slave_1: left promiscuous mode [ 194.522155][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.529614][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.537354][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.544749][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.553422][ T3937] veth1_macvtap: left promiscuous mode [ 194.558942][ T3937] veth0_macvtap: left promiscuous mode [ 194.564470][ T3937] veth1_vlan: left promiscuous mode [ 194.569699][ T3937] veth0_vlan: left promiscuous mode [ 194.653907][ T3937] team0 (unregistering): Port device team_slave_1 removed [ 194.663407][ T3937] team0 (unregistering): Port device team_slave_0 removed [ 194.728246][T12811] chnl_net:caif_netlink_parms(): no params data found [ 194.761047][T12811] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.768250][T12811] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.775548][T12811] bridge_slave_0: entered allmulticast mode [ 194.781854][T12811] bridge_slave_0: entered promiscuous mode [ 194.790049][T12811] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.797176][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.804328][T12811] bridge_slave_1: entered allmulticast mode [ 194.810216][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888116820000: rx timeout, send abort [ 194.810267][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888116820e00: rx timeout, send abort [ 194.810317][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888116820000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.810346][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888116820e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.866526][T12811] bridge_slave_1: entered promiscuous mode [ 194.905585][T12811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.925962][T12811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.949568][T12811] team0: Port device team_slave_0 added [ 194.956139][T12811] team0: Port device team_slave_1 added [ 194.972607][T12811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.979710][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.005715][T12811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.019045][T12811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.026060][T12811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.052313][T12811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.081078][T12811] hsr_slave_0: entered promiscuous mode [ 195.087843][T12811] hsr_slave_1: entered promiscuous mode [ 195.093705][T12811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.101266][T12811] Cannot create hsr debugfs directory [ 195.136163][T12783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.147072][T12783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.157260][T12783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.167495][T12783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.200308][T12811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.210648][T12811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 195.245161][T12783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.256250][T12811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.266611][T12811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 195.282468][T12783] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.292362][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.299424][ T3939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.309710][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.316766][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.328221][T12811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.338534][T12811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 195.386461][T12811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.396859][T12811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 195.412585][T12783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.457571][ T3937] bridge_slave_1: left allmulticast mode [ 195.463380][ T3937] bridge_slave_1: left promiscuous mode [ 195.469103][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.477072][ T3937] bridge_slave_0: left allmulticast mode [ 195.482710][ T3937] bridge_slave_0: left promiscuous mode [ 195.488435][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.576837][ T3937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.587073][ T3937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.596867][ T3937] bond0 (unregistering): Released all slaves [ 195.622561][T12811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.632213][T12811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.640509][T12811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.649913][T12783] veth0_vlan: entered promiscuous mode [ 195.656147][T12811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.667662][T12783] veth1_vlan: entered promiscuous mode [ 195.675450][ T3937] hsr_slave_0: left promiscuous mode [ 195.681093][ T3937] hsr_slave_1: left promiscuous mode [ 195.686816][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.694249][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.701886][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.709301][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.718133][ T3937] veth1_macvtap: left promiscuous mode [ 195.723683][ T3937] veth0_macvtap: left promiscuous mode [ 195.729140][ T3937] veth1_vlan: left promiscuous mode [ 195.734441][ T3937] veth0_vlan: left promiscuous mode [ 195.805670][ T3937] team0 (unregistering): Port device team_slave_1 removed [ 195.817039][ T3937] team0 (unregistering): Port device team_slave_0 removed [ 195.868148][T12783] veth0_macvtap: entered promiscuous mode [ 195.876497][T12783] veth1_macvtap: entered promiscuous mode [ 195.886800][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.897397][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.907205][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.917648][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.927487][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.937979][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.947824][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.958249][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.972422][T12783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.980622][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.991125][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.000928][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.011462][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.021294][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.031790][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.041379][T12863] loop4: detected capacity change from 0 to 8192 [ 196.041607][T12783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.058316][T12783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.069016][T12783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.091582][T12783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.100923][T12783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.109837][T12783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.118583][T12783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.127573][T12863] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 196.132782][T12863] loop4: partition table partially beyond EOD, truncated [ 196.140095][T12863] loop4: p1 start 277760 is beyond EOD, truncated [ 196.145940][T12811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.146602][T12863] loop4: p2 start 6684676 is beyond EOD, truncated [ 196.160542][T12863] loop4: p5 start 6684676 is beyond EOD, truncated [ 196.173471][T12811] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.198507][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.205573][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.214329][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.221444][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.259877][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3104'. [ 196.268858][T12871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3104'. [ 196.318947][T12811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.419330][T12811] veth0_vlan: entered promiscuous mode [ 196.435666][T12811] veth1_vlan: entered promiscuous mode [ 196.452709][T12811] veth0_macvtap: entered promiscuous mode [ 196.460689][T12811] veth1_macvtap: entered promiscuous mode [ 196.471749][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.482203][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.492032][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.502580][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.512496][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.523015][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.532828][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.543258][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.553031][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.563489][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.575084][T12811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.586067][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.596558][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.606350][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.616754][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.626658][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.637095][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.646958][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.657456][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.667335][T12811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.677828][T12811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.689590][T12811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.700381][T12811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.709223][T12811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.718036][T12811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.726800][T12811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.737303][T12902] @: renamed from bond0 (while UP) [ 198.058155][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3137'. [ 198.068061][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 198.068073][ T29] audit: type=1326 audit(2000000114.750:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.077874][T12932] cgroup: subsys name conflicts with all [ 198.097733][ T29] audit: type=1326 audit(2000000114.750:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.100395][T12928] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.131612][ T29] audit: type=1326 audit(2000000114.780:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.135641][T12928] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.135673][T12928] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.135765][T12928] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 198.159186][ T29] audit: type=1326 audit(2000000114.780:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.187395][T12928] geneve2: entered allmulticast mode [ 198.209009][ T29] audit: type=1326 audit(2000000114.780:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.239600][ T29] audit: type=1326 audit(2000000114.850:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.263096][ T29] audit: type=1326 audit(2000000114.850:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.286756][ T29] audit: type=1326 audit(2000000114.850:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.310242][ T29] audit: type=1326 audit(2000000114.900:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 198.333765][ T29] audit: type=1326 audit(2000000114.900:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12929 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f601f22cef9 code=0x7ffc0000 [ 205.549374][T12965] netem: change failed [ 205.573760][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3153'. [ 205.577467][T12943] chnl_net:caif_netlink_parms(): no params data found [ 205.618912][T12978] loop3: detected capacity change from 0 to 256 [ 205.626140][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.633347][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.640557][T12943] bridge_slave_0: entered allmulticast mode [ 205.647958][T12943] bridge_slave_0: entered promiscuous mode [ 205.654840][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.661894][T12943] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.669363][T12943] bridge_slave_1: entered allmulticast mode [ 205.675890][T12943] bridge_slave_1: entered promiscuous mode [ 205.684127][ T3937] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 205.694031][ T3937] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.714461][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 205.714486][ T29] audit: type=1400 audit(2000000122.400:6462): avc: denied { read } for pid=12979 comm="syz.3.3156" path="socket:[48995]" dev="sockfs" ino=48995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 205.716425][T12943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.755118][T12943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.770454][ T3937] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 205.780210][ T3937] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.795364][T12943] team0: Port device team_slave_0 added [ 205.801817][T12943] team0: Port device team_slave_1 added [ 205.816049][T12943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.822985][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.848893][T12943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.860795][ T3937] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 205.870498][ T3937] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.880992][T12943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.887984][T12943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.913906][T12943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.937149][T12943] hsr_slave_0: entered promiscuous mode [ 205.943260][T12943] hsr_slave_1: entered promiscuous mode [ 205.949200][T12943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.956788][T12943] Cannot create hsr debugfs directory [ 205.963287][ T3937] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 205.972970][ T3937] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.045182][ T3937] bridge_slave_1: left allmulticast mode [ 206.050830][ T3937] bridge_slave_1: left promiscuous mode [ 206.056538][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.064098][ T3937] bridge_slave_0: left allmulticast mode [ 206.069735][ T3937] bridge_slave_0: left promiscuous mode [ 206.075442][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.165703][ T3937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.175871][ T3937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.185788][ T3937] bond0 (unregistering): Released all slaves [ 206.193981][ T3937] bond1 (unregistering): Released all slaves [ 206.245256][ T3937] tipc: Left network mode [ 206.301711][T12986] syzkaller0: entered promiscuous mode [ 206.307250][T12986] syzkaller0: entered allmulticast mode [ 206.335023][ T3937] hsr_slave_0: left promiscuous mode [ 206.340953][ T3937] hsr_slave_1: left promiscuous mode [ 206.346772][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.354252][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.362574][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.370061][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.378634][ T3937] veth1_macvtap: left promiscuous mode [ 206.384155][ T3937] veth0_macvtap: left promiscuous mode [ 206.389665][ T3937] veth1_vlan: left promiscuous mode [ 206.394940][ T3937] veth0_vlan: left promiscuous mode [ 206.421672][ T29] audit: type=1400 audit(2000000123.100:6463): avc: denied { shutdown } for pid=12990 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.458247][ T29] audit: type=1400 audit(2000000123.140:6464): avc: denied { getopt } for pid=12992 comm="syz.1.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.504910][T12998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3162'. [ 206.513988][T12998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3162'. [ 206.538252][ T3937] team0 (unregistering): Port device team_slave_1 removed [ 206.538750][T13000] loop1: detected capacity change from 0 to 2048 [ 206.552138][ T3937] team0 (unregistering): Port device team_slave_0 removed [ 206.624399][T13008] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 206.664544][ T29] audit: type=1400 audit(2000000123.350:6465): avc: denied { recv } for pid=40 comm="kworker/u8:2" saddr=10.128.0.163 src=30030 daddr=10.128.1.228 dest=49436 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 206.690626][ T29] audit: type=1400 audit(2000000123.350:6466): avc: denied { read write } for pid=12034 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.714901][ T29] audit: type=1400 audit(2000000123.350:6467): avc: denied { open } for pid=12034 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.739096][ T29] audit: type=1400 audit(2000000123.350:6468): avc: denied { ioctl } for pid=12034 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.764892][ T29] audit: type=1400 audit(2000000123.350:6469): avc: denied { map_create } for pid=13014 comm="syz.1.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.784135][ T29] audit: type=1400 audit(2000000123.350:6470): avc: denied { map_read map_write } for pid=13014 comm="syz.1.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.804206][ T29] audit: type=1400 audit(2000000123.350:6471): avc: denied { prog_load } for pid=13014 comm="syz.1.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.847771][T12943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.874743][T13020] syzkaller0: entered promiscuous mode [ 206.880227][T13020] syzkaller0: entered allmulticast mode [ 206.886812][T12943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.895458][T12943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.916751][T12943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.957297][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.981700][T12943] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.991113][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.998185][ T3939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.009920][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.017058][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.041981][T12943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.052431][T12943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.138971][T12943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.204772][T12943] veth0_vlan: entered promiscuous mode [ 207.212392][T12943] veth1_vlan: entered promiscuous mode [ 207.226802][T12943] veth0_macvtap: entered promiscuous mode [ 207.234291][T12943] veth1_macvtap: entered promiscuous mode [ 207.236313][T13059] syz.0.3185[13059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.240098][T13059] syz.0.3185[13059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.244277][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.273301][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.283193][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.293623][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.303690][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.314148][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.323997][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.334491][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.344296][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.354798][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.367473][T12943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.379447][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.389997][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.400019][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.410498][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.420504][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.430934][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.440752][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.451169][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.461050][T12943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.471543][T12943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.484107][T12943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.494863][T12943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.503705][T12943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.512503][T12943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.521465][T12943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.812036][T13097] tipc: Started in network mode [ 207.817058][T13097] tipc: Node identity 1295cb8aefb1, cluster identity 4711 [ 207.824320][T13097] tipc: Enabled bearer , priority 21 [ 207.835415][T13097] €Â: renamed from syzkaller0 [ 207.841741][T13097] tipc: Disabling bearer [ 207.923684][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'. [ 208.110534][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.134131][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.375024][T13117] syz.0.3207[13117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.375080][T13117] syz.0.3207[13117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.388775][T13117] syz.0.3207[13117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.400793][T13117] syz.0.3207[13117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.589727][T13133] loop1: detected capacity change from 0 to 1024 [ 208.700189][T13133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.708889][T12943] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 208.723154][T12943] CPU: 1 UID: 0 PID: 12943 Comm: syz-executor Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 208.734430][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 208.744522][T12943] Call Trace: [ 208.747786][T12943] [ 208.750817][T12943] dump_stack_lvl+0xf2/0x150 [ 208.755404][T12943] dump_stack+0x15/0x20 [ 208.759545][T12943] dump_header+0x83/0x2d0 [ 208.763878][T12943] oom_kill_process+0x341/0x4c0 [ 208.768724][T12943] out_of_memory+0x9af/0xbe0 [ 208.773324][T12943] ? __rcu_read_unlock+0x4e/0x70 [ 208.778262][T12943] mem_cgroup_out_of_memory+0x13e/0x190 [ 208.783805][T12943] try_charge_memcg+0x51b/0x810 [ 208.788649][T12943] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 208.794742][T12943] __read_swap_cache_async+0x2b7/0x520 [ 208.800197][T12943] swap_cluster_readahead+0x276/0x3f0 [ 208.805639][T12943] swapin_readahead+0xe4/0x760 [ 208.810448][T12943] ? __filemap_get_folio+0x420/0x5b0 [ 208.815751][T12943] ? swap_cache_get_folio+0x77/0x210 [ 208.821051][T12943] do_swap_page+0x3da/0x1ef0 [ 208.825679][T12943] ? hrtimer_start_range_ns+0x53d/0x580 [ 208.831250][T12943] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 208.836716][T12943] ? __rcu_read_lock+0x36/0x50 [ 208.841522][T12943] ? pte_offset_map_nolock+0x124/0x1d0 [ 208.846977][T12943] handle_mm_fault+0x8cb/0x2a30 [ 208.851828][T12943] exc_page_fault+0x3b9/0x650 [ 208.856624][T12943] asm_exc_page_fault+0x26/0x30 [ 208.861477][T12943] RIP: 0033:0x7f517276efa5 [ 208.865876][T12943] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 15 15 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 208.885479][T12943] RSP: 002b:00007ffcdd8f85a8 EFLAGS: 00010246 [ 208.891535][T12943] RAX: 0000000000000000 RBX: 000000000000000f RCX: 00007f517276efa3 [ 208.899514][T12943] RDX: 00007ffcdd8f85c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.907496][T12943] RBP: 00007ffcdd8f861c R08: 0000000022eba944 R09: 7fffffffffffffff [ 208.915477][T12943] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 208.923451][T12943] R13: 0000000000032c78 R14: 0000000000032c2d R15: 00007ffcdd8f8670 [ 208.931459][T12943] [ 208.934522][T12943] memory: usage 307200kB, limit 307200kB, failcnt 10723 [ 208.941452][T12943] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 208.950631][T12943] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 208.958300][T12943] Memory cgroup stats for /syz2: [ 209.016230][T12943] cache 86016 [ 209.024588][T12943] rss 0 [ 209.027404][T12943] shmem 0 [ 209.030343][T12943] mapped_file 86016 [ 209.034177][T12943] dirty 86016 [ 209.037459][T12943] writeback 0 [ 209.040740][T12943] workingset_refault_anon 2 [ 209.045262][T12943] workingset_refault_file 62 [ 209.049932][T12943] swap 192512 [ 209.053272][T12943] swapcached 8192 [ 209.056897][T12943] pgpgin 223402 [ 209.060341][T12943] pgpgout 223379 [ 209.063962][T12943] pgfault 