last executing test programs: 16.190604362s ago: executing program 4 (id=417): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x410, 0xe0, 0x130, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) 15.887157568s ago: executing program 4 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x0) ptrace(0x10, 0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000a00)=""/123) 1.363024321s ago: executing program 0 (id=572): unshare(0x2040600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) vmsplice(r2, 0x0, 0x0, 0x0) 1.329592143s ago: executing program 3 (id=573): bind$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 1.263828709s ago: executing program 0 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r2, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce0001"], 0x114}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCFLSH(r3, 0x5411, 0xf0ff1f00000000) 1.217769843s ago: executing program 0 (id=577): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000ac0)="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", 0x240}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948", 0x2b}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.078373606s ago: executing program 3 (id=579): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="e7", 0x1, 0x2000c0d5, 0x0, 0x30) 1.02573443s ago: executing program 3 (id=581): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x20}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 804.762169ms ago: executing program 4 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004441) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000000)={&(0x7f0000000a00), 0x38, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c}, 0x1c}}, 0x0) 760.284123ms ago: executing program 4 (id=583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1002, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 693.661879ms ago: executing program 4 (id=586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608eee812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 668.218491ms ago: executing program 1 (id=587): r0 = socket(0x2, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="643c87cf08d21d994efea03321af0c6c7715a604", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 643.482174ms ago: executing program 4 (id=588): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}], [], 0x6b}}) 622.334965ms ago: executing program 1 (id=589): syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000027c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f20000000000a01010000000000000000050000000900010073797a31000000002c0000000c0a0103000000000000100005000000040003800900010073797a3100000000080004"], 0xd0}}, 0x0) 586.937368ms ago: executing program 1 (id=591): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0xfd}, 0x18) r2 = dup(r0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 461.308969ms ago: executing program 2 (id=595): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 404.503494ms ago: executing program 2 (id=596): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0xce23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0x88}}], 0x1, 0x2000, 0x0) 372.299318ms ago: executing program 2 (id=597): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 344.86081ms ago: executing program 2 (id=598): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c00)={[{@norecovery}, {@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") utime(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x8) 282.038095ms ago: executing program 2 (id=599): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x38cb049, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000500e2000080002433000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x57}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 252.955298ms ago: executing program 2 (id=600): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 229.34489ms ago: executing program 0 (id=601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@mcast2}}, 0xe8) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 212.279751ms ago: executing program 0 (id=602): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 196.018253ms ago: executing program 0 (id=603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bb", 0x7d}, {&(0x7f0000000f00)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a68", 0xe8}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214", 0x67}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000400)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a064d718209a1013baec29196d3ae2707e8d813dc1c962f5edc8a102000000684ba48796800608d791fcd2b838e7735cf89f00ed2121ae7146135b1d4f15bc73c4057b2601adaa2d899114ca12ffc32ac806111b415a55d3f6dd24c9bba19109eba5e216fcedd10da0449d8884fdcbe4120976a88372d40411260343e43095113a5ae992a77e98967e62f96523f42438cb7859fe98a07801c04891fab26c0cd472377e1a2fed7ea9e251ecf1668e9a910347f0c1a1d975a4296d7a19a936752538", 0xe2}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 180.734644ms ago: executing program 3 (id=604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) 163.454166ms ago: executing program 3 (id=605): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96p?\xa9\xc5\xee\x8c\x03\x8e\xb5\x1d\xfc\x9b(:1<\xf4S3\xd4z\xb6\xb6\xd2\xb8\xfd\xab\xd9\xedX\t4S\xc2\x97\x9dR\xc8\x95V\x87\x17\xed\t\xe1\xef\xc1\x83\xe1\xefj\x11\xe2\x13:\a|\xe0\x83\x1b\x81G|\x8c\xb8jH\xf2\x83\x17-\xd1c \xd6\n\x9bv\xdb\x02\xd8\xe6\xb47\xadI\x01\xf9\xb7\xbd\x1f\xd2\xf6^\x02\xbf%5@\x1e\xbd\"\xfeJ\x86\xf3\xb06Y\x04,\xee\xe7.\x83\xa8\x7f>\xc9\xe7\xbb\xb6\xed\xfcVr_') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 147.046507ms ago: executing program 3 (id=606): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x50, 0xfa, 0x1f, 0x80, 0x40, 0x5ac, 0x232, 0x22db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7e, 0xe, 0x20, 0xf3, [{{0x9, 0x4, 0x2c, 0xfe, 0x0, 0x3, 0x27, 0x2, 0x8}}]}}]}}, 0x0) 46.591286ms ago: executing program 1 (id=607): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 29.357187ms ago: executing program 1 (id=608): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x80100400, &(0x7f0000000280)="d527b797f784f1fd638c0adae33ca6eb955cd3313ed35d0ef70131bb58736b08482947281f71ac5f7c71455606297d4b168872cfa16120073f5eded8666ec7e541101d08a5cb5bb9c741bf37283da1632e831b46dae73267287ae64143f6b1c6a71116dfd4c04551fe9ab899fc786e5a9186c957ade342f47805e8d967571c7a1c875b16827ed562e86e3f5657a1d8839a62232b0efde01197f0188f7dad7e583d73026eec79e3050105479925ef2f6768d26eacd284805c", 0xb8, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000003c0)="97086cd34b2af571c55b4296229b541d0dbb32c45fac37101515435575370d09d7d7624c6f048c5b69df2b3cd620c7abc799e588372f8344dc4d7c4ce9be35ca4c5c781e8eed594d0a2a5ade4866b9ed6b36") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 0s ago: executing program 1 (id=609): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x10001, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): 081 - 0 [ 32.661328][ T3264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.675270][ T3425] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.699326][ T3423] ªªªªªª: renamed from vlan0 (while UP) [ 32.806606][ T3439] process 'syz.2.16' launched './file0' with NULL argv: empty string added [ 32.996377][ T3460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 33.077234][ T3467] loop2: detected capacity change from 0 to 512 [ 33.122289][ T3466] syz.3.29 (3466) used greatest stack depth: 11312 bytes left [ 33.170274][ T3472] loop0: detected capacity change from 0 to 256 [ 33.173088][ T3477] loop4: detected capacity change from 0 to 512 [ 33.194086][ T3472] FAT-fs (loop0): bogus number of FAT sectors [ 33.201626][ T3472] FAT-fs (loop0): Can't find a valid FAT filesystem [ 33.239477][ T3477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.267144][ T3477] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.334462][ T3264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.366511][ T3485] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.575165][ T3506] syz.3.44 (3506) used greatest stack depth: 10760 bytes left [ 33.928082][ T3528] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.53'. [ 34.058095][ T3537] syzkaller0: entered promiscuous mode [ 34.065576][ T3537] syzkaller0: entered allmulticast mode [ 34.266581][ T3559] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 34.405757][ T3565] loop2: detected capacity change from 0 to 512 [ 34.432679][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.445970][ T3565] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.485771][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.575446][ T3585] loop2: detected capacity change from 0 to 512 [ 34.582438][ T3585] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.591112][ T3585] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.604432][ T3585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.615649][ T3585] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.78: corrupted in-inode xattr: e_value out of bounds [ 34.629678][ T3585] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.78: couldn't read orphan inode 15 (err -117) [ 34.642370][ T3585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.667969][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.965655][ T3615] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 34.974058][ T3615] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 35.000864][ T3617] loop2: detected capacity change from 0 to 512 [ 35.039166][ T3617] ======================================================= [ 35.039166][ T3617] WARNING: The mand mount option has been deprecated and [ 35.039166][ T3617] and is ignored by this kernel. Remove the mand [ 35.039166][ T3617] option from the mount to silence this warning. [ 35.039166][ T3617] ======================================================= [ 35.098092][ T3617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.154843][ T3617] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.93: bg 0: block 248: padding at end of block bitmap is not set [ 35.188299][ T3617] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.93: Failed to acquire dquot type 1 [ 35.205634][ T3617] EXT4-fs (loop2): 1 truncate cleaned up [ 35.212146][ T3617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.226056][ T3617] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.239488][ T3633] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.251443][ T3635] loop7: detected capacity change from 0 to 16384 [ 35.269709][ T3617] syz.2.93 (3617) used greatest stack depth: 9632 bytes left [ 35.293829][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.303299][ T3352] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u8:7: Failed to release dquot type 1 [ 35.318045][ T3635] I/O error, dev loop7, sector 4992 op 0x0:(READ) flags 0x800 phys_seg 16 prio class 0 [ 35.367008][ T3643] loop2: detected capacity change from 0 to 1024 [ 35.395480][ T3643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.411677][ T3643] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.443544][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.533533][ T3665] Illegal XDP return value 1126354086 on prog (id 117) dev N/A, expect packet loss! [ 35.629634][ T3663] netlink: 140 bytes leftover after parsing attributes in process `syz.4.110'. [ 35.786264][ T3681] loop2: detected capacity change from 0 to 2048 [ 35.804986][ T3681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.828603][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.936904][ T3691] syz.1.120[3691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.936961][ T3691] syz.1.120[3691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.970008][ T3693] ipvlan1: entered promiscuous mode [ 35.987385][ T3693] ipvlan1: left promiscuous mode [ 36.281843][ T3710] netlink: 'syz.0.129': attribute type 3 has an invalid length. [ 36.543966][ T3726] loop1: detected capacity change from 0 to 512 [ 36.557443][ T3726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.572576][ T3726] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.613937][ T3726] loop1: detected capacity change from 512 to 64 [ 36.625352][ T3726] EXT4-fs warning (device loop1): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 36.650935][ T3260] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 36.660137][ T3260] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 36.880849][ T3750] capability: warning: `syz.0.147' uses deprecated v2 capabilities in a way that may be insecure [ 36.934464][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.996990][ T3633] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.066217][ T3633] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.137792][ T3633] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.217320][ T3633] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.240582][ T3633] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.268153][ T3633] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.281396][ T3755] chnl_net:caif_netlink_parms(): no params data found [ 37.318869][ T3633] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.375018][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.385393][ T3755] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.394505][ T3755] bridge_slave_0: entered allmulticast mode [ 37.404062][ T3755] bridge_slave_0: entered promiscuous mode [ 37.415418][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.428362][ T3755] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.440336][ T3755] bridge_slave_1: entered allmulticast mode [ 37.451285][ T3755] bridge_slave_1: entered promiscuous mode [ 37.462903][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 37.462934][ T29] audit: type=1400 audit(1726185121.078:401): avc: denied { relabelfrom } for pid=3775 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.495068][ T29] audit: type=1400 audit(1726185121.078:402): avc: denied { relabelto } for pid=3775 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 37.528493][ T3755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.548659][ T3755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.571448][ T3755] team0: Port device team_slave_0 added [ 37.580742][ T3755] team0: Port device team_slave_1 added [ 37.602756][ T3755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.612971][ T3755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.643638][ T3755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.659176][ T3755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.667012][ T3755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.703114][ T3755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.754681][ T3755] hsr_slave_0: entered promiscuous mode [ 37.760999][ T3755] hsr_slave_1: entered promiscuous mode [ 37.773193][ T3755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.784115][ T3755] Cannot create hsr debugfs directory [ 37.786677][ C1] hrtimer: interrupt took 57320 ns [ 37.807231][ T29] audit: type=1404 audit(1726185121.418:403): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 37.824033][ T29] audit: type=1400 audit(1726185121.418:404): avc: denied { prog_load } for pid=3788 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 37.848017][ T29] audit: type=1400 audit(1726185121.418:405): avc: denied { prog_load } for pid=3788 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 37.870318][ T29] audit: type=1404 audit(1726185121.438:406): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 37.910741][ T29] audit: type=1400 audit(1726185121.518:407): avc: denied { read write } for pid=3263 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.939237][ T29] audit: type=1400 audit(1726185121.518:408): avc: denied { open } for pid=3263 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.971224][ T29] audit: type=1400 audit(1726185121.518:409): avc: denied { ioctl } for pid=3263 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.005147][ T29] audit: type=1326 audit(1726185121.548:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff10f4adef9 code=0x7ffc0000 [ 38.141772][ T3801] loop0: detected capacity change from 0 to 512 [ 38.150581][ T3801] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.162062][ T3801] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.195883][ T3801] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.164: corrupted in-inode xattr: e_value out of bounds [ 38.223000][ T3801] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.164: couldn't read orphan inode 15 (err -117) [ 38.268922][ T3801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.296475][ T3755] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.361081][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.390710][ T3755] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.419714][ T3807] loop4: detected capacity change from 0 to 128 [ 38.456486][ T3811] pim6reg1: entered promiscuous mode [ 38.461825][ T3811] pim6reg1: entered allmulticast mode [ 38.476985][ T3807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.514195][ T3807] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.539238][ T3755] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.592118][ T3817] team_slave_0: entered promiscuous mode [ 38.597841][ T3817] team_slave_1: entered promiscuous mode [ 38.608665][ T3817] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 38.625954][ T3817] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 38.645049][ T3755] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.699076][ T3264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.707070][ T3820] bond0: entered promiscuous mode [ 38.713333][ T3820] bond_slave_0: entered promiscuous mode [ 38.719254][ T3820] bond_slave_1: entered promiscuous mode [ 38.725182][ T3820] macvlan2: entered promiscuous mode [ 38.730612][ T3820] team0: entered promiscuous mode [ 38.753370][ T3830] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 38.787779][ T3755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.796703][ T3755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.806835][ T3755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.815542][ T3755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.865603][ T3755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.880258][ T3755] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.891518][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.898877][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.911369][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.918818][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.959755][ T3832] loop3: detected capacity change from 0 to 128 [ 38.979985][ T3828] pim6reg1: entered promiscuous mode [ 38.985502][ T3828] pim6reg1: entered allmulticast mode [ 39.036644][ T3832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3832 comm=syz.3.175 [ 39.099807][ T3846] serio: Serial port pts0 [ 39.152323][ T3755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.275184][ T3755] veth0_vlan: entered promiscuous mode [ 39.288346][ T3755] veth1_vlan: entered promiscuous mode [ 39.311083][ T3755] veth0_macvtap: entered promiscuous mode [ 39.319884][ T3755] veth1_macvtap: entered promiscuous mode [ 39.331168][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.342834][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.353260][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.364007][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.374522][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.385519][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.395568][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.406132][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.416859][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.427803][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.439852][ T3755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.452661][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.463404][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.473361][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.483947][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.494047][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.504574][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.514485][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.524989][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.534832][ T3755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.545294][ T3755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.557126][ T3755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.566120][ T3755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.575403][ T3755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.584152][ T3755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.593072][ T3755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.603751][ T3873] netlink: 'syz.2.188': attribute type 25 has an invalid length. [ 39.611627][ T3873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.188'. [ 39.638626][ T3873] netlink: 44 bytes leftover after parsing attributes in process `syz.2.188'. [ 39.647767][ T3873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.188'. [ 39.713002][ T3896] loop1: detected capacity change from 0 to 1024 [ 39.725715][ T3896] EXT4-fs: Ignoring removed bh option [ 39.735691][ T3896] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.756757][ T3901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.766057][ T3896] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.767457][ T3901] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 39.791400][ T3896] EXT4-fs (loop1): mount failed [ 39.950659][ T3919] syzkaller0: refused to change device tx_queue_len [ 40.374486][ T3958] loop1: detected capacity change from 0 to 2048 [ 40.422046][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.440744][ T3957] syzkaller0: entered promiscuous mode [ 40.446637][ T3957] syzkaller0: entered allmulticast mode [ 40.454483][ T3958] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.516531][ T3755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.569108][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 40.656429][ T3985] loop1: detected capacity change from 0 to 512 [ 40.691588][ T3985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.777191][ T3985] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.228: bg 0: block 248: padding at end of block bitmap is not set [ 40.792585][ T3985] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.228: Failed to acquire dquot type 1 [ 40.807403][ T3985] EXT4-fs (loop1): 1 truncate cleaned up [ 40.813848][ T3985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.826528][ T3985] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.841486][ T3985] EXT4-fs error (device loop1): __ext4_remount:6491: comm syz.1.228: Abort forced by user [ 40.853015][ T3985] EXT4-fs (loop1): Remounting filesystem read-only [ 40.871184][ T3985] syz.1.228 (3985) used greatest stack depth: 9416 bytes left [ 40.881647][ T3755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.078084][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 41.151633][ T4036] ip6tnl1: entered promiscuous mode [ 41.157064][ T4036] ip6tnl1: entered allmulticast mode [ 41.165471][ T28] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 41.176812][ T4036] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 41.208241][ T4040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 41.246300][ T4046] syz.1.253[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.246364][ T4046] syz.1.253[4046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.259292][ T4045] bridge0: port 3(veth0_to_bond) entered blocking state [ 41.280404][ T4045] bridge0: port 3(veth0_to_bond) entered disabled state [ 41.289581][ T4045] veth0_to_bond: entered allmulticast mode [ 41.297509][ T4045] veth0_to_bond: entered promiscuous mode [ 41.303615][ T4045] bridge0: port 3(veth0_to_bond) entered blocking state [ 41.311251][ T4045] bridge0: port 3(veth0_to_bond) entered forwarding state [ 41.810824][ T4069] tipc: Started in network mode [ 41.817708][ T4069] tipc: Node identity 2, cluster identity 2544 [ 41.826534][ T4069] tipc: Node number set to 2 [ 41.832153][ T4069] tipc: Cannot configure node identity twice [ 