last executing test programs: 2.695287696s ago: executing program 2 (id=1861): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 1.854520002s ago: executing program 3 (id=1902): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0), 0xee, 0x442, &(0x7f0000000d00)="$eJzs281vG0UbAPBn10n6vv1KKKW0oYVAQUR8JE1aoAcuIJA4gIQEh3IMSVqFug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSqIkFo4Ba29m9punObDrkP9+0nbznjHnnk8O97xTBxA1xrK/kkidkfErxHRX83WFxiq/ndjaWHy76WFySSWl9/4I6mUu760MFkULZ63K88MpxHpJ0leSb25i5fOTpTL0xfy/Oj8uXdH5y5eenrm3MSZ6TPT58dPnjxxfOy5Z8efaUmcWVzXBz+YPXzolbeuvDZ56srbP36dtffAker52jhaZSgL/M/lisZzj7W6sg7bU5NOejrYEDakFBFZd/VWxn9/lOJm5/XHyx93tHFAW2X3ph3NTy8uA3exJDrdAqAziht99v23OO7Q1GNbuPZC9QtQFveN/Kie6Yk0L9PbxvqHIuLU4j9fZEe0aR0CAKDWt9n856nV5n9pHKgptzffQxmIiHsiYl9E3BsR+yPivohK2fsj4uAG62/cGrp1/pNe3VRg65TN/57P97bq53/F7C8GSnluTyX+3uT0THn6WP6eDEfvjiw/tkYd3730y2fNztXO/7Ijq7+YC+btuNrTsEA3NTE/0apJ6bWPIgZ7Vos/WdkJSCLiUEQMbuyl9xaJmSe+Otys0O3jX0ML9pmWv4x4vNr/i9EQfyFZe39y9H9Rnj42WlwVt/rp58uvN6t/S/G3QNb/O+uv/4YS/X8ltfu1cxuv4/Jvnzb9TrPZ678vebOyZ92XP/b+xPz8hbGIvuTVSr7u8fGbzy3yRfks/uGjq4//fflzsvgfiIjsIj4SEQ9GxEN52x+OiEci4uga8f/w4qPvbD7+9srin1r182/l+h+o7/+NJ0pnv/+mWf3r6/8TldRw/kjl8+821tvArbx3AAAA8F+RRsTuSNKRlXSajoxU/4Z/f+xMy7Nz80+enn3v/FT1NwID0ZsWK139NeuhY8li/orV/Hi+VlycP56vG39e+n8lPzI5W57qcOzQ7XY1Gf+Z30udbh3Qdn6vBd2rcfynHWoHcOe5/0P3Mv6hexn/0L1WG/8fNuTtBcDdyf0fupfxD93L+IfuZfxDV9rK7/olujkR6bZoRrsScXBbNKNziU5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTGvwEAAP//KivtwQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgget(0x1, 0x2b0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03"], 0xe4, 0x0) 1.793815548s ago: executing program 2 (id=1904): socket$packet(0x11, 0x2, 0x300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}], 0x18}}], 0x1, 0x0) 1.777097999s ago: executing program 2 (id=1906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000"], 0x7c}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.717692064s ago: executing program 2 (id=1908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.6477472s ago: executing program 1 (id=1912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000a926007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.624030083s ago: executing program 1 (id=1913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffe51) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200"], 0x5c}}, 0x0) 1.597226865s ago: executing program 1 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x8}}, 0x20) close(r2) 1.581530427s ago: executing program 1 (id=1916): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+@\x00\x00\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.559961359s ago: executing program 1 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003, 0x0, "f13d760700"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x2, 0xf, "1000a87d827bc2c95a5947380b00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 963.090643ms ago: executing program 3 (id=1927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000081) readv(r3, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) write$binfmt_elf64(r2, 0x0, 0x0) 899.904908ms ago: executing program 4 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) 882.05365ms ago: executing program 2 (id=1930): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 881.3831ms ago: executing program 4 (id=1931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000ac0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000a00, 0x0, 0x0, 0x20000a30, 0x20000a60], 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0xb38c59c1be76e4, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) 827.183465ms ago: executing program 4 (id=1932): r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x17b6) 827.010675ms ago: executing program 4 (id=1933): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000380)={[{@resuid}]}, 0x7, 0x4d6, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2851880, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x100000}, 0x20) 781.933319ms ago: executing program 4 (id=1934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000020a010800000000000000000000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0xc824}, 0x0) 716.694185ms ago: executing program 1 (id=1935): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r1, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 519.071383ms ago: executing program 4 (id=1936): add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "7dfa3d1fdbe93e8387a2453782510f97509451334302ed21aa7ee1bf891c6fe3224cf8b605a8db311706ef85447366e4a5aeb0c776b4cced3063ae0d7571e052", 0x1a}, 0x48, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) chmod(0x0, 0x9c32f69e6caa24ef) pipe2$watch_queue(0x0, 0x80) 374.860876ms ago: executing program 0 (id=1942): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000", @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x1dc}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3e0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 351.411438ms ago: executing program 0 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r3 = dup2(r2, r2) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x4, 0x9, 0x0, {0x0, 0xfffffffd, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4a}}, 0x43) 278.915415ms ago: executing program 0 (id=1944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r4], 0x30}}, 0x0) 272.850765ms ago: executing program 0 (id=1945): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x9}, 0x14}}, 0x0) 135.437418ms ago: executing program 0 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000880), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 127.666009ms ago: executing program 3 (id=1947): bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000003c0), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000b40)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) 35.846247ms ago: executing program 2 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 35.502367ms ago: executing program 3 (id=1949): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) read(r0, &(0x7f0000000240)=""/211, 0x11e) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23.276898ms ago: executing program 3 (id=1950): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.25768ms ago: executing program 0 (id=1951): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 0s ago: executing program 3 (id=1952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): arp_missed_max: allowed values 1 - 255 [ 78.442774][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 78.451754][ T6270] netlink: 'syz.3.864': attribute type 30 has an invalid length. [ 78.472969][ T6158] veth0_vlan: entered promiscuous mode [ 78.491034][ T6273] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.493575][ T6158] veth1_vlan: entered promiscuous mode [ 78.503060][ T6273] smc: net device bond0 erased user defined pnetid SYZ0 [ 78.525839][ T6273] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 78.533700][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.869'. [ 78.543699][ T6273] bridge0: port 4(ipvlan0) entered blocking state [ 78.550180][ T6273] bridge0: port 4(ipvlan0) entered disabled state [ 78.556840][ T6273] ipvlan0: entered allmulticast mode [ 78.562108][ T6273] veth0_vlan: entered allmulticast mode [ 78.568024][ T6273] ipvlan0: left allmulticast mode [ 78.573050][ T6273] veth0_vlan: left allmulticast mode [ 78.579880][ T6158] veth0_macvtap: entered promiscuous mode [ 78.598353][ T6158] veth1_macvtap: entered promiscuous mode [ 78.611130][ T6282] sg_write: data in/out 231/210 bytes for SCSI command 0x0-- guessing data in; [ 78.611130][ T6282] program syz.4.873 not setting count and/or reply_len properly [ 78.629689][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.640235][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.650094][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.660616][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.670659][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.671123][ T6287] loop0: detected capacity change from 0 to 128 [ 78.681174][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.681192][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.707846][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.722443][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.726254][ T6287] syz.0.874: attempt to access beyond end of device [ 78.726254][ T6287] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 78.732091][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.753599][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.763473][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.773887][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.783716][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.794140][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.803942][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.814346][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.825918][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.839629][ T6158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.848502][ T6158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.857292][ T6158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.866041][ T6158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.956113][ T6304] loop1: detected capacity change from 0 to 764 [ 79.075063][ T3344] net_ratelimit: 3 callbacks suppressed [ 79.075078][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.330531][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.338060][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.345508][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.352924][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.360349][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.367805][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.375293][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.382946][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.390679][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.398149][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.405557][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.412955][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.420404][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.422423][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.427786][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.443529][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.450913][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.458313][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.465855][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.473396][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.481062][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.488553][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.495956][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.503401][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.510788][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.518238][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.525739][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.533117][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.540572][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.548082][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.555594][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.563040][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.570422][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.577863][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.585236][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.592594][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.600010][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.607747][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.615183][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.622555][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.630107][ T3344] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 79.637675][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.638863][ T3344] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 79.813785][ T6353] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.821304][ T6353] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.828825][ T6353] netlink: 'syz.2.901': attribute type 10 has an invalid length. [ 79.828841][ T6353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.901'. [ 79.830300][ T6353] bridge0: port 3(ipvlan0) entered blocking state [ 79.830328][ T6353] bridge0: port 3(ipvlan0) entered disabled state [ 79.830419][ T6353] ipvlan0: entered allmulticast mode [ 79.830431][ T6353] veth0_vlan: entered allmulticast mode [ 79.830907][ T6353] ipvlan0: left allmulticast mode [ 79.830918][ T6353] veth0_vlan: left allmulticast mode [ 79.831567][ T6353] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 79.938496][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 79.945410][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.972468][ T6359] hsr_slave_1 (unregistering): left promiscuous mode [ 79.994429][ T6375] netlink: 332 bytes leftover after parsing attributes in process `syz.0.907'. [ 80.003765][ T6375] netlink: 'syz.0.907': attribute type 9 has an invalid length. [ 80.003821][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 80.011506][ T6375] netlink: 108 bytes leftover after parsing attributes in process `syz.0.907'. [ 80.029347][ T6375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.907'. [ 80.044634][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 80.061152][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.068703][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.076157][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.083771][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.091192][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.098636][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.106207][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.113636][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.119428][ T6383] syz.2.910 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.121030][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.138731][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.146128][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.153499][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.160965][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.164418][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.168356][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.184093][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.191548][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.198959][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.206623][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.214204][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.221759][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.229211][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.236597][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.243957][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.251348][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.258957][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.266477][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.273944][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.281451][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.289112][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.296529][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.303266][ T6392] loop3: detected capacity change from 0 to 1024 [ 80.303903][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.303925][ T5948] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 80.325777][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.326354][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.343214][ T5948] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 80.375734][ T6397] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 80.395650][ T6392] loop3: detected capacity change from 1024 to 0 [ 80.403216][ T6392] syz.3.914: attempt to access beyond end of device [ 80.403216][ T6392] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 80.416533][ T6392] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 80.425024][ T6392] EXT4-fs (loop3): I/O error while writing superblock [ 80.443229][ T5770] syz-executor: attempt to access beyond end of device [ 80.443229][ T5770] loop3: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 80.462561][ T5770] syz-executor: attempt to access beyond end of device [ 80.462561][ T5770] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 80.476137][ T5770] syz-executor: attempt to access beyond end of device [ 80.476137][ T5770] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 80.489842][ T5770] syz-executor: attempt to access beyond end of device [ 80.489842][ T5770] loop3: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 80.503368][ T5770] syz-executor: attempt to access beyond end of device [ 80.503368][ T5770] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 80.517268][ T5770] syz-executor: attempt to access beyond end of device [ 80.517268][ T5770] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 80.531014][ T5770] syz-executor: attempt to access beyond end of device [ 80.531014][ T5770] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 80.544571][ T5770] syz-executor: attempt to access beyond end of device [ 80.544571][ T5770] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 80.558133][ T5770] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 80.570965][ T5770] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 80.579378][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 80.586292][ T5770] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 80.595202][ T5770] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 80.603462][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 80.610240][ T5770] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 80.621680][ T5770] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 80.629984][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 80.636907][ T50] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:3: unable to read itable block [ 80.650640][ T50] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 80.658919][ T50] EXT4-fs (loop3): I/O error while writing superblock [ 80.668094][ T5770] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 80.676609][ T5770] EXT4-fs (loop3): I/O error while writing superblock [ 80.683985][ T6393] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 80.823656][ T6438] loop4: detected capacity change from 0 to 256 [ 80.824236][ T6439] loop1: detected capacity change from 0 to 512 [ 80.837114][ T6438] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.838322][ T6439] EXT4-fs: Ignoring removed orlov option [ 80.853813][ T6439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.882492][ T6439] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.894719][ T2058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.912434][ T6446] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6z [ 80.928005][ T6439] bpf_get_probe_write_proto: 2 callbacks suppressed [ 80.928022][ T6439] syz.1.933[6439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.934900][ T6439] syz.1.933[6439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.947446][ T6439] syz.1.933[6439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.962398][ T2058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.996060][ T6439] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.933: bg 0: block 255: padding at end of block bitmap is not set [ 81.058421][ T2058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.103794][ T6469] syz.0.943[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.103888][ T6469] syz.0.943[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.116829][ T6469] syz.0.943[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.130882][ T2058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.170564][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 81.182344][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 81.191220][ T6475] batman_adv: batadv0: Removing interface: dummy0 [ 81.198518][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.206201][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.242128][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.249244][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.256439][ T6448] bridge_slave_0: entered allmulticast mode [ 81.262826][ T6448] bridge_slave_0: entered promiscuous mode [ 81.271379][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.278453][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.285786][ T6448] bridge_slave_1: entered allmulticast mode [ 81.292106][ T6448] bridge_slave_1: entered promiscuous mode [ 81.312197][ T2058] bridge_slave_1: left allmulticast mode [ 81.317926][ T2058] bridge_slave_1: left promiscuous mode [ 81.323561][ T2058] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.332603][ T2058] bridge_slave_0: left allmulticast mode [ 81.338452][ T2058] bridge_slave_0: left promiscuous mode [ 81.344163][ T2058] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.386198][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.457458][ T2058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.469043][ T2058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.479557][ T2058] bond0 (unregistering): Released all slaves [ 81.488544][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.501387][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.522954][ T6448] team0: Port device team_slave_0 added [ 81.527401][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 81.527414][ T29] audit: type=1400 audit(1727464799.466:1406): avc: denied { connect } for pid=6487 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.529627][ T6448] team0: Port device team_slave_1 added [ 81.536830][ T6488] syz.0.950[6488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.564891][ T6488] syz.0.950[6488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.576758][ T6488] syz.0.950[6488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.589966][ T2058] hsr_slave_0: left promiscuous mode [ 81.614400][ T2058] hsr_slave_1: left promiscuous mode [ 81.623406][ T2058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.630912][ T2058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.639123][ T2058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.646579][ T2058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.656500][ T2058] veth1_macvtap: left promiscuous mode [ 81.661996][ T2058] veth0_macvtap: left promiscuous mode [ 81.667584][ T2058] veth1_vlan: left promiscuous mode [ 81.672774][ T2058] veth0_vlan: left promiscuous mode [ 81.693572][ T29] audit: type=1400 audit(1727464799.626:1407): avc: denied { bind } for pid=6492 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.715969][ T29] audit: type=1400 audit(1727464799.656:1408): avc: denied { listen } for pid=6492 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.735736][ T29] audit: type=1400 audit(1727464799.656:1409): avc: denied { read } for pid=6492 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.772678][ T29] audit: type=1400 audit(1727464799.706:1410): avc: denied { create } for pid=6496 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.792422][ T29] audit: type=1400 audit(1727464799.706:1411): avc: denied { ioctl } for pid=6496 comm="syz.2.953" path="socket:[16842]" dev="sockfs" ino=16842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.820298][ T2058] team0 (unregistering): Port device team_slave_1 removed [ 81.831260][ T2058] team0 (unregistering): Port device team_slave_0 removed [ 81.867236][ T29] audit: type=1400 audit(1727464799.806:1412): avc: denied { setopt } for pid=6499 comm="syz.0.