213285 [ 209.067494][T12943] pgmajfault 15 [ 209.070937][T12943] inactive_anon 0 [ 209.074598][T12943] active_anon 8192 [ 209.078301][T12943] inactive_file 0 [ 209.081949][T12943] active_file 86016 [ 209.085842][T12943] unevictable 0 [ 209.089318][T12943] hierarchical_memory_limit 314572800 [ 209.094689][T12943] hierarchical_memsw_limit 9223372036854771712 [ 209.100843][T12943] total_cache 86016 [ 209.104675][T12943] total_rss 0 [ 209.108020][T12943] total_shmem 0 [ 209.111535][T12943] total_mapped_file 86016 [ 209.115868][T12943] total_dirty 86016 [ 209.119666][T12943] total_writeback 0 [ 209.123493][T12943] total_workingset_refault_anon 2 [ 209.128505][T12943] total_workingset_refault_file 62 [ 209.133691][T12943] total_swap 192512 [ 209.137480][T12943] total_swapcached 8192 [ 209.141620][T12943] total_pgpgin 223402 [ 209.145680][T12943] total_pgpgout 223379 [ 209.149751][T12943] total_pgfault 213285 [ 209.153830][T12943] total_pgmajfault 15 [ 209.157937][T12943] total_inactive_anon 0 [ 209.162093][T12943] total_active_anon 8192 [ 209.166361][T12943] total_inactive_file 0 [ 209.170499][T12943] total_active_file 86016 [ 209.174832][T12943] total_unevictable 0 [ 209.178859][T12943] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3203,pid=13106,uid=0 [ 209.193851][T12943] Memory cgroup out of memory: Killed process 13106 (syz.2.3203) total-vm:89116kB, anon-rss:568kB, file-rss:16048kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 209.211042][T13107] syz.2.3203 (13107) used greatest stack depth: 8944 bytes left [ 209.248308][T12034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.349537][T13154] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.366300][T13154] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 209.392494][T13174] loop1: detected capacity change from 0 to 256 [ 209.457174][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3228'. [ 209.485801][T13182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3228'. [ 209.499019][T13182] loop4: detected capacity change from 0 to 128 [ 209.511638][T13182] vfat: Unknown parameter '' [ 209.518169][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3237'. [ 209.532780][T13184] syz.3.3236[13184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.532896][T13184] syz.3.3236[13184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.614712][T13190] syzkaller0: entered promiscuous mode [ 209.631573][T13190] syzkaller0: entered allmulticast mode [ 209.786396][T13210] 9pnet: p9_errstr2errno: server reported unknown error JS 9Pu³ [ 209.859957][T13215] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 209.877487][T13215] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 209.905060][T13217] syzkaller0: entered promiscuous mode [ 209.910548][T13217] syzkaller0: entered allmulticast mode [ 209.978129][T13224] bridge1: entered promiscuous mode [ 209.983482][T13224] bridge1: entered allmulticast mode [ 210.086125][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3249'. [ 210.095981][T13233] pim6reg1: entered promiscuous mode [ 210.101283][T13233] pim6reg1: entered allmulticast mode [ 210.216469][T13241] syz.0.3255[13241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.216520][T13241] syz.0.3255[13241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.242308][T13241] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 210.270661][T13187] syz.1.3237 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 210.281707][T13187] CPU: 0 UID: 0 PID: 13187 Comm: syz.1.3237 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 210.292466][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.302507][T13187] Call Trace: [ 210.305832][T13187] [ 210.308795][T13187] dump_stack_lvl+0xf2/0x150 [ 210.313379][T13187] dump_stack+0x15/0x20 [ 210.317568][T13187] dump_header+0x83/0x2d0 [ 210.321967][T13187] oom_kill_process+0x341/0x4c0 [ 210.326837][T13187] out_of_memory+0x9af/0xbe0 [ 210.331567][T13187] ? __rcu_read_unlock+0x4e/0x70 [ 210.336500][T13187] mem_cgroup_out_of_memory+0x13e/0x190 [ 210.342042][T13187] try_charge_memcg+0x51b/0x810 [ 210.346908][T13187] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 210.353069][T13187] __read_swap_cache_async+0x2b7/0x520 [ 210.358524][T13187] swap_cluster_readahead+0x276/0x3f0 [ 210.363944][T13187] swapin_readahead+0xe4/0x760 [ 210.368766][T13187] ? __filemap_get_folio+0x420/0x5b0 [ 210.374107][T13187] ? swap_cache_get_folio+0x77/0x210 [ 210.379385][T13187] do_swap_page+0x3da/0x1ef0 [ 210.383968][T13187] ? mtree_range_walk+0x36/0x460 [ 210.388898][T13187] ? __rcu_read_lock+0x36/0x50 [ 210.393847][T13187] ? pte_offset_map_nolock+0x124/0x1d0 [ 210.399295][T13187] handle_mm_fault+0x8cb/0x2a30 [ 210.404145][T13187] exc_page_fault+0x3b9/0x650 [ 210.408913][T13187] asm_exc_page_fault+0x26/0x30 [ 210.413763][T13187] RIP: 0033:0x7f5a628509cc [ 210.418164][T13187] Code: 72 64 0f 1f 40 00 69 3d e6 4c e1 00 e8 03 00 00 48 8d 1d c7 55 2e 00 e8 92 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 210.437758][T13187] RSP: 002b:00007ffd0a8a2600 EFLAGS: 00010202 [ 210.443870][T13187] RAX: 0000000000000000 RBX: 00007f5a62b37060 RCX: 0000000000000000 [ 210.451827][T13187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555708fb808 [ 210.459822][T13187] RBP: 00007f5a62b37a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 210.467778][T13187] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000335a4 [ 210.475733][T13187] R13: 00007ffd0a8a2700 R14: 0000000000000032 R15: ffffffffffffffff [ 210.483696][T13187] [ 210.486863][T13187] memory: usage 307200kB, limit 307200kB, failcnt 174 [ 210.493785][T13187] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 210.501690][T13187] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 210.508977][T13187] Memory cgroup stats for /syz1: [ 210.553380][T13187] cache 122880 [ 210.561732][T13187] rss 0 [ 210.564514][T13187] shmem 0 [ 210.567435][T13187] mapped_file 122880 [ 210.571312][T13187] dirty 122880 [ 210.574698][T13187] writeback 0 [ 210.577964][T13187] workingset_refault_anon 47 [ 210.582534][T13187] workingset_refault_file 63 [ 210.587134][T13187] swap 208896 [ 210.590404][T13187] swapcached 4096 [ 210.594037][T13187] pgpgin 159193 [ 210.597611][T13187] pgpgout 159162 [ 210.601136][T13187] pgfault 197351 [ 210.604725][T13187] pgmajfault 16 [ 210.608168][T13187] inactive_anon 4096 [ 210.612047][T13187] active_anon 0 [ 210.615560][T13187] inactive_file 122880 [ 210.619608][T13187] active_file 0 [ 210.623181][T13187] unevictable 0 [ 210.626626][T13187] hierarchical_memory_limit 314572800 [ 210.631978][T13187] hierarchical_memsw_limit 9223372036854771712 [ 210.638256][T13187] total_cache 122880 [ 210.642128][T13187] total_rss 0 [ 210.645420][T13187] total_shmem 0 [ 210.648863][T13187] total_mapped_file 122880 [ 210.653274][T13187] total_dirty 122880 [ 210.657288][T13187] total_writeback 0 [ 210.661179][T13187] total_workingset_refault_anon 47 [ 210.666321][T13187] total_workingset_refault_file 63 [ 210.671429][T13187] total_swap 208896 [ 210.675381][T13187] total_swapcached 4096 [ 210.679575][T13187] total_pgpgin 159224 [ 210.683570][T13187] total_pgpgout 159193 [ 210.687630][T13187] total_pgfault 197394 [ 210.691688][T13187] total_pgmajfault 16 [ 210.695780][T13187] total_inactive_anon 4096 [ 210.700188][T13187] total_active_anon 0 [ 210.704171][T13187] total_inactive_file 122880 [ 210.708810][T13187] total_active_file 0 [ 210.712769][T13187] total_unevictable 0 [ 210.714547][T13242] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 210.716741][T13187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3237,pid=13187,uid=0 [ 210.739940][T13187] Memory cgroup out of memory: Killed process 13187 (syz.1.3237) total-vm:89116kB, anon-rss:572kB, file-rss:16304kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 210.760978][T13247] 9pnet: p9_errstr2errno: server reported unknown error JS 9Pu³ [ 210.801376][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 210.801389][ T29] audit: type=1400 audit(2000000127.480:6604): avc: denied { create } for pid=13250 comm="syz.2.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 210.863518][ T29] audit: type=1326 audit(2000000127.520:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13250 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 210.887099][ T29] audit: type=1326 audit(2000000127.520:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13250 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 210.910712][ T29] audit: type=1326 audit(2000000127.520:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13250 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 210.934200][ T29] audit: type=1326 audit(2000000127.520:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13250 comm="syz.2.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 211.014758][T13259] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 211.043129][ T29] audit: type=1400 audit(2000000127.670:6609): avc: denied { create } for pid=13256 comm="syz.3.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.062765][ T29] audit: type=1400 audit(2000000127.670:6610): avc: denied { bind } for pid=13256 comm="syz.3.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.082231][ T29] audit: type=1400 audit(2000000127.670:6611): avc: denied { name_bind } for pid=13256 comm="syz.3.3263" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 211.102907][ T29] audit: type=1400 audit(2000000127.670:6612): avc: denied { node_bind } for pid=13256 comm="syz.3.3263" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 211.123665][ T29] audit: type=1400 audit(2000000127.700:6613): avc: denied { setopt } for pid=13254 comm="syz.2.3262" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.363669][T13269] IPVS: stopping master sync thread 13259 ... [ 211.489008][T13273] pim6reg1: entered promiscuous mode [ 211.494424][T13273] pim6reg1: entered allmulticast mode [ 211.526360][T13275] bridge1: entered promiscuous mode [ 211.531577][T13275] bridge1: entered allmulticast mode [ 211.618340][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 211.857373][T13291] bridge_slave_0: left allmulticast mode [ 211.863245][T13291] bridge_slave_0: left promiscuous mode [ 211.869042][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.892104][T13291] bridge_slave_1: left allmulticast mode [ 211.897805][T13291] bridge_slave_1: left promiscuous mode [ 211.903469][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.922634][T13291] bond0: (slave bond_slave_0): Releasing backup interface [ 211.951293][T13291] bond0: (slave bond_slave_1): Releasing backup interface [ 211.980858][T13291] team0: Port device team_slave_0 removed [ 211.996745][T13291] team0: Port device team_slave_1 removed [ 212.015141][T13291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.022537][T13291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.041001][T13291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.048453][T13291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.127662][T13300] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 212.220456][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 212.229346][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 212.398379][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 212.409541][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 212.418502][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 212.517460][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 212.526364][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 212.586858][T13350] loop1: detected capacity change from 0 to 128 [ 212.593496][T13350] vfat: Unknown parameter '' [ 213.333843][T13358] batman_adv: batadv0: Adding interface: ipvlan2 [ 213.340234][T13358] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.365652][T13358] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 213.559186][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3300'. [ 213.584807][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3300'. [ 213.616307][T13388] loop3: detected capacity change from 0 to 128 [ 213.633357][T13388] vfat: Unknown parameter '' [ 213.634436][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 213.835631][T13400] loop4: detected capacity change from 0 to 8192 [ 213.880745][T13406] SELinux: failed to load policy [ 214.061670][T13417] loop4: detected capacity change from 0 to 512 [ 214.075359][T13417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.088192][T13417] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.126319][T11888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.255944][T13425] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 214.411399][T13433] loop4: detected capacity change from 0 to 128 [ 214.417805][T13433] vfat: Unknown parameter '' [ 214.767210][T13443] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 214.912868][T13445] IPVS: stopping master sync thread 13443 ... [ 215.603631][T13457] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 215.658790][T13459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13459 comm=syz.2.3334 [ 216.031623][T13469] syz.1.3338[13469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.031701][T13469] syz.1.3338[13469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.044872][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 216.044886][ T29] audit: type=1326 audit(2000000132.730:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.085948][ T29] audit: type=1326 audit(2000000132.730:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.109448][ T29] audit: type=1326 audit(2000000132.730:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.132915][ T29] audit: type=1326 audit(2000000132.730:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.156447][ T29] audit: type=1326 audit(2000000132.730:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.180023][ T29] audit: type=1326 audit(2000000132.730:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.203343][ T29] audit: type=1326 audit(2000000132.730:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.226987][ T29] audit: type=1326 audit(2000000132.730:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.250590][ T29] audit: type=1326 audit(2000000132.730:6767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 216.274209][ T29] audit: type=1326 audit(2000000132.730:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13468 comm="syz.1.3338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5a6297cef9 code=0x7ffc0000 [ 218.398522][T13504] loop3: detected capacity change from 0 to 128 [ 218.408304][T13504] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.421257][T13504] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.474525][T12811] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.515782][T13518] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.952792][ T3937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.017204][ T3937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.055795][ T3937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.160049][T13537] chnl_net:caif_netlink_parms(): no params data found [ 219.174820][ T3937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.244792][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.251903][T13537] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.261170][T13537] bridge_slave_0: entered allmulticast mode [ 219.267679][T13537] bridge_slave_0: entered promiscuous mode [ 219.284617][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.285206][T13573] loop1: detected capacity change from 0 to 512 [ 219.291658][T13537] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.298782][T13573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.314896][T13537] bridge_slave_1: entered allmulticast mode [ 219.321770][T13537] bridge_slave_1: entered promiscuous mode [ 219.342209][T13573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.354807][T13573] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.367294][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.387253][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.387791][T12034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.410932][ T3937] bridge_slave_1: left allmulticast mode [ 219.416619][ T3937] bridge_slave_1: left promiscuous mode [ 219.422232][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.431691][ T3937] bridge_slave_0: left allmulticast mode [ 219.437476][ T3937] bridge_slave_0: left promiscuous mode [ 219.440518][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.443252][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.450450][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.464983][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.472529][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.480041][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.487467][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.494917][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.502272][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.509739][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.517222][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.524792][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.532251][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.539858][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.547282][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.554779][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.562247][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.569684][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.577239][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.584773][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.592136][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.599571][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.606948][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.614360][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.621726][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.629177][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.636566][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.643948][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.651455][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.658881][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.666335][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.673716][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.681105][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.688542][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.695903][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.703375][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.710733][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.718091][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.725511][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.732859][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.740231][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.747596][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.754957][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.762348][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.769717][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.777370][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.784871][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.792270][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.799637][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.807040][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.814505][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.821852][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.829212][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.836572][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.844022][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.851473][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.858908][ T3680] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 219.869900][ T3680] hid-generic 0001:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 219.996309][ T3937] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.007498][ T3937] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.018196][ T3937] @ (unregistering): Released all slaves [ 220.045473][T13537] team0: Port device team_slave_0 added [ 220.052374][T13537] team0: Port device team_slave_1 added [ 220.076229][T13629] sd 0:0:1:0: device reset [ 220.089267][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.096344][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.122317][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.134635][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.141563][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.167468][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.194088][T13633] bridge2: entered promiscuous mode [ 220.199309][T13633] bridge2: entered allmulticast mode [ 220.213765][ T3937] hsr_slave_0: left promiscuous mode [ 220.219599][ T3937] hsr_slave_1: left promiscuous mode [ 220.225299][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.232730][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.240326][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.247884][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.257911][ T3937] veth1_macvtap: left promiscuous mode [ 220.263414][ T3937] veth0_macvtap: left promiscuous mode [ 220.269064][ T3937] veth1_vlan: left promiscuous mode [ 220.270129][T13633] __nla_validate_parse: 2 callbacks suppressed [ 220.270140][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 220.274316][ T3937] veth0_vlan: left promiscuous mode [ 220.371791][ T3937] team0 (unregistering): Port device team_slave_1 removed [ 220.382166][ T3937] team0 (unregistering): Port device team_slave_0 removed [ 220.438952][T13537] hsr_slave_0: entered promiscuous mode [ 220.446620][T13537] hsr_slave_1: entered promiscuous mode [ 220.661070][T13668] loop3: detected capacity change from 0 to 512 [ 220.668920][T13668] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3413: casefold flag without casefold feature [ 220.681677][T13668] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3413: couldn't read orphan inode 15 (err -117) [ 220.694443][T13668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.753237][T13668] loop3: detected capacity change from 512 to 64 [ 220.761315][T13668] bio_check_eod: 22 callbacks suppressed [ 220.761325][T13668] syz.3.3413: attempt to access beyond end of device [ 220.761325][T13668] loop3: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 220.780467][T13668] EXT4-fs (loop3): discard request in group:0 block:42 count:1 failed with -5 [ 220.789375][T13668] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 220.797510][T13668] syz.3.3413: attempt to access beyond end of device [ 220.797510][T13668] loop3: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 220.811924][T13668] EXT4-fs (loop3): discard request in group:0 block:41 count:1 failed with -5 [ 220.812149][T13537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.820802][T13668] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 220.821023][T13668] syz.3.3413: attempt to access beyond end of device [ 220.821023][T13668] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 220.848777][T13668] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 220.860081][T13668] Buffer I/O error on device loop3, logical block 255 [ 220.867177][T13668] syz.3.3413: attempt to access beyond end of device [ 220.867177][T13668] loop3: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 220.868705][T13537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.880486][T13668] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 220.880514][T13668] Buffer I/O error on device loop3, logical block 253 [ 220.905110][T13668] Buffer I/O error on device loop3, logical block 254 [ 220.913763][T13537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.920708][T13668] syz.3.3413: attempt to access beyond end of device [ 220.920708][T13668] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 220.933974][T13668] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 220.945076][T13668] Buffer I/O error on device loop3, logical block 37 [ 220.951798][T13668] Buffer I/O error on device loop3, logical block 38 [ 220.958468][T13668] Buffer I/O error on device loop3, logical block 39 [ 220.965138][T13668] Buffer I/O error on device loop3, logical block 40 [ 220.971895][T13668] syz.3.3413: attempt to access beyond end of device [ 220.971895][T13668] loop3: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 220.973440][T13537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.985174][T13668] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 221.003044][T13668] Buffer I/O error on device loop3, logical block 249 [ 221.009806][T13668] Buffer I/O error on device loop3, logical block 250 [ 221.016571][T13668] Buffer I/O error on device loop3, logical block 251 [ 221.023935][T13668] syz.3.3413: attempt to access beyond end of device [ 221.023935][T13668] loop3: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 221.037238][T13668] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 221.038244][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.070755][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.086688][ T3939] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.093758][ T3939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.102702][T12811] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 221.110830][T13677] loop4: detected capacity change from 0 to 2048 [ 221.125134][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.132183][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.152627][T13677] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.154211][T13201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.171174][T13681] bridge2: entered promiscuous mode [ 221.176471][T13681] bridge2: entered allmulticast mode [ 221.184663][T13677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.208333][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 221.208394][ T29] audit: type=1400 audit(2000000137.890:6899): avc: denied { module_load } for pid=13678 comm="syz.2.