41.878542][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.887897][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895633][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895694][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895785][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895809][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895830][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895889][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895910][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895933][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895959][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.895985][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896011][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896050][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896158][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896185][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896210][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896234][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896257][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896301][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896326][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896419][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896462][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896484][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896507][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896532][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896554][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896611][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.896636][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117372][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117401][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117426][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117454][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117560][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117590][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117629][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117660][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117690][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117726][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117750][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117771][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117792][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.117899][ T3336] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.121610][ T3336] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 42.162788][ T4077] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.276213][ T4081] syz.1.269[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.276285][ T4081] syz.1.269[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.305630][ T4081] syz.1.269[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.325238][ T4081] syz.1.269[4081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.506840][ T8] IPVS: starting estimator thread 0... [ 42.613648][ T4096] IPVS: using max 2112 ests per chain, 105600 per kthread [ 42.753879][ T4101] loop0: detected capacity change from 0 to 128 [ 42.834521][ T4101] syz.0.277: attempt to access beyond end of device [ 42.834521][ T4101] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 42.873717][ T4101] syz.0.277: attempt to access beyond end of device [ 42.873717][ T4101] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 43.186712][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.247058][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.259065][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 43.259080][ T29] audit: type=1400 audit(1726185126.868:608): avc: denied { mounton } for pid=4114 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.332646][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.387108][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.429870][ T29] audit: type=1400 audit(1726185127.038:609): avc: denied { create } for pid=4115 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.506055][ T29] audit: type=1400 audit(1726185127.118:610): avc: denied { ioctl } for pid=4115 comm="syz.0.286" path="socket:[6287]" dev="sockfs" ino=6287 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.533179][ T28] bridge_slave_1: left allmulticast mode [ 43.539475][ T28] bridge_slave_1: left promiscuous mode [ 43.546085][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.563584][ T29] audit: type=1400 audit(1726185127.118:611): avc: denied { setopt } for pid=4115 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.583648][ T29] audit: type=1400 audit(1726185127.118:612): avc: denied { bind } for pid=4115 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.605996][ T28] bridge_slave_0: left allmulticast mode [ 43.611665][ T28] bridge_slave_0: left promiscuous mode [ 43.617549][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.718806][ T29] audit: type=1400 audit(1726185127.328:613): avc: denied { create } for pid=4128 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.739193][ T29] audit: type=1400 audit(1726185127.348:614): avc: denied { connect } for pid=4128 comm="syz.0.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.766417][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.777252][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.788881][ T28] bond0 (unregistering): Released all slaves [ 43.857635][ T28] tipc: Left network mode [ 43.893780][ T29] audit: type=1400 audit(1726185127.498:615): avc: denied { read } for pid=4134 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.916969][ T29] audit: type=1400 audit(1726185127.498:616): avc: denied { open } for pid=4134 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.941944][ T29] audit: type=1400 audit(1726185127.498:617): avc: denied { getattr } for pid=4134 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=344 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.005191][ T28] hsr_slave_0: left promiscuous mode [ 44.016166][ T28] hsr_slave_1: left promiscuous mode [ 44.022859][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.030398][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.039932][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.047564][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.061258][ T28] veth1_macvtap: left promiscuous mode [ 44.067149][ T28] veth0_macvtap: left promiscuous mode [ 44.072769][ T28] veth1_vlan: left promiscuous mode [ 44.078061][ T28] veth0_vlan: left promiscuous mode [ 44.247389][ T28] team0 (unregistering): Port device team_slave_1 removed [ 44.259069][ T28] team0 (unregistering): Port device team_slave_0 removed [ 44.314857][ T4147] @: renamed from bond0 (while UP) [ 44.330621][ T4114] chnl_net:caif_netlink_parms(): no params data found [ 44.457336][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.464676][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.503841][ T4114] bridge_slave_0: entered allmulticast mode [ 44.515858][ T4114] bridge_slave_0: entered promiscuous mode [ 44.545194][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.552395][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.572801][ T4114] bridge_slave_1: entered allmulticast mode [ 44.591281][ T4114] bridge_slave_1: entered promiscuous mode [ 44.659820][ T4114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.676585][ T4114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.749331][ T4114] team0: Port device team_slave_0 added [ 44.770587][ T4114] team0: Port device team_slave_1 added [ 44.844365][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.851352][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.877479][ T4114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.883656][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 44.920808][ T4151] chnl_net:caif_netlink_parms(): no params data found [ 44.933427][ T28] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.955995][ T4114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.963090][ T4114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.989344][ T4114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.069178][ T28] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.110195][ T28] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.167824][ T4114] hsr_slave_0: entered promiscuous mode [ 45.194250][ T4114] hsr_slave_1: entered promiscuous mode [ 45.206392][ T4114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.233917][ T4114] Cannot create hsr debugfs directory [ 45.239586][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.247124][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.278337][ T4151] bridge_slave_0: entered allmulticast mode [ 45.297505][ T4151] bridge_slave_0: entered promiscuous mode [ 45.316331][ T28] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.342749][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.349925][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.361750][ T4151] bridge_slave_1: entered allmulticast mode [ 45.368460][ T4151] bridge_slave_1: entered promiscuous mode [ 45.395393][ T4232] bridge0: port 3(veth0_to_bond) entered disabled state [ 45.402731][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.410126][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.465108][ T4235] veth0_to_bond: left allmulticast mode [ 45.470839][ T4235] veth0_to_bond: left promiscuous mode [ 45.476510][ T4235] bridge0: port 3(veth0_to_bond) entered disabled state [ 45.487817][ T4235] bridge_slave_1: left allmulticast mode [ 45.493533][ T4235] bridge_slave_1: left promiscuous mode [ 45.499373][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.509097][ T4235] bridge_slave_0: left allmulticast mode [ 45.515033][ T4235] bridge_slave_0: left promiscuous mode [ 45.520878][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.588246][ T4151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.613629][ T4151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.683811][ T4151] team0: Port device team_slave_0 added [ 45.702146][ T4151] team0: Port device team_slave_1 added [ 45.722708][ T28] bridge_slave_1: left allmulticast mode [ 45.730468][ T28] bridge_slave_1: left promiscuous mode [ 45.737775][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.747196][ T28] bridge_slave_0: left allmulticast mode [ 45.753313][ T28] bridge_slave_0: left promiscuous mode [ 45.759678][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.866891][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.877575][ T28] bond_slave_0: left promiscuous mode [ 45.885065][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.895515][ T28] bond_slave_1: left promiscuous mode [ 45.903136][ T28] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 45.912870][ T28] macvlan2: left promiscuous mode [ 45.918117][ T28] team0: left promiscuous mode [ 45.924944][ T28] team_slave_0: left promiscuous mode [ 45.930413][ T28] team_slave_1: left promiscuous mode [ 45.937306][ T28] bond0 (unregistering): Released all slaves [ 45.980109][ T4151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.987157][ T4151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.013184][ T4151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.043793][ T4151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.050865][ T4151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.076919][ T4151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.170799][ T28] hsr_slave_0: left promiscuous mode [ 46.177990][ T28] hsr_slave_1: left promiscuous mode [ 46.184125][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.191549][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.201777][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.209775][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.220975][ T28] veth1_macvtap: left promiscuous mode [ 46.226644][ T28] veth0_macvtap: left promiscuous mode [ 46.232261][ T28] veth1_vlan: left promiscuous mode [ 46.237675][ T28] veth0_vlan: left promiscuous mode [ 46.348165][ T28] team0 (unregistering): Port device team_slave_1 removed [ 46.361891][ T28] team0 (unregistering): Port device team_slave_0 removed [ 46.414449][ T4151] hsr_slave_0: entered promiscuous mode [ 46.425900][ T4151] hsr_slave_1: entered promiscuous mode [ 46.432217][ T4151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.439885][ T4151] Cannot create hsr debugfs directory [ 46.649217][ T4114] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 46.668371][ T4114] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 46.687813][ T4114] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 46.713632][ T4114] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 46.805917][ T4114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.851556][ T4114] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.891718][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.899086][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.926637][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.929231][ T4286] loop0: detected capacity change from 0 to 128 [ 46.933964][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.963120][ T4286] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.988046][ T4286] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.001202][ T4114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.030355][ T4114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.140326][ T4151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.161116][ T3258] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.181437][ T4114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.205860][ T4151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.226440][ T4151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.243455][ T4151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.330882][ T4151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.381143][ T4151] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.406642][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.413875][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.448186][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.455316][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.470737][ T4318] syz.1.311 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.497001][ T4151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.545924][ T4114] veth0_vlan: entered promiscuous mode [ 47.573033][ T4114] veth1_vlan: entered promiscuous mode [ 47.623482][ T4151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.647698][ T4114] veth0_macvtap: entered promiscuous mode [ 47.678745][ T4114] veth1_macvtap: entered promiscuous mode [ 47.708145][ T4358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 47.724395][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.735046][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.744954][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.755559][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.765442][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.769374][ T4364] loop0: detected capacity change from 0 to 512 [ 47.775899][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.775922][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.789065][ T4364] EXT4-fs: Ignoring removed i_version option [ 47.792044][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.802493][ T4364] EXT4-fs: Ignoring removed nobh option [ 47.812042][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.834151][ T4364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.847502][ T4364] EXT4-fs (loop0): 1 truncate cleaned up [ 47.856455][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.866998][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.876926][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.888021][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.898227][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.908704][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.918611][ T4114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.929202][ T4114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.951429][ T4364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.977316][ T4114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.992996][ T4114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.001911][ T4114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.010788][ T4114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.019606][ T4114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.077187][ T4151] veth0_vlan: entered promiscuous mode [ 48.094714][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.097479][ T4151] veth1_vlan: entered promiscuous mode [ 48.153005][ T4151] veth0_macvtap: entered promiscuous mode [ 48.161909][ T4384] syz.4.285[4384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.161977][ T4384] syz.4.285[4384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.182022][ T4151] veth1_macvtap: entered promiscuous mode [ 48.242378][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.253271][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.263270][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.273873][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.284100][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.294611][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.304526][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.314986][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.315949][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 48.315988][ T29] audit: type=1400 audit(1726185131.928:752): avc: denied { create } for pid=4395 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.324927][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.324948][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.334197][ T4151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.414002][ T29] audit: type=1400 audit(1726185131.938:753): avc: denied { create } for pid=4391 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.426348][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.434670][ T29] audit: type=1400 audit(1726185131.988:754): avc: denied { create } for pid=4391 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.445028][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.464315][ T29] audit: type=1400 audit(1726185131.998:755): avc: denied { write } for pid=4391 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.474142][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.493363][ T29] audit: type=1400 audit(1726185131.998:756): avc: denied { connect } for pid=4391 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.504315][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.504331][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.524179][ T29] audit: type=1400 audit(1726185131.998:757): avc: denied { name_connect } for pid=4391 comm="syz.4.324" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 48.534037][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.534060][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.544495][ T29] audit: type=1400 audit(1726185131.998:758): avc: denied { setopt } for pid=4395 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.566490][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.576333][ T29] audit: type=1400 audit(1726185132.018:759): avc: denied { write } for pid=4395 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.586784][ T4151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.586807][ T4151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.693761][ T4151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.732548][ T4151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.741646][ T4151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.751263][ T4151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.760047][ T4151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.795941][ T29] audit: type=1400 audit(1726185132.278:760): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.818071][ T29] audit: type=1400 audit(1726185132.278:761): avc: denied { search } for pid=2942 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.951663][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.970491][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.993084][ T4430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.032026][ T4430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.176513][ T4457] loop1: detected capacity change from 0 to 512 [ 49.195326][ T4457] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.244774][ T4468] loop4: detected capacity change from 0 to 512 [ 49.247038][ T4457] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.294181][ T4457] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.308775][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.322015][ T4468] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.332489][ T4457] EXT4-fs (loop1): 1 truncate cleaned up [ 49.341473][ T4457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.443020][ T4468] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.341: corrupted inode contents [ 49.475473][ T4468] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #19: comm syz.4.341: mark_inode_dirty error [ 49.502954][ T4468] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.341: corrupted inode contents [ 49.521918][ T4505] loop0: detected capacity change from 0 to 512 [ 49.529153][ T4468] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3007: inode #19: comm syz.4.341: mark_inode_dirty error [ 49.533779][ T4505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.555535][ T4468] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3010: inode #19: comm syz.4.341: mark inode dirty (error -117) [ 49.577255][ T4505] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 49.595064][ T4468] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 49.595888][ T4505] EXT4-fs (loop0): 1 truncate cleaned up [ 49.613910][ T4505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.655310][ T4114] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.667445][ T4520] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 49.772539][ T4534] syzkaller0: entered promiscuous mode [ 49.778115][ T4534] syzkaller0: entered allmulticast mode [ 49.955760][ T4566] loop3: detected capacity change from 0 to 1024 [ 49.967155][ T4566] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 49.977012][ T4566] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 49.987921][ T4566] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.999300][ T4566] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: inode #5: comm syz.3.351: unexpected bad inode w/o EXT4_IGET_BAD [ 50.016400][ T4566] EXT4-fs (loop3): no journal found [ 50.021888][ T4566] EXT4-fs (loop3): can't get journal size [ 50.031961][ T3755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.032147][ T4566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.072490][ T4151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.277317][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.301441][ T4608] loop0: detected capacity change from 0 to 1024 [ 50.316096][ T4608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.349958][ T50] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 50.366607][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 50.379152][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.379152][ T50] [ 50.388888][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 50.395007][ T50] EXT4-fs (loop0): Free/Dirty block details [ 50.401301][ T50] EXT4-fs (loop0): free_blocks=68451041280 [ 50.407431][ T50] EXT4-fs (loop0): dirty_blocks=64 [ 50.412638][ T50] EXT4-fs (loop0): Block reservation details [ 50.418825][ T50] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 50.427573][ T3258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.509541][ T4625] loop1: detected capacity change from 0 to 512 [ 50.518948][ T4625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.637859][ T4637] loop4: detected capacity change from 0 to 2048 [ 50.666175][ T4637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.766157][ T4646] loop3: detected capacity change from 0 to 2048 [ 50.785923][ T4646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.808224][ T4114] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.868091][ T4151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.025110][ T3755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.313331][ T4673] chnl_net:caif_netlink_parms(): no params data found [ 51.351324][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.358614][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.366220][ T4673] bridge_slave_0: entered allmulticast mode [ 51.372829][ T4673] bridge_slave_0: entered promiscuous mode [ 51.380268][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.387485][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.394872][ T4673] bridge_slave_1: entered allmulticast mode [ 51.401357][ T4673] bridge_slave_1: entered promiscuous mode [ 51.420887][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.433820][ T4673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.448959][ T4673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.466861][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.497141][ T4673] team0: Port device team_slave_0 added [ 51.506018][ T4673] team0: Port device team_slave_1 added [ 51.526205][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.549630][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.556662][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.582743][ T4673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.594381][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.601415][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.628037][ T4673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.642696][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.654176][ T4699] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.685019][ T4673] hsr_slave_0: entered promiscuous mode [ 51.693046][ T4673] hsr_slave_1: entered promiscuous mode [ 51.708948][ T4673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.716735][ T4673] Cannot create hsr debugfs directory [ 51.768811][ T50] bridge_slave_1: left allmulticast mode [ 51.774720][ T50] bridge_slave_1: left promiscuous mode [ 