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.890330][ T29] audit: type=1400 audit(1727464799.826:1413): avc: denied { module_load } for pid=6498 comm="syz.2.954" path="/sys/power/wakeup_count" dev="sysfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 81.895153][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.921425][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.947351][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.967206][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.974247][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.000246][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.015670][ T6504] loop1: detected capacity change from 0 to 512 [ 82.034153][ T6506] loop4: detected capacity change from 0 to 128 [ 82.048215][ T6506] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.080849][ T6504] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.107791][ T6448] hsr_slave_0: entered promiscuous mode [ 82.118763][ T29] audit: type=1326 audit(1727464800.056:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 82.121951][ T6516] loop0: detected capacity change from 0 to 512 [ 82.142136][ T29] audit: type=1326 audit(1727464800.056:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6503 comm="syz.1.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 82.172461][ T6516] journal_path: Lookup failure for './file0' [ 82.172506][ T6448] hsr_slave_1: entered promiscuous mode [ 82.178579][ T6516] EXT4-fs: error: could not find journal device path [ 82.198209][ T6448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.206884][ T6448] Cannot create hsr debugfs directory [ 82.437228][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.550172][ T6448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.560000][ T6448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.569579][ T6448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.581683][ T6448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.613832][ T6562] atomic_op ffff88811193e128 conn xmit_atomic 0000000000000000 [ 82.623025][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.642742][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.657048][ T2058] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.664141][ T2058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.679902][ T6566] loop4: detected capacity change from 0 to 1024 [ 82.688077][ T6566] journal_path: Lookup failure for './file0' [ 82.694080][ T6566] EXT4-fs: error: could not find journal device path [ 82.703298][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.710404][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.753755][ T6448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.764174][ T6448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.815233][ T4198] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.822666][ T4198] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 82.830150][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.845010][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.865092][ T4198] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 82.912558][ T6592] loop2: detected capacity change from 0 to 1024 [ 82.943038][ T6448] veth0_vlan: entered promiscuous mode [ 82.961407][ T6448] veth1_vlan: entered promiscuous mode [ 82.985368][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.017439][ T6448] veth0_macvtap: entered promiscuous mode [ 83.024709][ T6448] veth1_macvtap: entered promiscuous mode [ 83.035555][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.046085][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.057116][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.067625][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.077778][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.088308][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.098207][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.108709][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.120465][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.132733][ T3888] EXT4-fs unmount: 17 callbacks suppressed [ 83.132748][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.157638][ T6611] loop0: detected capacity change from 0 to 256 [ 83.170697][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.181204][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.181482][ T6611] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.191076][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.191094][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.191114][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.232429][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.242514][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.253049][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.264696][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.273223][ T6448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.281990][ T6448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.283112][ T6617] syz.1.995[6617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.290790][ T6448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.310861][ T6448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.392983][ T6620] tmpfs: Bad value for 'mpol' [ 83.477778][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.113470][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.148063][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 84.157121][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'. [ 84.291846][ T6665] loop0: detected capacity change from 0 to 2048 [ 84.315769][ T6665] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e01c, mo2=0082] [ 84.323882][ T6665] System zones: 0-7 [ 84.329531][ T6665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.350752][ T6665] EXT4-fs (loop0): shut down requested (1) [ 84.368182][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.377232][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.386966][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.408748][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.437589][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.456899][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.487075][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.502053][ T4172] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 84.519865][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.553684][ T5410] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.869432][ T6703] chnl_net:caif_netlink_parms(): no params data found [ 84.938752][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.945908][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.954121][ T6703] bridge_slave_0: entered allmulticast mode [ 84.960713][ T6703] bridge_slave_0: entered promiscuous mode [ 84.973387][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.980514][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.988247][ T6703] bridge_slave_1: entered allmulticast mode [ 84.994796][ T6703] bridge_slave_1: entered promiscuous mode [ 85.010473][ T28] team0: left allmulticast mode [ 85.015437][ T28] team_slave_0: left allmulticast mode [ 85.020973][ T28] team_slave_1: left allmulticast mode [ 85.026547][ T28] team0: left promiscuous mode [ 85.031332][ T28] team_slave_0: left promiscuous mode [ 85.036870][ T28] team_slave_1: left promiscuous mode [ 85.042474][ T28] bridge0: port 3(team0) entered disabled state [ 85.049344][ T28] bridge_slave_1: left allmulticast mode [ 85.055071][ T28] bridge_slave_1: left promiscuous mode [ 85.060861][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.069430][ T28] bridge_slave_0: left allmulticast mode [ 85.075174][ T28] bridge_slave_0: left promiscuous mode [ 85.081018][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.146934][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.156464][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.165830][ T28] bond0 (unregistering): Released all slaves [ 85.184557][ T6703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.207601][ T6703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.227599][ T28] hsr_slave_0: left promiscuous mode [ 85.246495][ T28] hsr_slave_1: left promiscuous mode [ 85.283916][ T28] team0 (unregistering): Port device team_slave_1 removed [ 85.294878][ T28] team0 (unregistering): Port device team_slave_0 removed [ 85.329503][ T6703] team0: Port device team_slave_0 added [ 85.336840][ T6703] team0: Port device team_slave_1 added [ 85.351354][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.358413][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.384352][ T6703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.397241][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.404201][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.430247][ T6703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.454263][ T6703] hsr_slave_0: entered promiscuous mode [ 85.460591][ T6703] hsr_slave_1: entered promiscuous mode [ 85.467706][ T6703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.475286][ T6703] Cannot create hsr debugfs directory [ 85.555107][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.626323][ T28] IPVS: stop unused estimator thread 0... [ 85.634443][ T6756] __nla_validate_parse: 1 callbacks suppressed [ 85.634468][ T6756] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1046'. [ 85.649906][ T6756] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 85.747261][ T6703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.755766][ T6703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.764219][ T6703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.772625][ T6703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.811621][ T6764] loop2: detected capacity change from 0 to 512 [ 85.823297][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.836005][ T6766] loop1: detected capacity change from 0 to 512 [ 85.836510][ T6703] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.843087][ T6764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.861231][ T6766] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 85.887089][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.894209][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.896833][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.912357][ T2058] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.919535][ T2058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.028554][ T6775] hub 8-0:1.0: USB hub found [ 86.028868][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.033197][ T6775] hub 8-0:1.0: 8 ports detected [ 86.088031][ T6790] loop2: detected capacity change from 0 to 256 [ 86.105567][ T6790] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.132337][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 86.133131][ T6771] loop3: detected capacity change from 0 to 512 [ 86.144690][ T6703] veth0_vlan: entered promiscuous mode [ 86.150622][ T6771] EXT4-fs: Ignoring removed oldalloc option [ 86.154407][ T6703] veth1_vlan: entered promiscuous mode [ 86.164602][ T6771] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1053: Parent and EA inode have the same ino 15 [ 86.172873][ T6703] veth0_macvtap: entered promiscuous mode [ 86.185636][ T6703] veth1_macvtap: entered promiscuous mode [ 86.188153][ T6771] EXT4-fs (loop3): Remounting filesystem read-only [ 86.197942][ T6771] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 86.208940][ T6771] EXT4-fs (loop3): 1 orphan inode deleted [ 86.215064][ T6771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.218386][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.230389][ T6771] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 86.237549][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.237563][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.264346][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.274192][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.284684][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.294535][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.304982][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.315033][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.316676][ T6771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.325548][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.327604][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.341345][ T6804] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.348135][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.369213][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.379099][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.389603][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.399452][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.409905][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.419753][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.430286][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.440176][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.450699][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.462658][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.499987][ T6703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.508971][ T6703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.517818][ T6703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.526556][ T6703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.611845][ T6808] loop2: detected capacity change from 0 to 4096 [ 86.614040][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.618854][ T6808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.640044][ T6808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.665374][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.678217][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'. [ 86.684785][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 86.684797][ T29] audit: type=1400 audit(1727464804.616:1502): avc: denied { ioctl } for pid=6807 comm="syz.2.1063" path="socket:[18004]" dev="sockfs" ino=18004 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.757695][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.775804][ T6831] random: crng reseeded on system resumption [ 86.781910][ T29] audit: type=1400 audit(1727464804.716:1503): avc: denied { read write } for pid=6829 comm="syz.3.1069" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.805604][ T29] audit: type=1400 audit(1727464804.716:1504): avc: denied { ioctl open } for pid=6829 comm="syz.3.1069" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.877866][ T6844] loop4: detected capacity change from 0 to 256 [ 86.890369][ T29] audit: type=1400 audit(1727464804.826:1505): avc: denied { append } for pid=6842 comm="syz.4.1076" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.975435][ T29] audit: type=1400 audit(1727464804.916:1506): avc: denied { write } for pid=6861 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.997355][ T29] audit: type=1400 audit(1727464804.916:1507): avc: denied { nlmsg_write } for pid=6861 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.155546][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.467285][ T29] audit: type=1400 audit(1727464805.406:1508): avc: denied { mount } for pid=6872 comm="+}[@" name="/" dev="configfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.554195][ T6876] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1088'. [ 87.563249][ T6876] tipc: Invalid UDP bearer configuration [ 87.563261][ T6876] tipc: Enabling of bearer rejected, failed to enable media [ 87.625188][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.748510][ T6894] netlink: 'syz.1.1091': attribute type 10 has an invalid length. [ 87.759377][ T6894] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.767177][ T6894] bond0: (slave team0): Enslaving as an active interface with an up link [ 87.780116][ T6894] netlink: 'syz.1.1091': attribute type 10 has an invalid length. [ 87.789191][ T6894] bond0: (slave team0): Releasing backup interface [ 87.798403][ T6894] bridge0: port 3(team0) entered blocking state [ 87.804689][ T6894] bridge0: port 3(team0) entered disabled state [ 87.812353][ T6894] team0: entered allmulticast mode [ 87.817570][ T6894] team_slave_0: entered allmulticast mode [ 87.823328][ T6894] team_slave_1: entered allmulticast mode [ 87.830500][ T6894] team0: entered promiscuous mode [ 87.835675][ T6894] team_slave_0: entered promiscuous mode [ 87.841400][ T6894] team_slave_1: entered promiscuous mode [ 87.980924][ T6927] SELinux: policydb version -544360880 does not match my version range 15-33 [ 87.980994][ T29] audit: type=1400 audit(1727464805.916:1509): avc: denied { load_policy } for pid=6926 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 87.990014][ T6927] SELinux: failed to load policy [ 88.037463][ T6931] loop2: detected capacity change from 0 to 128 [ 88.050604][ T6931] bio_check_eod: 17 callbacks suppressed [ 88.050687][ T6931] syz.2.1107: attempt to access beyond end of device [ 88.050687][ T6931] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 88.120649][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.133701][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.207865][ T6939] loop4: detected capacity change from 0 to 512 [ 88.217044][ T6939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.220216][ T6936] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 88.240323][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.248672][ T6936] bond0: (slave team0): Enslaving as an active interface with an up link [ 88.258249][ T3908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.265911][ T6936] netlink: 'syz.2.1108': attribute type 10 has an invalid length. [ 88.276703][ T6936] bond0: (slave team0): Releasing backup interface [ 88.287552][ T6936] bridge0: port 3(team0) entered blocking state [ 88.293885][ T6936] bridge0: port 3(team0) entered disabled state [ 88.300464][ T6936] team0: entered allmulticast mode [ 88.305693][ T6936] team_slave_0: entered allmulticast mode [ 88.311427][ T6936] team_slave_1: entered allmulticast mode [ 88.317847][ T6936] team0: entered promiscuous mode [ 88.322985][ T6936] team_slave_0: entered promiscuous mode [ 88.328899][ T6936] team_slave_1: entered promiscuous mode [ 88.349679][ T29] audit: type=1400 audit(1727464806.286:1510): avc: denied { getopt } for pid=6945 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.379717][ T29] audit: type=1400 audit(1727464806.316:1511): avc: denied { read } for pid=6945 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.386391][ T6951] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 88.411317][ T6950] IPVS: stopping master sync thread 6951 ... [ 88.656043][ T6967] loop3: detected capacity change from 0 to 512 [ 88.665019][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.686153][ T6967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.723902][ T6448] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.724458][ T6978] loop4: detected capacity change from 0 to 1024 [ 88.739533][ T6978] EXT4-fs: Ignoring removed orlov option [ 88.745444][ T6978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.761744][ T6978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.788245][ T3908] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.818085][ T6991] loop4: detected capacity change from 0 to 256 [ 88.825611][ T6991] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.837195][ T6987] option changes via remount are deprecated (pid=6986 comm=syz.3.1127) [ 88.901642][ T6995] loop3: detected capacity change from 0 to 8192 [ 88.909021][ T6995] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.983072][ T7008] loop1: detected capacity change from 0 to 128 [ 89.004499][ T7008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.017369][ T7008] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.054001][ T7015] SELinux: Context system_u:object_r:dhcpd_var_run_t:s0 is not valid (left unmapped). [ 89.076135][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.085441][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.097959][ T7021] loop3: detected capacity change from 0 to 512 [ 89.116421][ T7021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.129107][ T7021] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.143642][ T7021] Process accounting resumed [ 89.149952][ T7021] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 89.167289][ T6448] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.234229][ T7027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.288752][ T7027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.328369][ T7027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.377808][ T7027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.439984][ T7027] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.454844][ T7027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.467031][ T7027] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.482202][ T7027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.618455][ T6158] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.705143][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.851612][ T7095] loop1: detected capacity change from 0 to 512 [ 89.868820][ T7095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.882297][ T7095] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.905161][ T6158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.930285][ T7109] ALSA: seq fatal error: cannot create timer (-22) [ 89.998052][ T7121] IPv6: Can't replace route, no match found [ 90.051051][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1193'. [ 90.185959][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.218145][ T7129] loop4: detected capacity change from 0 to 128 [ 90.330404][ T7142] loop2: detected capacity change from 0 to 2048 [ 90.395406][ T7142] loop2: p1 p2 p3 [ 90.506771][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.515236][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.530142][ T7165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.656615][ T7181] loop2: detected capacity change from 0 to 2048 [ 90.663689][ T7181] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 90.692032][ T7183] loop2: detected capacity change from 0 to 1024 [ 90.698777][ T7183] EXT4-fs: Ignoring removed orlov option [ 90.704526][ T7183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.719140][ T7187] io-wq is not configured for unbound workers [ 90.727798][ T7183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.749283][ T7191] bpf_get_probe_write_proto: 2 callbacks suppressed [ 90.749317][ T7191] syz.0.1218[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.756364][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.776333][ T7191] syz.0.1218[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.776466][ T7191] syz.0.1218[7191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.788794][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.829170][ T7191] hub 6-0:1.0: USB hub found [ 90.834618][ T7191] hub 6-0:1.0: 8 ports detected [ 90.949772][ T7201] syzkaller0: entered promiscuous mode [ 90.955294][ T7201] syzkaller0: entered allmulticast mode [ 90.962364][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 91.043560][ T7217] loop1: detected capacity change from 0 to 512 [ 91.051088][ T7217] EXT4-fs: Ignoring removed nobh option [ 91.057918][ T7217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.096162][ T7223] smc: net device bond0 applied user defined pnetid SYZ0 [ 91.103602][ T7223] smc: net device bond0 erased user defined pnetid SYZ0 [ 91.106170][ T7217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1226: bg 0: block 248: padding at end of block bitmap is not set [ 91.126906][ T7217] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.1226: Failed to acquire dquot type 1 [ 91.139099][ T7217] EXT4-fs (loop1): 1 truncate cleaned up [ 91.145340][ T7217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.159378][ T7217] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.189302][ T6158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.198817][ T28] EXT4-fs error (device loop1): ext4_release_dquot:6902: comm kworker/u8:1: Failed to release dquot type 1 [ 91.402153][ T7240] loop0: detected capacity change from 0 to 512 [ 91.416946][ T7240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.429583][ T7240] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.444221][ T7240] Process accounting resumed [ 91.450231][ T7240] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 91.468545][ T6703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.728891][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 91.728903][ T29] audit: type=1326 audit(1727464809.666:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.759918][ T29] audit: type=1326 audit(1727464809.666:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.783471][ T29] audit: type=1326 audit(1727464809.666:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.806909][ T29] audit: type=1326 audit(1727464809.666:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.831101][ T29] audit: type=1326 audit(1727464809.666:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.854838][ T29] audit: type=1326 audit(1727464809.666:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.878543][ T29] audit: type=1326 audit(1727464809.666:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.902070][ T29] audit: type=1326 audit(1727464809.696:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.925586][ T29] audit: type=1326 audit(1727464809.696:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 91.949858][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.958645][ T29] audit: type=1326 audit(1727464809.826:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.4.