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 221.273271][T13677] loop4: detected capacity change from 2048 to 0 [ 221.284662][T13677] EXT4-fs (loop4): shut down requested (0) [ 221.293894][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3419'. [ 221.305220][T13677] syz.4.3416: attempt to access beyond end of device [ 221.305220][T13677] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 221.318492][T13677] buffer_io_error: 7 callbacks suppressed [ 221.318570][T13677] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 221.321438][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.340125][T13677] EXT4-fs (loop4): I/O error while writing superblock [ 221.346996][T13677] VFS:Filesystem freeze failed [ 221.419531][T13537] veth0_vlan: entered promiscuous mode [ 221.424076][T11888] syz-executor: attempt to access beyond end of device [ 221.424076][T11888] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 221.427666][T13537] veth1_vlan: entered promiscuous mode [ 221.458595][T11888] syz-executor: attempt to access beyond end of device [ 221.458595][T11888] loop4: rw=524288, sector=20, nr_sectors = 4 limit=0 [ 221.460624][T13537] veth0_macvtap: entered promiscuous mode [ 221.477034][T11888] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #2: block 4: comm syz-executor: unable to read itable block [ 221.491985][T13537] veth1_macvtap: entered promiscuous mode [ 221.492704][T11888] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 221.499987][T13712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13712 comm=syz.1.3424 [ 221.507117][T11888] EXT4-fs (loop4): I/O error while writing superblock [ 221.522873][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.525192][T11888] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 221.535573][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.535584][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.535621][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.535629][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.535640][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.535650][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.583125][ T29] audit: type=1400 audit(2000000138.250:6900): avc: denied { map } for pid=13713 comm="syz.2.3427" path="socket:[52522]" dev="sockfs" ino=52522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 221.584787][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.633257][T11888] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 221.645142][T13537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.653882][T11888] EXT4-fs (loop4): I/O error while writing superblock [ 221.660681][T11888] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 221.672362][T11888] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 221.681789][T11888] EXT4-fs (loop4): I/O error while writing superblock [ 221.688856][ T28] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:1: unable to read itable block [ 221.703440][ T28] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 221.715300][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.719263][ T28] EXT4-fs (loop4): I/O error while writing superblock [ 221.732417][T13712] netlink: 61 bytes leftover after parsing attributes in process `syz.1.3424'. [ 221.733705][T11888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.761143][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.771738][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.781589][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.792060][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.801861][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.812286][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.822207][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.832640][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.851519][T11888] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 221.855752][ T29] audit: type=1326 audit(2000000138.540:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 221.860675][T11888] EXT4-fs (loop4): I/O error while writing superblock [ 221.885814][ T29] audit: type=1326 audit(2000000138.570:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 221.891391][T13537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.913587][ T29] audit: type=1326 audit(2000000138.570:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 221.913609][ T29] audit: type=1326 audit(2000000138.570:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 221.924374][T13537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.944333][ T29] audit: type=1326 audit(2000000138.570:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 221.967702][T13537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.976353][ T29] audit: type=1326 audit(2000000138.570:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 221.999698][T13537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.999727][T13537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.008392][ T29] audit: type=1326 audit(2000000138.570:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 222.073058][ T29] audit: type=1326 audit(2000000138.570:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13724 comm="syz.2.3430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f517273cef9 code=0x7ffc0000 [ 222.098231][T13682] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 222.116484][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.179373][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.231126][T13743] netlink: 'syz.2.3434': attribute type 4 has an invalid length. [ 222.263079][T13719] chnl_net:caif_netlink_parms(): no params data found [ 222.296304][T13743] netlink: 'syz.2.3434': attribute type 17 has an invalid length. [ 222.322053][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.347795][T13745] bridge3: entered promiscuous mode [ 222.352995][T13745] bridge3: entered allmulticast mode [ 222.405779][T13748] netlink: 'syz.2.3437': attribute type 2 has an invalid length. [ 222.451191][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'. [ 222.480228][T13719] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.487404][T13719] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.502759][T13719] bridge_slave_0: entered allmulticast mode [ 222.509504][T13719] bridge_slave_0: entered promiscuous mode [ 222.570539][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3440'. [ 222.601940][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3440'. [ 222.725153][ T40] bond0 (unregistering): Released all slaves [ 222.737412][ T40] bond1 (unregistering): Released all slaves [ 222.755290][T13719] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.762433][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.779689][T13719] bridge_slave_1: entered allmulticast mode [ 222.796030][T13719] bridge_slave_1: entered promiscuous mode [ 222.841533][ T40] hsr_slave_0: left promiscuous mode [ 222.853681][ T40] hsr_slave_1: left promiscuous mode [ 222.869573][ T40] veth1_macvtap: left promiscuous mode [ 222.875119][ T40] veth0_macvtap: left promiscuous mode [ 222.880613][ T40] veth1_vlan: left promiscuous mode [ 222.885867][ T40] veth0_vlan: left promiscuous mode [ 223.028945][T13799] loop1: detected capacity change from 0 to 128 [ 223.035528][T13799] vfat: Unknown parameter '' [ 223.089914][T13796] @: renamed from vlan0 (while UP) [ 223.103004][T13719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.144225][T13719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.207570][T13719] team0: Port device team_slave_0 added [ 223.235591][T13719] team0: Port device team_slave_1 added [ 223.274662][T13719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.281637][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.307640][T13719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.364653][T13755] chnl_net:caif_netlink_parms(): no params data found [ 223.379357][T13719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.386380][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.412390][T13719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.468073][T13719] hsr_slave_0: entered promiscuous mode [ 223.485109][T13719] hsr_slave_1: entered promiscuous mode [ 223.513317][T13719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.520860][T13719] Cannot create hsr debugfs directory [ 223.541146][T13755] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.548254][T13755] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.568050][T13755] bridge_slave_0: entered allmulticast mode [ 223.580809][T13755] bridge_slave_0: entered promiscuous mode [ 223.614487][T13755] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.621543][T13755] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.634410][T13755] bridge_slave_1: entered allmulticast mode [ 223.644879][T13755] bridge_slave_1: entered promiscuous mode [ 223.685943][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.716145][T13755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.747803][T13755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.788393][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.818424][T13755] team0: Port device team_slave_0 added [ 223.830806][T13755] team0: Port device team_slave_1 added [ 223.860750][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.894646][T13755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.901586][T13755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.927527][T13755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.944829][T13755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.951768][T13755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.977687][T13755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.045355][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.093307][T13755] hsr_slave_0: entered promiscuous mode [ 224.103439][T13755] hsr_slave_1: entered promiscuous mode [ 224.116265][T13755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.125364][T13755] Cannot create hsr debugfs directory [ 224.194656][ T40] bridge_slave_1: left allmulticast mode [ 224.200387][ T40] bridge_slave_1: left promiscuous mode [ 224.206054][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.227368][ T40] bridge_slave_0: left allmulticast mode [ 224.233041][ T40] bridge_slave_0: left promiscuous mode [ 224.238811][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.315631][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.326026][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.335646][ T40] bond0 (unregistering): Released all slaves [ 224.376310][T13719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.384875][ T40] tipc: Left network mode [ 