51.780572][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.792626][ T50] bridge_slave_0: left allmulticast mode [ 51.798417][ T50] bridge_slave_0: left promiscuous mode [ 51.804289][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.936587][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.947539][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.959786][ T50] bond0 (unregistering): Released all slaves [ 52.096348][ T50] hsr_slave_0: left promiscuous mode [ 52.112089][ T50] hsr_slave_1: left promiscuous mode [ 52.122644][ T4739] loop3: detected capacity change from 0 to 128 [ 52.145492][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.152947][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.195490][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.203239][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.206699][ T4739] syz.3.404: attempt to access beyond end of device [ 52.206699][ T4739] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 52.233392][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 52.257730][ T50] veth1_macvtap: left promiscuous mode [ 52.263892][ T50] veth0_macvtap: left promiscuous mode [ 52.269615][ T50] veth1_vlan: left promiscuous mode [ 52.274944][ T50] veth0_vlan: left promiscuous mode [ 52.499759][ T50] team0 (unregistering): Port device team_slave_1 removed [ 52.510058][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 52.524407][ T50] team0 (unregistering): Port device team_slave_0 removed [ 52.548289][ T4785] loop0: detected capacity change from 0 to 128 [ 52.585350][ T4785] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.620512][ T4785] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.710563][ T3258] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.788256][ T4791] loop0: detected capacity change from 0 to 2048 [ 52.788659][ T4794] netlink: 'syz.1.420': attribute type 1 has an invalid length. [ 52.838066][ T4794] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 52.848137][ T4791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.883779][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 53.033526][ T4673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.037953][ T4819] netlink: 104 bytes leftover after parsing attributes in process `syz.1.424'. [ 53.052631][ T4673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.076216][ T4673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.090678][ T4673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.188240][ T4831] loop1: detected capacity change from 0 to 512 [ 53.198807][ T4831] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.211880][ T4673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.221078][ T4831] EXT4-fs (loop1): 1 truncate cleaned up [ 53.229222][ T4831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.254149][ T4831] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 53.258930][ T4673] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.283448][ T4831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.302996][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.310154][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.341624][ T4840] loop1: detected capacity change from 0 to 512 [ 53.355887][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.363073][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.386147][ T4812] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.411955][ T4673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.422419][ T4673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.433505][ T4812] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 53.446247][ T4812] EXT4-fs (loop0): This should not happen!! Data will be lost [ 53.446247][ T4812] [ 53.456029][ T4812] EXT4-fs (loop0): Total free blocks count 0 [ 53.462140][ T4812] EXT4-fs (loop0): Free/Dirty block details [ 53.468131][ T4812] EXT4-fs (loop0): free_blocks=2415919104 [ 53.473958][ T4812] EXT4-fs (loop0): dirty_blocks=8192 [ 53.479300][ T4812] EXT4-fs (loop0): Block reservation details [ 53.485404][ T4812] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 53.495718][ T4840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.508999][ T4840] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.550418][ T3755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.599885][ T4673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.623067][ T4812] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 53.721416][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 53.721432][ T29] audit: type=1400 audit(1726185137.328:928): avc: denied { create } for pid=4874 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.752303][ T4673] veth0_vlan: entered promiscuous mode [ 53.767919][ T4673] veth1_vlan: entered promiscuous mode [ 53.800517][ T29] audit: type=1400 audit(1726185137.408:929): avc: denied { write } for pid=4874 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.818332][ T4673] veth0_macvtap: entered promiscuous mode [ 53.840754][ T4673] veth1_macvtap: entered promiscuous mode [ 53.878086][ T29] audit: type=1400 audit(1726185137.488:930): avc: denied { read } for pid=4885 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.884935][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.908915][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.918835][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.929835][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.939854][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.950420][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.960398][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.970921][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.980942][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.991688][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.004544][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.018667][ T29] audit: type=1400 audit(1726185137.628:931): avc: denied { write } for pid=4889 comm="syz.3.435" name="001" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.018835][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.047559][ T4890] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.053076][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.070279][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.080762][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.090763][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.098475][ T29] audit: type=1400 audit(1726185137.708:932): avc: denied { mount } for pid=4894 comm="syz.0.433" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.101335][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.133242][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.144715][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.155942][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.167755][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.182912][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.192389][ T4673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.201326][ T4673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.210225][ T4673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.219327][ T4673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.268546][ T4900] netlink: 'syz.2.382': attribute type 21 has an invalid length. [ 54.277244][ T4900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.382'. [ 54.314898][ T4905] loop2: detected capacity change from 0 to 512 [ 54.335975][ T4905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.349653][ T4905] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.367805][ T29] audit: type=1400 audit(1726185137.978:933): avc: denied { execute } for pid=4904 comm="syz.2.438" path="/1/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.401055][ T4673] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.446234][ T29] audit: type=1326 audit(1726185138.058:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0882a7def9 code=0x7ffc0000 [ 54.469725][ T29] audit: type=1326 audit(1726185138.058:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0882a7def9 code=0x7ffc0000 [ 54.517749][ T29] audit: type=1326 audit(1726185138.058:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0882a7def9 code=0x7ffc0000 [ 54.541266][ T29] audit: type=1326 audit(1726185138.058:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0882a7def9 code=0x7ffc0000 [ 54.605307][ T4924] loop3: detected capacity change from 0 to 2048 [ 54.625394][ T4924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.651634][ T4151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.677352][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 54.768937][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.776806][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.784493][ T4941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.784696][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.801618][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.809710][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.817468][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.825187][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.832998][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.840814][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.848508][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.856233][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.864122][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.871938][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.877189][ T4947] loop2: detected capacity change from 0 to 2048 [ 54.879676][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.893715][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.901835][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.909537][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.917242][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.925108][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.932812][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.940560][ T3112] hid-generic 0000:1000003:0000.0002: unknown main item tag 0x0 [ 54.949540][ T4941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.950751][ T3112] hid-generic 0000:1000003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.974665][ T4947] loop2: p1 < > p4 [ 54.982272][ T4947] loop2: p4 size 8388608 extends beyond EOD, truncated [ 55.042082][ T2960] loop2: p1 < > p4 [ 55.048647][ T2960] loop2: p4 size 8388608 extends beyond EOD, truncated [ 55.082835][ T3252] udevd[3252]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 55.086876][ T3249] udevd[3249]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.296544][ T4965] Process accounting resumed [ 55.491022][ T4967] loop3: detected capacity change from 0 to 512 [ 55.516810][ T4967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.534107][ T4967] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.582043][ T4151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.869450][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 55.878400][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.885887][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.894509][ T4994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.902194][ T4994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.941239][ T3272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.004652][ T3272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.040393][ T5004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.481'. [ 56.049823][ T5004] unsupported nlmsg_type 40 [ 56.078174][ T3272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.125124][ T3272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.230557][ T3272] bridge_slave_1: left allmulticast mode [ 56.237427][ T3272] bridge_slave_1: left promiscuous mode [ 56.243962][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.278165][ T3272] bridge_slave_0: left allmulticast mode [ 56.283954][ T3272] bridge_slave_0: left promiscuous mode [ 56.289781][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.308205][ T5028] syz.1.490[5028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.308339][ T5028] syz.1.490[5028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.467020][ T3272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.484770][ T5036] loop1: detected capacity change from 0 to 512 [ 56.498274][ T5036] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.510466][ T3272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.515964][ T5036] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 56.534380][ T5036] EXT4-fs (loop1): 1 truncate cleaned up [ 56.540653][ T5036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.555950][ T3272] bond0 (unregistering): Released all slaves [ 56.581043][ T4996] chnl_net:caif_netlink_parms(): no params data found [ 56.656328][ T3272] hsr_slave_0: left promiscuous mode [ 56.664653][ T3272] hsr_slave_1: left promiscuous mode [ 56.670700][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.678177][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.688634][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.696390][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.713506][ T3272] veth1_macvtap: left promiscuous mode [ 56.719326][ T3272] veth0_macvtap: left promiscuous mode [ 56.725014][ T3272] veth1_vlan: left promiscuous mode [ 56.730491][ T3272] veth0_vlan: left promiscuous mode [ 56.880399][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 56.898960][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 56.956157][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 57.003847][ T4996] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.011181][ T4996] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.020942][ T4996] bridge_slave_0: entered allmulticast mode [ 57.027497][ T4996] bridge_slave_0: entered promiscuous mode [ 57.039097][ T4996] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.046402][ T4996] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.056305][ T4996] bridge_slave_1: entered allmulticast mode [ 57.069580][ T4996] bridge_slave_1: entered promiscuous mode [ 57.081096][ T3755] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.104708][ T4996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.117455][ T4996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.152559][ T4996] team0: Port device team_slave_0 added [ 57.160316][ T4996] team0: Port device team_slave_1 added [ 57.190445][ T4996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.197548][ T4996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.225929][ T4996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.257222][ T4996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.266049][ T4996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.294379][ T4996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.376638][ T4996] hsr_slave_0: entered promiscuous mode [ 57.386191][ T4996] hsr_slave_1: entered promiscuous mode [ 57.407787][ T5124] @: renamed from bond0 (while UP) [ 57.489520][ T5135] capability: warning: `syz.1.509' uses 32-bit capabilities (legacy support in use) [ 57.576641][ T5142] loop2: detected capacity change from 0 to 512 [ 57.587003][ T5142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.606412][ T5142] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 57.623305][ T5142] EXT4-fs (loop2): 1 truncate cleaned up [ 57.630258][ T5142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.802450][ T4996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.820692][ T4996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.832942][ T4996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.843932][ T4996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.927791][ T4996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.965195][ T4996] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.988120][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.995702][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.015426][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.022620][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.177041][ T5219] tipc: Started in network mode [ 58.182185][ T5219] tipc: Node identity b62d90845d32, cluster identity 4711 [ 58.189474][ T5219] tipc: Enabled bearer , priority 0 [ 58.196879][ C0] ------------[ cut here ]------------ [ 58.202496][ C0] WARNING: CPU: 0 PID: 15 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x444/0x450 [ 58.211889][ C0] Modules linked in: [ 58.215843][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.11.0-rc7-syzkaller-00093-gfdf042df0463 #0 [ 58.226507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 58.236620][ C0] RIP: 0010:inet_sock_destruct+0x444/0x450 [ 58.242470][ C0] Code: 0f 0b 90 e9 ab fe ff ff e8 a9 b6 c6 fc 90 0f 0b 90 e9 c5 fe ff ff e8 9b b6 c6 fc 90 0f 0b 90 e9 df fe ff ff e8 8d b6 c6 fc 90 <0f> 0b 90 e9 35 ff ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 [ 58.262166][ C0] RSP: 0018:ffffc90000087cd0 EFLAGS: 00010246 [ 58.268301][ C0] RAX: ffffffff84691cd3 RBX: 00000000000003ff RCX: ffff8881001c8000 [ 58.276328][ C0] RDX: 0000000000000100 RSI: 00000000000003ff RDI: 0000000000000000 [ 58.284527][ C0] RBP: ffff888103245000 R08: ffffffff84691c04 R09: 0000000000000000 [ 58.293020][ C0] R10: 0001ffffffffffff R11: 0001888103245160 R12: ffff8881032452e8 [ 58.301675][ C0] R13: ffff8881032452e8 R14: ffff888103245028 R15: ffff888103245012 [ 58.309898][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 58.318982][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.325754][ C0] CR2: 0000001b2ec18ff8 CR3: 00000001110de000 CR4: 00000000003506f0 [ 58.333785][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.342279][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.350506][ C0] Call Trace: [ 58.353840][ C0] [ 58.356696][ T5219] tipc: Resetting bearer [ 58.357057][ C0] ? __warn+0x13c/0x350 [ 58.367119][ C0] ? report_bug+0x315/0x420 [ 58.371690][ C0] ? inet_sock_destruct+0x444/0x450 [ 58.376990][ C0] ? handle_bug+0x3e/0x70 [ 58.381369][ C0] ? exc_invalid_op+0x1a/0x50 [ 58.386124][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 58.391377][ C0] ? inet_sock_destruct+0x374/0x450 [ 58.396664][ C0] ? inet_sock_destruct+0x443/0x450 [ 58.401908][ C0] ? inet_sock_destruct+0x444/0x450 [ 58.407198][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 58.412403][ C0] inet6_sock_destruct+0x1d/0x30 [ 58.417457][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 58.423245][ C0] __sk_destruct+0x3d/0x440 [ 58.427833][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 58.433004][ C0] rcu_core+0x594/0xbf0 [ 58.437268][ C0] rcu_core_si+0xd/0x20 [ 58.441468][ C0] handle_softirqs+0xc3/0x280 [ 58.446232][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 58.451469][ C0] run_ksoftirqd+0x1c/0x30 [ 58.451574][ T4996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.455935][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 58.455985][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 58.456009][ C0] kthread+0x1d1/0x210 [ 58.477340][ C0] ? __pfx_kthread+0x10/0x10 [ 58.481987][ C0] ret_from_fork+0x4b/0x60 [ 58.486508][ C0] ? __pfx_kthread+0x10/0x10 [ 58.491163][ C0] ret_from_fork_asm+0x1a/0x30 [ 58.496026][ C0] [ 58.499075][ C0] ---[ end trace 0000000000000000 ]--- [ 58.505864][ T4673] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.516273][ T5218] tipc: Resetting bearer [ 58.553262][ T5218] tipc: Disabling bearer [ 59.127971][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.186900][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.256523][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.317355][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.447298][ T50] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.458759][ T50] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.468989][ T50] @ (unregistering): Released all slaves [ 59.609427][ T50] hsr_slave_0: left promiscuous mode [ 59.615707][ T50] hsr_slave_1: left promiscuous mode [ 59.621500][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.628995][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.638849][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.646452][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.657019][ T50] veth1_macvtap: left promiscuous mode [ 59.662846][ T50] veth0_macvtap: left promiscuous mode [ 59.668453][ T50] veth1_vlan: left promiscuous mode [ 59.673929][ T50] veth0_vlan: left promiscuous mode [ 59.765000][ T50] team0 (unregistering): Port device team_slave_1 removed [ 59.775559][ T50] team0 (unregistering): Port device team_slave_0 removed [ 59.948867][ T5283] chnl_net:caif_netlink_parms(): no params data found [ 59.989510][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.996780][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.004117][ T5283] bridge_slave_0: entered allmulticast mode [ 60.010451][ T5283] bridge_slave_0: entered promiscuous mode [ 60.017445][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.024590][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.031865][ T5283] bridge_slave_1: entered allmulticast mode [ 60.038483][ T5283] bridge_slave_1: entered promiscuous mode [ 60.058178][ T5283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.069155][ T5283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.090290][ T5283] team0: Port device team_slave_0 added [ 60.100731][ T5283] team0: Port device team_slave_1 added [ 60.118613][ T5283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.125746][ T5283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.151827][ T5283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.165555][ T5283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.172629][ T5283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.198786][ T5283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.253320][ T5283] hsr_slave_0: entered promiscuous mode [ 60.259652][ T5342] loop2: detected capacity change from 0 to 512 [ 60.267703][ T5283] hsr_slave_1: entered promiscuous mode [ 60.272775][ T5342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.285904][ T5283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.293684][ T5283] Cannot create hsr debugfs directory [ 60.299418][ T5342] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.324419][ T5342] EXT4-fs (loop2): 1 truncate cleaned up [ 60.331289][ T5342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.608772][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 60.685816][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.693151][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.710199][ T5345] bridge_slave_0: entered allmulticast mode [ 60.717520][ T5345] bridge_slave_0: entered promiscuous mode [ 60.730609][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.738039][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.746779][ T5345] bridge_slave_1: entered allmulticast mode [ 60.753820][ T5345] bridge_slave_1: entered promiscuous mode [ 60.790742][ T5283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.801452][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.812866][ T5283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.822152][ T5283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.832960][ T5283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.843881][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.867294][ T5345] team0: Port device team_slave_0 added [ 60.878965][ T5345] team0: Port device team_slave_1 added [ 60.913308][ T4673] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.947531][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 60.947738][ T29] audit: type=1400 audit(1726185144.558:988): avc: denied { bind } for pid=5421 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 60.973332][ T29] audit: type=1400 audit(1726185144.558:989): avc: denied { node_bind } for pid=5421 comm="syz.2.531" saddr=::ffff:224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 60.995809][ T29] audit: type=1400 audit(1726185144.568:990): avc: denied { create } for pid=5421 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.026621][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.034189][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.060266][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.084286][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.091434][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.118242][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.166712][ T5437] loop2: detected capacity change from 0 to 128 [ 61.178230][ T5345] hsr_slave_0: entered promiscuous mode [ 61.190534][ T5345] hsr_slave_1: entered promiscuous mode [ 61.198117][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.207313][ T5345] Cannot create hsr debugfs directory [ 61.207770][ T29] audit: type=1400 audit(1726185144.818:991): avc: denied { mounton } for pid=5436 comm="syz.2.534" path="/33/file0/bus" dev="loop2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 61.266939][ T5283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.284155][ T5437] loop2: detected capacity change from 128 to 11 [ 61.298643][ T5437] syz.2.534: attempt to access beyond end of device [ 61.298643][ T5437] loop2: rw=0, sector=58, nr_sectors = 1 limit=11 [ 61.315129][ T5437] FAT-fs (loop2): FAT read failed (blocknr 32) [ 61.322550][ T5437] FAT-fs (loop2): FAT read failed (blocknr 32) [ 61.354535][ T4673] FAT-fs (loop2): Directory bread(block 34) failed [ 61.368981][ T5283] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.377666][ T4673] FAT-fs (loop2): Directory bread(block 35) failed [ 61.394424][ T4673] FAT-fs (loop2): Directory bread(block 36) failed [ 61.401444][ T4673] FAT-fs (loop2): Directory bread(block 37) failed [ 61.409759][ T4673] FAT-fs (loop2): Directory bread(block 38) failed [ 61.416644][ T4673] FAT-fs (loop2): Directory bread(block 39) failed [ 61.423466][ T4673] FAT-fs (loop2): Directory bread(block 40) failed [ 61.432489][ T4673] FAT-fs (loop2): Directory bread(block 41) failed [ 61.448601][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.455797][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.465401][ T50] FAT-fs (loop2): unable to read inode block for updating (i_pos 548) [ 61.524522][ T5345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.537487][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.544622][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.561402][ T5423] chnl_net:caif_netlink_parms(): no params data found [ 61.590548][ T5283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.621959][ T5345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.668010][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.675192][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.683324][ T5423] bridge_slave_0: entered allmulticast mode [ 61.691896][ T5423] bridge_slave_0: entered promiscuous mode [ 61.699256][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.706417][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.714116][ T5423] bridge_slave_1: entered allmulticast mode [ 61.720848][ T5423] bridge_slave_1: entered promiscuous mode [ 61.744979][ T5345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.803389][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.816754][ T5345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.848516][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.866192][ T5283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.928045][ T5423] team0: Port device team_slave_0 added [ 61.944349][ T5423] team0: Port device team_slave_1 added [ 61.981526][ T5345] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.999117][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.006268][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.032812][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.046501][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.053698][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.079753][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.100689][ T5345] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.110559][ T5345] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.134969][ T5345] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.160668][ T5423] hsr_slave_0: entered promiscuous mode [ 62.167157][ T5423] hsr_slave_1: entered promiscuous mode [ 62.173498][ T5423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.181484][ T5423] Cannot create hsr debugfs directory [ 62.216626][ T5283] veth0_vlan: entered promiscuous mode [ 62.243394][ T5283] veth1_vlan: entered promiscuous mode [ 62.319487][ T5283] veth0_macvtap: entered promiscuous mode [ 62.343126][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.386518][ T5283] veth1_macvtap: entered promiscuous mode [ 62.400179][ T5487] chnl_net:caif_netlink_parms(): no params data found [ 62.420543][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.431283][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.441322][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.451895][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.462040][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.472544][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.484898][ T5283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.513690][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.524302][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.534370][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.544826][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.554672][ T5283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.565216][ T5283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.576448][ T5283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.590538][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.609602][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.616974][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.629240][ T5283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.638052][ T5283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.647576][ T5283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.656650][ T5283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.698605][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.705928][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.717026][ T5487] bridge_slave_0: entered allmulticast mode [ 62.724286][ T5487] bridge_slave_0: entered promiscuous mode [ 62.732234][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.739372][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.765562][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.772741][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.782434][ T5487] bridge_slave_1: entered allmulticast mode [ 62.791238][ T5487] bridge_slave_1: entered promiscuous mode [ 62.889550][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.912139][ T5582] Zero length message leads to an empty skb [ 62.919545][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.972153][ T29] audit: type=1400 audit(1726185146.578:992): avc: denied { setopt } for pid=5585 comm="syz.0.540" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.000827][ T5487] team0: Port device team_slave_0 added [ 63.015599][ T5487] team0: Port device team_slave_1 added [ 63.039083][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.046158][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.072249][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.092222][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.099416][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.125564][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.146198][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.189630][ T5487] hsr_slave_0: entered promiscuous mode [ 63.196434][ T5487] hsr_slave_1: entered promiscuous mode [ 63.202466][ T5487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.210496][ T5487] Cannot create hsr debugfs directory [ 63.291346][ T3352] bridge_slave_1: left allmulticast mode [ 63.297331][ T3352] bridge_slave_1: left promiscuous mode [ 63.303075][ T3352] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.312869][ T3352] bridge_slave_0: left allmulticast mode [ 63.318609][ T3352] bridge_slave_0: left promiscuous mode [ 63.324614][ T3352] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.468853][ T3352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.479773][ T3352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.490485][ T3352] bond0 (unregistering): Released all slaves [ 63.548667][ T5345] veth0_vlan: entered promiscuous mode [ 63.566520][ T5345] veth1_vlan: entered promiscuous mode [ 63.583738][ T5578] chnl_net:caif_netlink_parms(): no params data found [ 63.625668][ T3352] hsr_slave_0: left promiscuous mode [ 63.631482][ T3352] hsr_slave_1: left promiscuous mode [ 63.638229][ T3352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.648068][ T3352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.787517][ T3352] team0 (unregistering): Port device team_slave_1 removed [ 63.809483][ T3352] team0 (unregistering): Port device team_slave_0 removed [ 63.872136][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.879309][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.890579][ T5578] bridge_slave_0: entered allmulticast mode [ 63.893225][ T29] audit: type=1400 audit(1726185147.498:993): avc: denied { write } for pid=5641 comm="syz.0.543" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.909219][ T5578] bridge_slave_0: entered promiscuous mode [ 63.932504][ T5345] veth0_macvtap: entered promiscuous mode [ 63.940621][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.946483][ T5644] loop0: detected capacity change from 0 to 128 [ 63.947756][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.963789][ T5578] bridge_slave_1: entered allmulticast mode [ 63.970436][ T5578] bridge_slave_1: entered promiscuous mode [ 64.006318][ T5345] veth1_macvtap: entered promiscuous mode [ 64.023449][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.037718][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.047615][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.058145][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.068154][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.078685][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.088555][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.099004][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.108936][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.119389][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.130055][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.138725][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.150832][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.160797][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.171284][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.181176][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.191711][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.202233][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.212951][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.223788][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.234483][ T5345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.243237][ T5345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.252048][ T5345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.260805][ T5345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.275862][ T5647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 64.284971][ T5647] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (128) [ 64.310291][ T5578] team0: Port device team_slave_0 added [ 64.326515][ T5578] team0: Port device team_slave_1 added [ 64.370202][ T5487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.383332][ T5423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.396380][ T5423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.411618][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.419521][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.447931][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.459898][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.466974][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.493192][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.538000][ T5487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.551302][ T5423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.569637][ T5578] hsr_slave_0: entered promiscuous mode [ 64.580026][ T5578] hsr_slave_1: entered promiscuous mode [ 64.587123][ T5423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.599568][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 64.636610][ T5487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.719739][ T5487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.793030][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.802091][ T3352] bridge_slave_1: left allmulticast mode [ 64.808084][ T3352] bridge_slave_1: left promiscuous mode [ 64.814616][ T3352] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.824351][ T3352] bridge_slave_0: left allmulticast mode [ 64.830762][ T3352] bridge_slave_0: left promiscuous mode [ 64.838348][ T3352] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.904943][ T5688] netlink: 72 bytes leftover after parsing attributes in process `syz.0.550'. [ 64.976324][ T3352] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.987764][ T3352] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.999609][ T3352] bond0 (unregistering): Released all slaves [ 65.044376][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.071955][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.079101][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.090329][ T5487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.109244][ T5578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.123804][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.131043][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.140956][ T5487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.157537][ T3352] hsr_slave_0: left promiscuous mode [ 65.163394][ T3352] hsr_slave_1: left promiscuous mode [ 65.169591][ T3352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.177068][ T3352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.187247][ T3352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.195240][ T3352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.209031][ T3352] veth1_macvtap: left promiscuous mode [ 65.214926][ T3352] veth0_macvtap: left promiscuous mode [ 65.220868][ T3352] veth1_vlan: left promiscuous mode [ 65.227726][ T3352] veth0_vlan: left promiscuous mode [ 65.351078][ T3352] team0 (unregistering): Port device team_slave_1 removed [ 65.365668][ T3352] team0 (unregistering): Port device team_slave_0 removed [ 65.412198][ T5487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.425682][ T5487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.455424][ T5578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.534429][ T5578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.606583][ T5578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.647532][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.669612][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.685676][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.713185][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.720404][ T3279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.734950][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.749126][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.756262][ T3279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.766827][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.780484][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.797016][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.891018][ T5487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.963100][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.978643][ T5423] veth0_vlan: entered promiscuous mode [ 65.997981][ T5423] veth1_vlan: entered promiscuous mode [ 66.023656][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.045304][ T257] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.052415][ T257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.082122][ T257] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.090120][ T257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.127866][ T5714] loop1: detected capacity change from 0 to 8192 [ 66.136981][ T5714] vfat: Unknown parameter '0000000000000000000000718446744073709551615ÿÿ0x0000000000000000ÿ' [ 66.170789][ T5423] veth0_macvtap: entered promiscuous mode [ 66.193423][ T5423] veth1_macvtap: entered promiscuous mode [ 66.204969][ T29] audit: type=1400 audit(1726185149.818:994): avc: denied { write } for pid=2942 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.227187][ T29] audit: type=1400 audit(1726185149.818:995): avc: denied { remove_name } for pid=2942 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.250287][ T29] audit: type=1400 audit(1726185149.818:996): avc: denied { rename } for pid=2942 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.272742][ T29] audit: type=1400 audit(1726185149.818:997): avc: denied { add_name } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.288616][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.295385][ T29] audit: type=1400 audit(1726185149.818:998): avc: denied { unlink } for pid=2942 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.305848][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.328648][ T29] audit: type=1400 audit(1726185149.818:999): avc: denied { create } for pid=2942 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.338520][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.369830][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.379698][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.390197][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.400214][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.410948][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.431381][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.446001][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.456556][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.466503][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.476986][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.486996][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.497702][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.507616][ T5423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.518333][ T5423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.531839][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.545838][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.555371][ T5423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.564469][ T5423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.573185][ T5423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.582108][ T5423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.601880][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.619836][ T29] audit: type=1400 audit(1726185150.228:1000): avc: denied { write } for pid=5720 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.705488][ T29] audit: type=1326 audit(1726185150.308:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a5bdef9 code=0x7ffc0000 [ 66.729100][ T29] audit: type=1326 audit(1726185150.308:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444a5bdef9 code=0x7ffc0000 [ 66.779160][ T29] audit: type=1326 audit(1726185150.368:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.3.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f444a5bdef9 code=0x7ffc0000 [ 66.834416][ T5487] veth0_vlan: entered promiscuous mode [ 66.866670][ T5487] veth1_vlan: entered promiscuous mode [ 66.906604][ T5487] veth0_macvtap: entered promiscuous mode [ 66.930824][ T5487] veth1_macvtap: entered promiscuous mode [ 66.950183][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.960728][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.970879][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.981386][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.991458][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.001947][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.012037][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.023309][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.033255][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.044565][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.058186][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.066738][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.077476][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.087433][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.098071][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.107975][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.118507][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.128412][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.138858][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.148702][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.159176][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.176582][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.204865][ T5487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.213793][ T5487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222538][ T5487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231330][ T5487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.276885][ T5578] veth0_vlan: entered promiscuous mode [ 67.289529][ T5578] veth1_vlan: entered promiscuous mode [ 67.349091][ T5578] veth0_macvtap: entered promiscuous mode [ 67.358308][ T5789] syz.1.574[5789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.358417][ T5789] syz.1.574[5789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.371439][ T5578] veth1_macvtap: entered promiscuous mode [ 67.411370][ T5791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.575'. [ 67.466887][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.477395][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.487356][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.498059][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.507975][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.518528][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.528533][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.539294][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.549291][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.559828][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.569677][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.580547][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.593148][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.645369][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.655993][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.665901][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.676409][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.686513][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.696967][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.706820][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.717339][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.727498][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.737942][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.747882][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.758431][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.771131][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.782828][ T5578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.791795][ T5578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800672][ T5578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.809678][ T5578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.867118][ T5811] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5811 comm=syz.4.539 [ 67.907738][ T5813] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 68.145229][ T5842] loop2: detected capacity change from 0 to 164 [ 68.212915][ T5846] loop2: detected capacity change from 0 to 2048 [ 68.226481][ T5846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.254938][ T5487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.325601][ T5855] loop2: detected capacity change from 0 to 1024 [ 68.335682][ T5855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.356571][ T5855] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 68.377407][ T5487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.657541][ T5345] ================================================================== [ 68.666317][ T5345] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 68.673928][ T5345] [ 68.676274][ T5345] read-write to 0xffff888113b0c5e0 of 8 bytes by task 5880 on cpu 0: [ 68.684370][ T5345] shmem_recalc_inode+0x36/0x1b0 [ 68.689534][ T5345] shmem_get_folio_gfp+0x7e4/0xd80 [ 68.694815][ T5345] shmem_write_begin+0xa0/0x1c0 [ 68.699700][ T5345] generic_perform_write+0x1b4/0x580 [ 68.705112][ T5345] shmem_file_write_iter+0xc8/0xf0 [ 68.710280][ T5345] __kernel_write_iter+0x24f/0x4e0 [ 68.715505][ T5345] dump_user_range+0x3a7/0x550 [ 68.720301][ T5345] elf_core_dump+0x1aeb/0x1c30 [ 68.725102][ T5345] do_coredump+0xfa7/0x1810 [ 68.729643][ T5345] get_signal+0xdc1/0x1080 [ 68.734906][ T5345] arch_do_signal_or_restart+0x95/0x4b0 [ 68.741142][ T5345] irqentry_exit_to_user_mode+0x9a/0x130 [ 68.746823][ T5345] irqentry_exit+0x12/0x50 [ 68.751296][ T5345] exc_general_protection+0x33d/0x4d0 [ 68.757114][ T5345] asm_exc_general_protection+0x26/0x30 [ 68.762719][ T5345] [ 68.765100][ T5345] read to 0xffff888113b0c5e0 of 8 bytes by task 5345 on cpu 1: [ 68.772934][ T5345] shmem_getattr+0x42/0x200 [ 68.777787][ T5345] vfs_getattr+0x19b/0x1e0 [ 68.782934][ T5345] vfs_statx+0x134/0x2f0 [ 68.787315][ T5345] vfs_fstatat+0xec/0x110 [ 68.791868][ T5345] __se_sys_newfstatat+0x58/0x260 [ 68.797282][ T5345] __x64_sys_newfstatat+0x55/0x70 [ 68.802516][ T5345] x64_sys_call+0x141f/0x2d60 [ 68.807448][ T5345] do_syscall_64+0xc9/0x1c0 [ 68.812341][ T5345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.818917][ T5345] [ 68.821336][ T5345] value changed: 0x000000000000006b -> 0x000000000000006e [ 68.828472][ T5345] [ 68.831356][ T5345] Reported by Kernel Concurrency Sanitizer on: [ 68.837533][ T5345] CPU: 1 UID: 0 PID: 5345 Comm: syz-executor Tainted: G W 6.11.0-rc7-syzkaller-00093-gfdf042df0463 #0 [ 68.850173][ T5345] Tainted: [W]=WARN [ 68.854013][ T5345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 68.864547][ T5345] ==================================================================