224.389434][T13719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.398307][T13719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.407160][T13719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.416259][T13835] netlink: 'syz.0.3462': attribute type 4 has an invalid length. [ 224.437943][T13835] netlink: 'syz.0.3462': attribute type 17 has an invalid length. [ 224.455268][ T40] hsr_slave_0: left promiscuous mode [ 224.460902][ T40] hsr_slave_1: left promiscuous mode [ 224.466910][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.474578][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.482775][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.490169][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.499188][ T40] veth1_macvtap: left promiscuous mode [ 224.504757][ T40] veth0_macvtap: left promiscuous mode [ 224.510262][ T40] veth1_vlan: left promiscuous mode [ 224.515502][ T40] veth0_vlan: left promiscuous mode [ 224.587236][ T40] team0 (unregistering): Port device team_slave_1 removed [ 224.597545][ T40] team0 (unregistering): Port device team_slave_0 removed [ 224.654074][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.665536][T13719] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.676246][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.683358][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.691713][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.698777][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.754640][T13719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.788814][T13755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.797375][T13755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.807754][T13755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.816485][T13755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.832668][T13719] veth0_vlan: entered promiscuous mode [ 224.844832][T13719] veth1_vlan: entered promiscuous mode [ 224.872887][T13719] veth0_macvtap: entered promiscuous mode [ 224.881792][T13719] veth1_macvtap: entered promiscuous mode [ 224.890467][T13755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.904784][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.915276][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.925104][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.935508][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.945342][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.955847][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.965663][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.976330][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.987284][T13719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.998761][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.009195][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.019135][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.029587][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.039499][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.050010][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.059969][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.070393][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.081288][T13719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.091251][T13755] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.100481][T13719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.109267][T13719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.118062][T13719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.126805][T13719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.144075][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.151118][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.165356][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.172420][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.199235][T13755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.256508][T13755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.357893][T13755] veth0_vlan: entered promiscuous mode [ 225.365760][T13755] veth1_vlan: entered promiscuous mode [ 225.379364][T13755] veth0_macvtap: entered promiscuous mode [ 225.386893][T13755] veth1_macvtap: entered promiscuous mode [ 225.396834][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.407292][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.417220][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.427709][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.437585][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.448017][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.457807][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.468367][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.478427][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.488903][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.500784][T13755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.509815][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.520394][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.530331][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.540797][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.550612][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.561025][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.570836][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.581355][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.591236][T13755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.601663][T13755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.614548][T13755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.639628][T13755] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.648418][T13755] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.657265][T13755] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.665960][T13755] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.826582][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 225.837795][T13908] ip6gretap1: entered allmulticast mode [ 225.926486][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3478'. [ 225.937223][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3478'. [ 226.196744][T13952] loop4: detected capacity change from 0 to 512 [ 226.213521][T13952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.236469][T13952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.249037][T13952] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.278926][T13959] loop1: detected capacity change from 0 to 128 [ 226.298909][T13959] vfat: Unknown parameter '' [ 226.323668][T13755] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.354784][T13961] loop3: detected capacity change from 0 to 128 [ 226.361299][T13961] vfat: Unknown parameter '' [ 226.594233][T13971] loop4: detected capacity change from 0 to 512 [ 226.616276][T13971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.643389][T13971] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.675618][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 226.675631][ T29] audit: type=1400 audit(2000000143.360:6988): avc: denied { rename } for pid=13969 comm="syz.4.3499" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.705116][T13971] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #12: block 32: comm syz.4.3499: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 226.766469][T13755] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.802351][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3502'. [ 226.831772][T13983] bridge1: entered promiscuous mode [ 226.837159][T13983] bridge1: entered allmulticast mode [ 226.924318][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 227.141411][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'. [ 227.151562][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'. [ 227.164074][T14010] bond0: entered promiscuous mode [ 227.169152][T14010] bond_slave_0: entered promiscuous mode [ 227.174838][T14010] bond_slave_1: entered promiscuous mode [ 227.180693][T14010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.188762][T14010] bond0: left promiscuous mode [ 227.193566][T14010] bond_slave_0: left promiscuous mode [ 227.199018][T14010] bond_slave_1: left promiscuous mode [ 227.268853][ T366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.310648][ T29] audit: type=1400 audit(2000000143.990:6989): avc: denied { relabelfrom } for pid=14012 comm="syz.4.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.330650][ T29] audit: type=1400 audit(2000000143.990:6990): avc: denied { relabelto } for pid=14012 comm="syz.4.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.354636][ T366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.406992][ T366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.457745][ T366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.470574][T14014] chnl_net:caif_netlink_parms(): no params data found [ 227.500915][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.508056][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.515369][T14014] bridge_slave_0: entered allmulticast mode [ 227.521865][T14014] bridge_slave_0: entered promiscuous mode [ 227.528830][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.536343][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.544091][T14014] bridge_slave_1: entered allmulticast mode [ 227.550596][T14014] bridge_slave_1: entered promiscuous mode [ 227.568221][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.580581][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.600750][ T366] bridge_slave_1: left allmulticast mode [ 227.606415][ T366] bridge_slave_1: left promiscuous mode [ 227.612084][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.619910][ T366] bridge_slave_0: left allmulticast mode [ 227.625656][ T366] bridge_slave_0: left promiscuous mode [ 227.631319][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.765191][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.775493][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.785132][ T366] bond0 (unregistering): Released all slaves [ 227.793378][T14014] team0: Port device team_slave_0 added [ 227.799836][T14014] team0: Port device team_slave_1 added [ 227.818762][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.825719][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.851723][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.862902][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.869930][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.895877][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.919659][T14014] hsr_slave_0: entered promiscuous mode [ 227.925822][T14014] hsr_slave_1: entered promiscuous mode [ 227.931618][T14014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.939159][T14014] Cannot create hsr debugfs directory [ 227.946559][ T366] hsr_slave_0: left promiscuous mode [ 227.952287][ T366] hsr_slave_1: left promiscuous mode [ 227.957994][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.965392][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.972730][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.980154][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.987618][ T366] batman_adv: batadv0: Removing interface: ipvlan2 [ 227.995629][ T366] veth1_macvtap: left promiscuous mode [ 228.001156][ T366] veth0_macvtap: left promiscuous mode [ 228.006654][ T366] veth1_vlan: left promiscuous mode [ 228.011839][ T366] veth0_vlan: left promiscuous mode [ 228.082866][ T366] team0 (unregistering): Port device team_slave_1 removed [ 228.092925][ T366] team0 (unregistering): Port device team_slave_0 removed [ 228.464025][T14014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.472264][T14014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.480646][T14014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.489218][T14014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.521080][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.533867][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.542716][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.549779][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.560402][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.567441][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.621648][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.679868][T14014] veth0_vlan: entered promiscuous mode [ 228.687822][T14014] veth1_vlan: entered promiscuous mode [ 228.702118][T14014] veth0_macvtap: entered promiscuous mode [ 228.709638][T14014] veth1_macvtap: entered promiscuous mode [ 228.719969][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.730514][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.740403][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.750808][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.760638][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.771051][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.780829][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.791295][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.801077][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.811498][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.824823][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.832926][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.843484][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.853348][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.864000][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.873937][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.884471][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.894354][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.904931][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.914807][T14014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.925262][T14014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.936593][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.948767][T14014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.957638][T14014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.966913][T14014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.975745][T14014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.034987][T14054] syzkaller0: entered promiscuous mode [ 229.040485][T14054] syzkaller0: entered allmulticast mode [ 229.049083][T14055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3525'. [ 229.059457][T14055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3525'. [ 229.071047][T14055] loop4: detected capacity change from 0 to 128 [ 229.084422][T14055] vfat: Unknown parameter '' [ 229.100180][T14058] bridge1: entered promiscuous mode [ 229.105511][T14058] bridge1: entered allmulticast mode [ 229.166535][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'. [ 229.168839][T14063] loop1: detected capacity change from 0 to 512 [ 229.212977][T14063] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 229.240112][T14063] EXT4-fs (loop1): 1 truncate cleaned up [ 229.249626][T14063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.285546][ T29] audit: type=1326 audit(2000000145.970:6991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d798ccef9 code=0x7ffc0000 [ 229.333496][ T29] audit: type=1326 audit(2000000145.990:6992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2d798ccef9 code=0x7ffc0000 [ 229.356990][ T29] audit: type=1326 audit(2000000145.990:6993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d798ccef9 code=0x7ffc0000 [ 229.380574][ T29] audit: type=1326 audit(2000000145.990:6994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.2.3526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d798ccef9 code=0x7ffc0000 [ 229.434090][T12034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.445582][T14094] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 229.456538][ T29] audit: type=1400 audit(2000000146.130:6995): avc: denied { bind } for pid=14091 comm="syz.2.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 229.535328][T14104] bridge2: entered promiscuous mode [ 229.540621][T14104] bridge2: entered allmulticast mode [ 229.541479][ T29] audit: type=1400 audit(2000000146.180:6996): avc: denied { create } for pid=14096 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.565841][ T29] audit: type=1400 audit(2000000146.180:6997): avc: denied { connect } for pid=14096 comm="syz.0.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.632680][T14118] loop3: detected capacity change from 0 to 128 [ 229.643470][T14118] vfat: Unknown parameter '' [ 229.667311][T14120] loop1: detected capacity change from 0 to 128 [ 229.696017][T14120] vfat: Unknown parameter '' [ 229.824608][T14134] atomic_op ffff88810f9e7928 conn xmit_atomic 0000000000000000 [ 231.274554][T14290] bridge1: entered promiscuous mode [ 231.279754][T14290] bridge1: entered allmulticast mode [ 231.308280][T14290] __nla_validate_parse: 1 callbacks suppressed [ 231.308289][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 232.569417][T14314] loop1: detected capacity change from 0 to 128 [ 232.580902][T14312] loop3: detected capacity change from 0 to 512 [ 232.592319][ T9] hid (null): invalid report_size 24934 [ 232.599245][ T9] hid-generic 0000:0000:0000.0005: invalid report_size 24934 [ 232.606690][ T9] hid-generic 0000:0000:0000.0005: item 0 2 1 7 parsing failed [ 232.614720][ T9] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 232.620483][T14312] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 232.667814][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 232.667827][ T29] audit: type=1400 audit(2000000149.350:7031): avc: denied { setopt } for pid=14316 comm="syz.3.3558" laddr=127.0.0.1 lport=60804 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 232.703324][ T29] audit: type=1400 audit(2000000149.380:7032): avc: denied { accept } for pid=14316 comm="syz.3.3558" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 232.728000][T14319] loop3: detected capacity change from 0 to 128 [ 232.736976][T14319] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.750206][T14319] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.797346][ T29] audit: type=1400 audit(2000000149.480:7033): avc: denied { map } for pid=14318 comm="syz.3.3559" path="/16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.851077][ T29] audit: type=1400 audit(2000000149.530:7034): avc: denied { setopt } for pid=14325 comm="syz.4.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 232.890228][T14328] loop4: detected capacity change from 0 to 1024 [ 232.890706][T14330] bridge3: entered promiscuous mode [ 232.897069][T14328] EXT4-fs: Ignoring removed orlov option [ 232.901934][T14330] bridge3: entered allmulticast mode [ 232.912944][T14328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.928662][T13719] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.929840][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 232.947696][T14328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.968769][ T29] audit: type=1400 audit(2000000149.650:7035): avc: denied { setattr } for pid=14327 comm="syz.4.3562" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.000800][ T29] audit: type=1400 audit(2000000149.680:7036): avc: denied { bind } for pid=14340 comm="syz.3.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.020310][ T29] audit: type=1400 audit(2000000149.680:7037): avc: denied { name_bind } for pid=14340 comm="syz.3.3565" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 233.041347][ T29] audit: type=1400 audit(2000000149.680:7038): avc: denied { node_bind } for pid=14340 comm="syz.3.3565" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 233.064538][T13755] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.154828][ T29] audit: type=1400 audit(2000000149.840:7039): avc: denied { read } for pid=14349 comm="syz.4.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.204773][ T29] audit: type=1326 audit(2000000149.890:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.3.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ffe0cef9 code=0x7ffc0000 [ 233.268213][T14360] can0: slcan on ttyS3. [ 233.289868][T14361] loop4: detected capacity change from 0 to 128 [ 233.301278][T14361] vfat: Unknown parameter '' [ 233.313257][T14359] can0 (unregistered): slcan off ttyS3. [ 233.338464][T14363] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3573'. [ 233.444540][T14369] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3574'. [ 233.528356][T14372] pim6reg1: entered promiscuous mode [ 233.533884][T14372] pim6reg1: entered allmulticast mode [ 233.567421][T14376] PM: Enabling pm_trace changes system date and time during resume. [ 233.567421][T14376] PM: Correct system time has to be restored manually after resume. [ 233.949667][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 234.033645][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 234.043047][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 234.055921][T14399] bond0: entered promiscuous mode [ 234.060940][T14399] bond_slave_0: entered promiscuous mode [ 234.066589][T14399] bond_slave_1: entered promiscuous mode [ 234.072508][T14399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.080011][T14399] bond0: left promiscuous mode [ 234.084857][T14399] bond_slave_0: left promiscuous mode [ 234.090360][T14399] bond_slave_1: left promiscuous mode [ 234.152200][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3585'. [ 234.173959][T14403] loop3: detected capacity change from 0 to 512 [ 234.180934][T14403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.190327][T14403] EXT4-fs (loop3): orphan cleanup on readonly fs [ 234.197466][T14403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3586: bg 0: block 248: padding at end of block bitmap is not set [ 234.212029][T14403] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3586: Failed to acquire dquot type 1 [ 234.223786][T14403] EXT4-fs (loop3): 1 truncate cleaned up [ 234.229872][T14403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.243267][T14403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.251825][T14403] EXT4-fs error (device loop3): __ext4_remount:6491: comm syz.3.3586: Abort forced by user [ 234.262338][T14403] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 234.273795][T14403] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 234.284252][T14403] ext4 filesystem being remounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.295554][T14403] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.3586: Failed to acquire dquot type 1 [ 234.313532][T13719] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.322775][ T28] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u8:1: Failed to release dquot type 1 [ 234.447919][T14425] loop3: detected capacity change from 0 to 764 [ 234.473592][T14425] rock: directory entry would overflow storage [ 234.479767][T14425] rock: sig=0x4654, size=5, remaining=4 [ 234.515130][T14425] rock: directory entry would overflow storage [ 234.521296][T14425] rock: sig=0x4f50, size=4, remaining=3 [ 234.526895][T14425] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 234.670154][T14456] loop3: detected capacity change from 0 to 256 [ 234.807732][T14486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.296492][T14567] loop1: detected capacity change from 0 to 1024 [ 235.315836][T14567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.342445][T14567] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 235.376133][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3607'. [ 235.403508][T14567] loop1: detected capacity change from 1024 to 1023 [ 235.410963][T14567] EXT4-fs error (device loop1): ext4_xattr_ibody_get:653: inode #15: comm syz.1.3603: corrupted in-inode xattr: bad magic number in in-inode xattr [ 235.432233][T14567] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #15: comm syz.1.3603: corrupt xattr in inline inode [ 235.452306][T14567] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.3603: corrupted in-inode xattr: bad magic number in in-inode xattr [ 235.468797][T14567] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 62218: comm syz.1.3603: lblock 0 mapped to illegal pblock 62218 (length 1) [ 235.484748][T14567] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 235.497044][T14567] EXT4-fs (loop1): This should not happen!! Data will be lost [ 235.497044][T14567] [ 235.518787][T12034] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /115/file1: bad entry in directory: rec_len is smaller than minimal - offset=980, inode=0, rec_len=0, size=1024 fake=0 [ 235.542954][T14483] ================================================================== [ 235.551029][T14483] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 235.558387][T14483] [ 235.559474][T14486] syz.3.3601 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 235.560689][T14483] read to 0xffff888114f7d668 of 4 bytes by task 14486 on cpu 1: [ 235.574764][T14486] CPU: 1 UID: 0 PID: 14486 Comm: syz.3.3601 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 235.582307][T14483] mem_cgroup_iter+0x93/0x380 [ 235.593027][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.597669][T14483] shrink_node+0x74a/0x1d40 [ 235.607695][T14486] Call Trace: [ 235.607705][T14486] [ 235.612162][T14483] do_try_to_free_pages+0x3c6/0xc50 [ 235.615419][T14486] dump_stack_lvl+0xf2/0x150 [ 235.618324][T14483] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 235.623493][T14486] dump_stack+0x15/0x20 [ 235.628045][T14483] try_charge_memcg+0x2bc/0x810 [ 235.633903][T14486] dump_header+0x83/0x2d0 [ 235.638026][T14483] obj_cgroup_charge_pages+0xbd/0x1a0 [ 235.642845][T14486] oom_kill_process+0x341/0x4c0 [ 235.647134][T14483] __memcg_kmem_charge_page+0x9d/0x170 [ 235.652475][T14486] out_of_memory+0x9af/0xbe0 [ 235.657288][T14483] __alloc_pages_noprof+0x1bc/0x360 [ 235.657314][T14483] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 235.657333][T14483] alloc_pages_noprof+0xe1/0x100 [ 235.657352][T14483] __vmalloc_node_range_noprof+0x736/0xec0 [ 235.662781][T14486] ? __rcu_read_unlock+0x4e/0x70 [ 235.667335][T14483] __kvmalloc_node_noprof+0x121/0x170 [ 235.672506][T14486] mem_cgroup_out_of_memory+0x13e/0x190 [ 235.677841][T14483] ip_set_alloc+0x1f/0x30 [ 235.682749][T14486] try_charge_memcg+0x51b/0x810 [ 235.688514][T14483] hash_netiface_create+0x273/0x730 [ 235.693425][T14486] obj_cgroup_charge_pages+0xbd/0x1a0 [ 235.698754][T14483] ip_set_create+0x359/0x8a0 [ 235.704269][T14486] __memcg_kmem_charge_page+0x9d/0x170 [ 235.708560][T14483] nfnetlink_rcv_msg+0x4a9/0x570 [ 235.713379][T14486] __alloc_pages_noprof+0x1bc/0x360 [ 235.718540][T14483] netlink_rcv_skb+0x12c/0x230 [ 235.723883][T14486] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 235.728435][T14483] nfnetlink_rcv+0x16c/0x15e0 [ 235.733863][T14486] alloc_pages_noprof+0xe1/0x100 [ 235.738763][T14483] netlink_unicast+0x599/0x670 [ 235.738780][T14483] netlink_sendmsg+0x5cc/0x6e0 [ 235.738798][T14483] __sock_sendmsg+0x140/0x180 [ 235.738822][T14483] ____sys_sendmsg+0x312/0x410 [ 235.738841][T14483] __sys_sendmsg+0x1e9/0x280 [ 235.744002][T14486] __vmalloc_node_range_noprof+0x736/0xec0 [ 235.748726][T14483] __x64_sys_sendmsg+0x46/0x50 [ 235.754075][T14486] __kvmalloc_node_noprof+0x121/0x170 [ 235.758706][T14483] x64_sys_call+0x2689/0x2d60 [ 235.763612][T14486] ? ip_set_alloc+0x1f/0x30 [ 235.768339][T14483] do_syscall_64+0xc9/0x1c0 [ 235.773069][T14486] ip_set_alloc+0x1f/0x30 [ 235.777708][T14483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.782440][T14486] hash_netiface_create+0x273/0x730 [ 235.786994][T14483] [ 235.787000][T14483] read-write to 0xffff888114f7d668 of 4 bytes by task 14483 on cpu 0: [ 235.792766][T14486] ? __nla_parse+0x40/0x60 [ 235.797492][T14483] mem_cgroup_iter+0x28e/0x380 [ 235.802831][T14486] ? __pfx_hash_netiface_create+0x10/0x10 [ 235.807471][T14483] shrink_node+0x74a/0x1d40 [ 235.811941][T14486] ip_set_create+0x359/0x8a0 [ 235.816408][T14483] do_try_to_free_pages+0x3c6/0xc50 [ 235.820707][T14486] ? strnstr+0xf1/0x100 [ 235.826564][T14483] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 235.831739][T14486] ? __nla_parse+0x40/0x60 [ 235.834038][T14483] try_charge_memcg+0x2bc/0x810 [ 235.842198][T14486] nfnetlink_rcv_msg+0x4a9/0x570 [ 235.846573][T14483] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 235.851356][T14486] netlink_rcv_skb+0x12c/0x230 [ 235.857024][T14483] __read_swap_cache_async+0x2b7/0x520 [ 235.861493][T14486] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 235.866049][T14483] swap_cluster_readahead+0x276/0x3f0 [ 235.871220][T14486] nfnetlink_rcv+0x16c/0x15e0 [ 235.875332][T14483] swapin_readahead+0xe4/0x760 [ 235.881190][T14486] ? kmem_cache_free+0xd8/0x280 [ 235.885570][T14483] do_swap_page+0x3da/0x1ef0 [ 235.890390][T14486] ? nlmon_xmit+0x51/0x60 [ 235.895289][T14483] handle_mm_fault+0x8cb/0x2a30 [ 235.901323][T14486] ? __kfree_skb+0x102/0x150 [ 235.906052][T14483] exc_page_fault+0x3b9/0x650 [ 235.911477][T14486] ? consume_skb+0x57/0x180 [ 235.916901][T14483] asm_exc_page_fault+0x26/0x30 [ 235.922241][T14486] ? nlmon_xmit+0x51/0x60 [ 235.926885][T14483] [ 235.926889][T14483] value changed: 0x000001a5 -> 0x000001a7 [ 235.931621][T14486] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 235.936437][T14483] [ 235.936441][T14483] Reported by Kernel Concurrency Sanitizer on: [ 235.940995][T14486] ? __dev_queue_xmit+0xb86/0x1fe0 [ 235.945289][T14483] CPU: 0 UID: 0 PID: 14483 Comm: syz.3.3601 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 235.950108][T14486] ? ref_tracker_free+0x3a5/0x410 [ 235.954660][T14483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.959299][T14486] ? __dev_queue_xmit+0x161/0x1fe0 [ 235.963765][T14483] ================================================================== [ 235.968586][T14486] ? __netlink_deliver_tap+0x495/0x4c0 [ 235.984253][T12034] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257296770591160 [ 235.986121][T14486] netlink_unicast+0x599/0x670 [ 235.988587][T12034] EXT4-fs error (device loop1): ext4_lookup:1811: inode #12: comm syz-executor: iget: bad extended attribute block 257296770591160 [ 235.994555][T14486] netlink_sendmsg+0x5cc/0x6e0 [ 236.081337][T14486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.086608][T14486] __sock_sendmsg+0x140/0x180 [ 236.091271][T14486] ____sys_sendmsg+0x312/0x410 [ 236.096055][T14486] __sys_sendmsg+0x1e9/0x280 [ 236.100660][T14486] __x64_sys_sendmsg+0x46/0x50 [ 236.105447][T14486] x64_sys_call+0x2689/0x2d60 [ 236.110125][T14486] do_syscall_64+0xc9/0x1c0 [ 236.114701][T14486] ? clear_bhb_loop+0x55/0xb0 [ 236.119359][T14486] ? clear_bhb_loop+0x55/0xb0 [ 236.124055][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.129936][T14486] RIP: 0033:0x7ff5ffe0cef9 [ 236.134402][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.153987][T14486] RSP: 002b:00007ff5fea87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.162378][T14486] RAX: ffffffffffffffda RBX: 00007ff5fffc5f80 RCX: 00007ff5ffe0cef9 [ 236.170331][T14486] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 236.178293][T14486] RBP: 00007ff5ffe7f01e R08: 0000000000000000 R09: 0000000000000000 [ 236.186260][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.194295][T14486] R13: 0000000000000000 R14: 00007ff5fffc5f80 R15: 00007ffcc5d18268 [ 236.202274][T14486] [ 236.205772][T14486] memory: usage 307200kB, limit 307200kB, failcnt 137 [ 236.212619][T14486] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 236.220574][T14486] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 236.227870][T14486] Memory cgroup stats for /syz3: [ 236.229900][T14486] cache 102400 [ 236.238230][T14486] rss 0 [ 236.240984][T14486] shmem 0 [ 236.243939][T14486] mapped_file 303104 [ 236.247859][T14486] dirty 102400 [ 236.251200][T14486] writeback 0 [ 236.254478][T14486] workingset_refault_anon 51 [ 236.259047][T14486] workingset_refault_file 61 [ 236.263647][T14486] swap 278528 [ 236.266923][T14486] swapcached 0 [ 236.270276][T14486] pgpgin 181397 [ 236.273720][T14486] pgpgout 181372 [ 236.277237][T14486] pgfault 233815 [ 236.280751][T14486] pgmajfault 29 [ 236.284266][T14486] inactive_anon 0 [ 236.287945][T14486] active_anon 0 [ 236.291373][T14486] inactive_file 0 [ 236.294995][T14486] active_file 102400 [ 236.298941][T14486] unevictable 0 [ 236.302448][T14486] hierarchical_memory_limit 314572800 [ 236.307800][T14486] hierarchical_memsw_limit 9223372036854771712 [ 236.313959][T14486] total_cache 102400 [ 236.317837][T14486] total_rss 0 [ 236.321140][T14486] total_shmem 0 [ 236.324586][T14486] total_mapped_file 303104 [ 236.328971][T14486] total_dirty 102400 [ 236.332892][T14486] total_writeback 0 [ 236.336774][T14486] total_workingset_refault_anon 51 [ 236.341955][T14486] total_workingset_refault_file 61 [ 236.347109][T14486] total_swap 278528 [ 236.350952][T14486] total_swapcached 0 [ 236.354873][T14486] total_pgpgin 181427 [ 236.358854][T14486] total_pgpgout 181402 [ 236.362946][T14486] total_pgfault 233857 [ 236.366998][T14486] total_pgmajfault 29 [ 236.370948][T14486] total_inactive_anon 0 [ 236.375090][T14486] total_active_anon 0 [ 236.379095][T14486] total_inactive_file 0 [ 236.383249][T14486] total_active_file 102400 [ 236.387643][T14486] total_unevictable 0 [ 236.391611][T14486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3601,pid=14483,uid=0 [ 236.406530][T14486] Memory cgroup out of memory: Killed process 14483 (syz.3.3601) total-vm:87132kB, anon-rss:572kB, file-rss:16168kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 236.507108][ T2320] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 236.523923][T11042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.534197][T11042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.545874][ T3937] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm kworker/u8:8: corrupted in-inode xattr: bad magic number in in-inode xattr [ 236.561609][T12034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.616180][T11042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.626549][T11042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.678975][T14486] syz.3.3601 (14486) used greatest stack depth: 7384 bytes left [ 236.697102][T11042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.707379][T11042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.766092][T11042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.776401][T11042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.846397][T11042] bridge_slave_1: left allmulticast mode [ 236.852035][T11042] bridge_slave_1: left promiscuous mode [ 236.857750][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.106367][T11042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.116721][T11042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.127762][T11042] bond0 (unregistering): Released all slaves [ 237.136445][T11042] bond1 (unregistering): Released all slaves [ 237.224898][T11042] hsr_slave_0: left promiscuous mode [ 237.230800][T11042] hsr_slave_1: left promiscuous mode [ 237.237144][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.244567][T11042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.252543][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.260003][T11042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.269792][T11042] veth1_macvtap: left promiscuous mode [ 237.275319][T11042] veth0_macvtap: left promiscuous mode [ 237.280864][T11042] veth1_vlan: left promiscuous mode [ 237.286112][T11042] veth0_vlan: left promiscuous mode [ 237.373820][T11042] team0 (unregistering): Port device team_slave_1 removed [ 237.385409][T11042] team0 (unregistering): Port device team_slave_0 removed [ 243.836076][T11042] bridge_slave_1: left allmulticast mode [ 243.841731][T11042] bridge_slave_1: left promiscuous mode [ 243.847422][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.858081][T11042] bridge_slave_0: left allmulticast mode [ 243.863800][T11042] bridge_slave_0: left promiscuous mode [ 243.869431][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.016006][T11042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.026074][T11042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.036967][T11042] bond0 (unregistering): Released all slaves [ 244.145128][T11042] hsr_slave_0: left promiscuous mode [ 244.151218][T11042] hsr_slave_1: left promiscuous mode [ 244.156856][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.164297][T11042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.172622][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.180091][T11042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.189610][T11042] veth1_macvtap: left promiscuous mode [ 244.195194][T11042] veth0_macvtap: left promiscuous mode [ 244.200673][T11042] veth1_vlan: left promiscuous mode [ 244.206042][T11042] veth0_vlan: left promiscuous mode [ 244.292017][T11042] team0 (unregistering): Port device team_slave_1 removed [ 244.303189][T11042] team0 (unregistering): Port device team_slave_0 removed [ 244.336609][T11042] team0 (unregistering): Port device batadv0 removed