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd645c1dff9 code=0x7ffc0000 [ 92.007391][ T7267] loop0: detected capacity change from 0 to 1764 [ 92.018564][ T7270] loop2: detected capacity change from 0 to 128 [ 92.040890][ T7270] FAT-fs (loop2): Directory bread(block 32) failed [ 92.047470][ T7270] FAT-fs (loop2): Directory bread(block 33) failed [ 92.073715][ T7270] FAT-fs (loop2): Directory bread(block 34) failed [ 92.093325][ T7270] FAT-fs (loop2): Directory bread(block 35) failed [ 92.105969][ T7277] loop1: detected capacity change from 0 to 256 [ 92.116017][ T7270] FAT-fs (loop2): Directory bread(block 36) failed [ 92.122693][ T7270] FAT-fs (loop2): Directory bread(block 37) failed [ 92.144933][ T7270] FAT-fs (loop2): Directory bread(block 38) failed [ 92.151590][ T7270] FAT-fs (loop2): Directory bread(block 39) failed [ 92.164167][ T7270] FAT-fs (loop2): Directory bread(block 40) failed [ 92.171128][ T7270] FAT-fs (loop2): Directory bread(block 41) failed [ 92.183432][ T7277] FAT-fs (loop1): Directory bread(block 64) failed [ 92.190262][ T7277] FAT-fs (loop1): Directory bread(block 65) failed [ 92.197985][ T7277] FAT-fs (loop1): Directory bread(block 66) failed [ 92.198007][ T7277] FAT-fs (loop1): Directory bread(block 67) failed [ 92.224521][ T7277] FAT-fs (loop1): Directory bread(block 68) failed [ 92.236729][ T7277] FAT-fs (loop1): Directory bread(block 69) failed [ 92.243578][ T7277] FAT-fs (loop1): Directory bread(block 70) failed [ 92.250179][ T7277] FAT-fs (loop1): Directory bread(block 71) failed [ 92.260253][ T7277] FAT-fs (loop1): Directory bread(block 72) failed [ 92.267939][ T7277] FAT-fs (loop1): Directory bread(block 73) failed [ 92.461845][ T7291] loop2: detected capacity change from 0 to 512 [ 92.502852][ T7291] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 92.519580][ T7291] EXT4-fs (loop2): invalid journal inode [ 92.525333][ T7291] EXT4-fs (loop2): can't get journal size [ 92.533072][ T2058] kworker/u8:6: attempt to access beyond end of device [ 92.533072][ T2058] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 92.554443][ T2058] kworker/u8:6: attempt to access beyond end of device [ 92.554443][ T2058] loop1: rw=1, sector=1864, nr_sectors = 9408 limit=256 [ 92.572267][ T7291] EXT4-fs (loop2): 1 truncate cleaned up [ 92.578288][ T7291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.607134][ T2058] kworker/u8:6: attempt to access beyond end of device [ 92.607134][ T2058] loop1: rw=1, sector=11272, nr_sectors = 16344 limit=256 [ 92.618873][ T7296] loop0: detected capacity change from 0 to 512 [ 92.629672][ T7296] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.630627][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.640633][ T7296] EXT4-fs (loop0): 1 truncate cleaned up [ 92.653819][ T2058] kworker/u8:6: attempt to access beyond end of device [ 92.653819][ T2058] loop1: rw=1, sector=27616, nr_sectors = 4016 limit=256 [ 92.654777][ T7296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.699701][ T2058] kworker/u8:6: attempt to access beyond end of device [ 92.699701][ T2058] loop1: rw=1, sector=31632, nr_sectors = 2168 limit=256 [ 92.727256][ T6703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.761300][ T7303] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 92.884255][ T7325] netlink: 'syz.0.1270': attribute type 4 has an invalid length. [ 92.900395][ T7325] netlink: 'syz.0.1270': attribute type 17 has an invalid length. [ 92.974950][ T5924] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 92.982441][ T5924] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 92.993589][ T5924] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 92.996338][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.009601][ T5924] hid-generic 0000:0000:0000.0008: unknown main item tag 0x6 [ 93.017163][ T5924] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 93.025324][ T5924] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 93.058538][ T7333] loop4: detected capacity change from 0 to 256 [ 93.064996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.077221][ T7335] loop0: detected capacity change from 0 to 512 [ 93.118276][ T5924] kernel write not supported for file /input/event0 (pid: 5924 comm: kworker/0:9) [ 93.122231][ T7333] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.145983][ T7335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.159028][ T7335] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.188978][ T7335] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.203841][ T7335] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 93.216295][ T7335] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.216295][ T7335] [ 93.226066][ T7335] EXT4-fs (loop0): Total free blocks count 0 [ 93.232019][ T7335] EXT4-fs (loop0): Free/Dirty block details [ 93.238031][ T7335] EXT4-fs (loop0): free_blocks=65280 [ 93.243486][ T7335] EXT4-fs (loop0): dirty_blocks=33 [ 93.248633][ T7335] EXT4-fs (loop0): Block reservation details [ 93.254655][ T7335] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 93.275121][ T6703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.287986][ T7350] macsec0: entered promiscuous mode [ 93.293195][ T7350] macvlan0: entered promiscuous mode [ 93.300626][ T7350] macvlan0: left promiscuous mode [ 93.318433][ T7356] syz.0.1282[7356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.318487][ T7356] syz.0.1282[7356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.332918][ T7356] syz.0.1282[7356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.381624][ T7360] vlan0: entered promiscuous mode [ 93.413717][ T7360] vlan0 (unregistering): left promiscuous mode [ 93.545678][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.591220][ T7418] netlink: 'syz.3.1298': attribute type 10 has an invalid length. [ 93.599136][ T7418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1298'. [ 93.661235][ T7432] loop4: detected capacity change from 0 to 128 [ 93.688546][ T7432] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.704211][ T7432] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.775958][ T3908] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.832089][ T7448] loop3: detected capacity change from 0 to 2048 [ 93.851330][ T7448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.876355][ T7448] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.905097][ T7448] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 31 with max blocks 33 with error 28 [ 93.917605][ T7448] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.917605][ T7448] [ 93.927430][ T7448] EXT4-fs (loop3): Total free blocks count 0 [ 93.933645][ T7448] EXT4-fs (loop3): Free/Dirty block details [ 93.939689][ T7448] EXT4-fs (loop3): free_blocks=2415919104 [ 93.945517][ T7448] EXT4-fs (loop3): dirty_blocks=64 [ 93.950661][ T7448] EXT4-fs (loop3): Block reservation details [ 93.956678][ T7448] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 94.012747][ T7447] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 94.025642][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.124411][ T7501] loop3: detected capacity change from 0 to 512 [ 94.136094][ T7501] EXT4-fs: inline encryption not supported [ 94.154128][ T7501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.166274][ T7501] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1318: bad orphan inode 2 [ 94.176602][ T7501] EXT4-fs (loop3): Remounting filesystem read-only [ 94.183901][ T7501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.196817][ T7501] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 94.199318][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.203654][ T7501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.311916][ T7516] loop3: detected capacity change from 0 to 256 [ 94.339392][ T7516] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.417535][ T7528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 94.424178][ T7528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.431722][ T7528] vhci_hcd vhci_hcd.0: Device attached [ 94.455441][ T7528] netlink: 'syz.1.1332': attribute type 21 has an invalid length. [ 94.475292][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 94.486347][ T7529] vhci_hcd: connection closed [ 94.500425][ T50] vhci_hcd: stop threads [ 94.509532][ T50] vhci_hcd: release socket [ 94.513977][ T50] vhci_hcd: disconnect device [ 94.744920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.768956][ T7575] loop3: detected capacity change from 0 to 512 [ 94.777001][ T7575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.778031][ T7573] loop4: detected capacity change from 0 to 1024 [ 94.813566][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.818124][ T7575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.843109][ T7575] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.875990][ T7573] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 94.927448][ T6448] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.941578][ T7573] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 94.953917][ T7573] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.953917][ T7573] [ 94.963577][ T7573] EXT4-fs (loop4): Total free blocks count 0 [ 94.969690][ T7573] EXT4-fs (loop4): Free/Dirty block details [ 94.975607][ T7573] EXT4-fs (loop4): free_blocks=68451041280 [ 94.981502][ T7573] EXT4-fs (loop4): dirty_blocks=32 [ 94.987552][ T7573] EXT4-fs (loop4): Block reservation details [ 94.993578][ T7573] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 95.020375][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.067737][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.257979][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 95.275602][ T7618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 95.286396][ T7612] pim6reg1: entered promiscuous mode [ 95.291838][ T7612] pim6reg1: entered allmulticast mode [ 95.449503][ T7631] syz.4.1374[7631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.449670][ T7631] syz.4.1374[7631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.487137][ T7631] syz.4.1374[7631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.487255][ T7638] macsec1: entered promiscuous mode [ 95.515072][ T7638] macvlan0: entered promiscuous mode [ 95.522792][ T7638] macvlan0: left promiscuous mode [ 95.534521][ T7635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.544736][ T7631] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1374'. [ 95.735815][ T7661] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.769589][ T7664] loop2: detected capacity change from 0 to 2048 [ 95.797911][ T7664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.820492][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.932362][ T7676] loop3: detected capacity change from 0 to 1024 [ 95.956925][ T7676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.971091][ T7676] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 95.989141][ T7385] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.994929][ T7676] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 30 with error 28 [ 95.999023][ T7385] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.011211][ T7676] EXT4-fs (loop3): This should not happen!! Data will be lost [ 96.011211][ T7676] [ 96.030661][ T7676] EXT4-fs (loop3): Total free blocks count 0 [ 96.036666][ T7676] EXT4-fs (loop3): Free/Dirty block details [ 96.042548][ T7676] EXT4-fs (loop3): free_blocks=68451041280 [ 96.048442][ T7676] EXT4-fs (loop3): dirty_blocks=32 [ 96.053535][ T7676] EXT4-fs (loop3): Block reservation details [ 96.059547][ T7676] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 96.085462][ T6448] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.097579][ T7385] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.107583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.107652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.107706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.107777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.140508][ T7385] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.151235][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.184646][ T7689] loop3: detected capacity change from 0 to 256 [ 96.196730][ T7385] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.206567][ T7385] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.276234][ T7681] chnl_net:caif_netlink_parms(): no params data found [ 96.289127][ T7385] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.299032][ T7385] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.332074][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.339188][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.347237][ T7681] bridge_slave_0: entered allmulticast mode [ 96.353640][ T7681] bridge_slave_0: entered promiscuous mode [ 96.370376][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.377526][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.386985][ T7681] bridge_slave_1: entered allmulticast mode [ 96.393713][ T7681] bridge_slave_1: entered promiscuous mode [ 96.402347][ T7385] bond0: left allmulticast mode [ 96.407240][ T7385] bond_slave_0: left allmulticast mode [ 96.412850][ T7385] bond_slave_1: left allmulticast mode [ 96.418336][ T7385] bond0: left promiscuous mode [ 96.423102][ T7385] bond_slave_0: left promiscuous mode [ 96.428795][ T7385] bond_slave_1: left promiscuous mode [ 96.434321][ T7385] bridge0: port 3(bond0) entered disabled state [ 96.442834][ T7385] bridge_slave_1: left allmulticast mode [ 96.448631][ T7385] bridge_slave_1: left promiscuous mode [ 96.454352][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.463147][ T7385] bridge_slave_0: left allmulticast mode [ 96.468866][ T7385] bridge_slave_0: left promiscuous mode [ 96.474582][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.584892][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.607357][ T7385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.618552][ T7385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.629000][ T7385] bond0 (unregistering): Released all slaves [ 96.638893][ T7385] bond1 (unregistering): Released all slaves [ 96.670081][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.680878][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.707477][ T7385] hsr_slave_0: left promiscuous mode [ 96.713364][ T7385] hsr_slave_1: left promiscuous mode [ 96.719552][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.727246][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.735993][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.743456][ T7385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.760304][ T7385] veth1_macvtap: left promiscuous mode [ 96.766146][ T7385] veth0_macvtap: left promiscuous mode [ 96.771759][ T7385] veth1_vlan: left promiscuous mode [ 96.777006][ T7385] veth0_vlan: left promiscuous mode [ 96.836879][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 96.836892][ T29] audit: type=1326 audit(1727465070.782:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 96.866566][ T29] audit: type=1326 audit(1727465070.782:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 96.891409][ T29] audit: type=1326 audit(1727465070.782:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 96.915185][ T29] audit: type=1326 audit(1727465070.782:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 96.938585][ T29] audit: type=1326 audit(1727465070.782:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 96.962160][ T29] audit: type=1326 audit(1727465070.782:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 96.985651][ T29] audit: type=1326 audit(1727465070.782:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 97.009135][ T29] audit: type=1326 audit(1727465070.782:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 97.032527][ T29] audit: type=1326 audit(1727465070.782:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 97.056251][ T29] audit: type=1326 audit(1727465070.782:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f970059dff9 code=0x7ffc0000 [ 97.109322][ T7385] team0 (unregistering): Port device team_slave_1 removed [ 97.121073][ T7385] team0 (unregistering): Port device team_slave_0 removed [ 97.147539][ T7743] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 97.166919][ T7714] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1407'. [ 97.180211][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.187686][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.195157][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.204199][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.211648][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.219148][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.226629][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.234107][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.241963][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.249461][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.256965][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.264377][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.271916][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.279381][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.286808][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.294403][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.301897][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.309409][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.310662][ T7681] team0: Port device team_slave_0 added [ 97.316833][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.325237][ T7681] team0: Port device team_slave_1 added [ 97.329831][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.342941][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.350397][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.357838][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.365332][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.372707][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.380144][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.387580][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.395020][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.402421][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.409910][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.417384][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.424920][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.432339][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.439826][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.447229][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.454705][ T4198] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 97.462973][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.471438][ T4198] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 97.498742][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.505744][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.531791][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.557057][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.564094][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.590370][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.610055][ T7761] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.1426'. [ 97.619501][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1426'. [ 97.623063][ T7763] loop2: detected capacity change from 0 to 512 [ 97.637436][ T7763] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.656518][ T7763] EXT4-fs (loop2): 1 truncate cleaned up [ 97.662780][ T7763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.664152][ T7681] hsr_slave_0: entered promiscuous mode [ 97.694481][ T7681] hsr_slave_1: entered promiscuous mode [ 97.707217][ T7681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.718567][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.722064][ T7681] Cannot create hsr debugfs directory [ 97.799331][ T7779] loop2: detected capacity change from 0 to 512 [ 97.810912][ T7779] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.2.1435: corrupted xattr block 95: invalid header [ 97.828463][ T7779] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1435: bg 0: block 7: invalid block bitmap [ 97.841029][ T7779] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 97.851540][ T7779] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2976: inode #11: comm syz.2.1435: corrupted xattr block 95: invalid header [ 97.867969][ T7779] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 97.877084][ T7779] EXT4-fs (loop2): 1 orphan inode deleted [ 97.883029][ T7779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.973933][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.070135][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 98.091539][ T7681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.100132][ T7681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.108713][ T7681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.117780][ T7681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.152415][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.166601][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.176812][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.183920][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.202748][ T7681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.213207][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.229252][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.236416][ T7458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.282587][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.380666][ T7681] veth0_vlan: entered promiscuous mode [ 98.390768][ T7681] veth1_vlan: entered promiscuous mode [ 98.412268][ T7681] veth0_macvtap: entered promiscuous mode [ 98.420860][ T7681] veth1_macvtap: entered promiscuous mode [ 98.431700][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.442276][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.452224][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.462716][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.472596][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.483103][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.492917][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.503326][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.515465][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.516031][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.523590][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.541214][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.551072][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.561604][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.571417][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.581926][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.591750][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.602256][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.612098][ T7681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.622685][ T7681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.635989][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.660630][ T7681] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.663160][ T7825] syz.1.1447[7825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.669466][ T7681] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.670777][ T7825] syz.1.1447[7825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.680867][ T7681] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691242][ T7825] syz.1.1447[7825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.700790][ T7681] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.819367][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 98.879321][ T7839] syz.1.1453[7839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.879383][ T7839] syz.1.1453[7839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.914984][ T7839] syz.1.1453[7839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.950186][ T7851] loop4: detected capacity change from 0 to 1024 [ 98.970564][ T7850] bridge0: port 3(vlan2) entered blocking state [ 98.976900][ T7850] bridge0: port 3(vlan2) entered disabled state [ 98.983948][ T7850] vlan2: entered allmulticast mode [ 98.990501][ T7850] vlan2: left allmulticast mode [ 99.026584][ T7851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.098164][ T7871] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 99.115984][ T7851] loop4: detected capacity change from 1024 to 64 [ 99.152637][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.167679][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.181543][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.197181][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.211102][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.227604][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.242104][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.255853][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.261508][ T7887] syz.0.1467[7887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.269642][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.270124][ T7887] syz.0.1467[7887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.281297][ T7681] EXT4-fs warning (device loop4): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 99.296981][ T7887] syz.0.1467[7887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.411920][ T5924] IPVS: starting estimator thread 0... [ 99.469117][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 99.493236][ T7903] vhci_hcd: invalid port number 0 [ 99.514388][ T7906] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262395 (only 8 groups) [ 99.525595][ T7895] IPVS: using max 2832 ests per chain, 141600 per kthread [ 99.698776][ T7925] loop2: detected capacity change from 0 to 512 [ 99.705528][ T7925] ext4: Unknown parameter 'fowner>00000000000000000000' [ 99.716115][ T7925] pimreg: entered allmulticast mode [ 99.722725][ T7925] pimreg: left allmulticast mode [ 100.105135][ T5942] net_ratelimit: 6 callbacks suppressed [ 100.105150][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.585306][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.659866][ T7998] syz.3.1515[7998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.700311][ T8003] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 100.731386][ T8003] netlink: 'syz.3.1518': attribute type 4 has an invalid length. [ 100.745412][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 100.758704][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.846945][ T8024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.854192][ T8024] IPv6: NLM_F_CREATE should be set when creating new route [ 100.875139][ T7681] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.899677][ T7860] kmmpd-loop4: attempt to access beyond end of device [ 100.899677][ T7860] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 100.913351][ T7860] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 100.924413][ T7383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.173237][ T8065] vhci_hcd: default hub control req: 2000 v0000 i0000 l0 [ 101.221633][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 101.288554][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.295690][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.308347][ T8039] bridge_slave_0: entered allmulticast mode [ 101.315541][ T8039] bridge_slave_0: entered promiscuous mode [ 101.321962][ T8090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8090 comm=syz.0.1549 [ 101.322785][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.341640][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.350407][ T8039] bridge_slave_1: entered allmulticast mode [ 101.357337][ T8039] bridge_slave_1: entered promiscuous mode [ 101.367513][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'. [ 101.399819][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.413999][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 101.414178][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.459481][ T8039] team0: Port device team_slave_0 added [ 101.468246][ T8039] team0: Port device team_slave_1 added [ 101.489519][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.496516][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.522425][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.536194][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.543171][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.569253][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.596446][ T8039] hsr_slave_0: entered promiscuous mode [ 101.602700][ T8039] hsr_slave_1: entered promiscuous mode [ 101.612302][ T8039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.619938][ T8039] Cannot create hsr debugfs directory [ 101.635008][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.847803][ T8132] loop3: detected capacity change from 0 to 512 [ 101.854390][ T8132] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.861738][ T8132] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.871315][ T8132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 101.879815][ T8132] System zones: 1-12 [ 101.884013][ T8132] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1570: corrupted in-inode xattr: e_value size too large [ 101.898331][ T8132] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1570: couldn't read orphan inode 15 (err -117) [ 101.910699][ T8132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.928821][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 101.928834][ T29] audit: type=1400 audit(1727465075.872:1977): avc: denied { create } for pid=8131 comm="syz.3.1570" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 101.961172][ T6448] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.977521][ T8139] loop3: detected capacity change from 0 to 256 [ 101.988260][ T8139] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.319249][ T29] audit: type=1326 audit(1727465076.262:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.342840][ T29] audit: type=1326 audit(1727465076.262:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.369240][ T29] audit: type=1326 audit(1727465076.312:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.392808][ T29] audit: type=1326 audit(1727465076.312:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.416237][ T29] audit: type=1326 audit(1727465076.312:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.435592][ T8163] Process accounting resumed [ 102.439633][ T29] audit: type=1326 audit(1727465076.312:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.467509][ T29] audit: type=1326 audit(1727465076.312:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.490990][ T29] audit: type=1326 audit(1727465076.312:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.514640][ T29] audit: type=1326 audit(1727465076.312:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8162 comm="syz.1.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c765adff9 code=0x7ffc0000 [ 102.546860][ T7383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.584915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.593181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.601303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.609423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.617559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.625663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.650278][ T7383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.698403][ T7383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.771320][ T7383] bridge_slave_1: left allmulticast mode [ 102.777178][ T7383] bridge_slave_1: left promiscuous mode [ 102.782868][ T7383] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.791591][ T7383] bridge_slave_0: left allmulticast mode [ 102.797385][ T7383] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.887346][ T7383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.907837][ T7383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.926404][ T7383] bond0 (unregistering): Released all slaves [ 102.941148][ T8199] serio: Serial port ptm0 [ 102.989828][ T7383] hsr_slave_0: left promiscuous mode [ 102.995897][ T7383] hsr_slave_1: left promiscuous mode [ 103.009738][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.017446][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.035608][ T7383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.043028][ T7383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.059046][ T7383] veth1_macvtap: left promiscuous mode [ 103.064648][ T7383] veth0_macvtap: left promiscuous mode [ 103.070242][ T7383] veth1_vlan: left promiscuous mode [ 103.075557][ T7383] veth0_vlan: left promiscuous mode [ 103.092358][ T8201] loop3: detected capacity change from 0 to 8192 [ 103.180574][ T8216] loop2: detected capacity change from 0 to 128 [ 103.215433][ T8218] loop2: detected capacity change from 0 to 2048 [ 103.222596][ T8218] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 103.264399][ T7383] team0 (unregistering): Port device team_slave_1 removed [ 103.288733][ T7383] team0 (unregistering): Port device team_slave_0 removed [ 103.305297][ T3344] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.315617][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 103.379121][ T8212] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1606'. [ 103.497255][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 103.543121][ T8039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.566955][ T8039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.586569][ T8039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.595392][ T8039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.643694][ T8239] pim6reg1: entered promiscuous mode [ 103.649115][ T8239] pim6reg1: entered allmulticast mode [ 103.668135][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.702244][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.720554][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.727749][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.729533][ T8243] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1620'. [ 103.759937][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.767074][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.904407][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.070804][ T8039] veth0_vlan: entered promiscuous mode [ 104.085796][ T8039] veth1_vlan: entered promiscuous mode [ 104.101627][ T8039] veth0_macvtap: entered promiscuous mode [ 104.118634][ T8039] veth1_macvtap: entered promiscuous mode [ 104.137057][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.147619][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.157532][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.168000][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.177977][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.188465][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.198333][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.208807][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.210207][ T8288] bpf_get_probe_write_proto: 11 callbacks suppressed [ 104.210220][ T8288] syz.2.1632[8288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.220381][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.225600][ T8288] syz.2.1632[8288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.238677][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.265795][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.275603][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.280618][ T8288] syz.2.1632[8288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.286004][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.286019][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.317517][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.327345][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.337751][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.347589][ T8039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.358072][ T8039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.369076][ T8039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.381925][ T8039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.390736][ T8039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.399522][ T8039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.408311][ T8039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.497053][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 104.506438][ T7390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 104.539056][ T8307] loop4: detected capacity change from 0 to 512 [ 104.560224][ T8311] ALSA: seq fatal error: cannot create timer (-16) [ 104.568373][ T8307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.581971][ T8307] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.603052][ T8307] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1641: corrupted inode contents [ 104.612884][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1644'. [ 104.627342][ T8307] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.1641: mark_inode_dirty error [ 104.659619][ T8307] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.1641: corrupted inode contents [ 104.685339][ T8039] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.692132][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1646'. [ 104.706501][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1646'. [ 104.852734][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1657'. [ 104.907960][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 104.919715][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1663'. [ 105.002825][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 105.007960][ T8383] serio: Serial port ptm0 [ 105.010593][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 105.022628][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.030393][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.038097][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.045817][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.053598][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.061402][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.069178][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.077043][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.084817][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.092459][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.100116][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.107762][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.115393][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.123026][ T4198] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 105.131699][ T4198] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 105.174718][ T8394] veth1_vlan: entered allmulticast mode [ 105.229618][ T8405] tmpfs: Bad value for 'mpol' [ 105.248982][ T8407] loop4: detected capacity change from 0 to 512 [ 105.280840][ T8407] EXT4-fs: quotafile must be on filesystem root [ 105.288798][ T8404] loop2: detected capacity change from 0 to 8192 [ 105.339992][ T8404] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.362172][ T8404] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 105.371015][ T8404] FAT-fs (loop2): Filesystem has been set read-only [ 105.409032][ T8426] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 105.447645][ T8426] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.474207][ T8430] loop2: detected capacity change from 0 to 1024 [ 105.483842][ T8430] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 105.518677][ T8430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.601147][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.601635][ T8443] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 105.601635][ T8443] program syz.4.1700 not setting count and/or reply_len properly [ 105.792214][ T8481] syz.2.1713[8481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.792348][ T8481] syz.2.1713[8481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.803775][ C1] net_ratelimit: 7 callbacks suppressed [ 105.803793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.803854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.803908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.803969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.853542][ T8481] syz.2.1713[8481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.854106][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.890011][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 106.127733][ T8524] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.155654][ T8526] serio: Serial port ptm0 [ 106.165020][ T8528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.180473][ T8528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.473849][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.506464][ T7383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.777807][ T8603] team_slave_0: entered promiscuous mode [ 106.783603][ T8603] team_slave_1: entered promiscuous mode [ 106.796346][ T8603] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 106.810089][ T8603] team_slave_0: left promiscuous mode [ 106.815568][ T8603] team_slave_1: left promiscuous mode [ 106.823187][ T8603] team_slave_0: entered promiscuous mode [ 106.825084][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.828832][ T8603] team_slave_1: entered promiscuous mode [ 106.829220][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.864843][ T8603] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.905184][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.922065][ T8620] loop2: detected capacity change from 0 to 512 [ 106.935106][ T8602] team_slave_0: left promiscuous mode [ 106.940532][ T8602] team_slave_1: left promiscuous mode [ 106.947929][ T8620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.001682][ T8620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.015396][ T8620] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.041667][ T8620] __quota_error: 60 callbacks suppressed [ 107.041683][ T8620] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 107.061380][ T8620] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 107.071827][ T8620] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1775: Failed to acquire dquot type 0 [ 107.096153][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 107.117244][ T8640] bond_slave_0: entered promiscuous mode [ 107.123746][ T8640] bond_slave_0: left promiscuous mode [ 107.130880][ T29] audit: type=1326 audit(1727465081.072:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.154536][ T29] audit: type=1326 audit(1727465081.072:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.178118][ T29] audit: type=1326 audit(1727465081.072:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.201690][ T29] audit: type=1326 audit(1727465081.102:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.225300][ T29] audit: type=1326 audit(1727465081.102:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.248741][ T29] audit: type=1326 audit(1727465081.102:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4e7b500e5 code=0x7ffc0000 [ 107.272254][ T29] audit: type=1326 audit(1727465081.112:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8641 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.292334][ T8646] loop3: detected capacity change from 0 to 4096 [ 107.308674][ T29] audit: type=1326 audit(1727465081.252:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8643 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe4e7b1dff9 code=0x7ffc0000 [ 107.350100][ T8646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.367688][ T8654] loop2: detected capacity change from 0 to 512 [ 107.400346][ T8654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.424698][ T8654] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.475169][ T3888] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.482234][ T8665] syz.1.1793[8665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.484268][ T8665] syz.1.1793[8665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.497647][ T8665] syz.1.1793[8665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.905364][ T8705] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 107.946192][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.023136][ T8716] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 108.073707][ T8723] loop4: detected capacity change from 0 to 2048 [ 108.095045][ T8723] loop4: p1 < > p4 [ 108.099385][ T8723] loop4: p4 size 8388608 extends beyond EOD, truncated [ 108.161985][ T8727] netlink: 'syz.2.1820': attribute type 29 has an invalid length. [ 108.388351][ T8746] syzkaller0: entered promiscuous mode [ 108.393862][ T8746] syzkaller0: entered allmulticast mode [ 108.609892][ T8767] __nla_validate_parse: 7 callbacks suppressed [ 108.609905][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'. [ 108.831607][ T8794] tipc: Started in network mode [ 108.836582][ T8794] tipc: Node identity b84, cluster identity 4711 [ 108.842968][ T8794] tipc: Node number set to 2948 [ 108.862338][ T8798] syz.1.1851[8798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.059208][ T8826] tipc: Started in network mode [ 109.065892][ T7390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.070753][ T8826] tipc: Node identity ac1414aa, cluster identity 4711 [ 109.093925][ T8826] tipc: New replicast peer: 100.1.1.1 [ 109.099442][ T8826] tipc: Enabled bearer , priority 10 [ 109.158349][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 109.190314][ T8841] sd 0:0:1:0: device reset [ 109.389735][ T8860] loop4: detected capacity change from 0 to 512 [ 109.397754][ T8860] EXT4-fs: Ignoring removed bh option [ 109.407549][ T8860] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.1879: invalid block [ 109.419815][ T8860] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1879: couldn't read orphan inode 15 (err -117) [ 109.465324][ T8864] loop0: detected capacity change from 0 to 512 [ 109.476863][ T8864] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.545716][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 109.554711][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 109.567681][ T8876] bond_slave_0: entered promiscuous mode [ 109.574234][ T8876] bond_slave_0: left promiscuous mode [ 109.635129][ T7383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.661003][ T8890] bpf_get_probe_write_proto: 2 callbacks suppressed [ 109.661101][ T8890] syz.0.1892[8890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.668579][ T8890] syz.0.1892[8890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.682625][ T8890] syz.0.1892[8890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.760653][ T8904] syz.3.1900[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.773112][ T8904] syz.3.1900[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.786039][ T8904] syz.3.1900[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.853786][ T8913] loop3: detected capacity change from 0 to 512 [ 109.877969][ T8913] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.1902: casefold flag without casefold feature [ 109.892886][ T8913] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1902: couldn't read orphan inode 15 (err -117) [ 110.081491][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1913'. [ 110.095460][ T5948] tipc: Node number set to 2886997162 [ 110.110321][ T8942] loop0: detected capacity change from 0 to 4096 [ 110.219671][ T8952] loop0: detected capacity change from 0 to 512 [ 110.236440][ T8952] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.271225][ T8956] hub 9-0:1.0: USB hub found [ 110.275913][ T8956] hub 9-0:1.0: 8 ports detected [ 110.355029][ T5948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.848085][ T8988] loop4: detected capacity change from 0 to 512 [ 110.856103][ T8988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1933: bg 0: block 5: invalid block bitmap [ 110.870373][ T8988] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 110.879362][ T8988] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1933: invalid indirect mapped block 3 (level 2) [ 110.894163][ T8988] EXT4-fs (loop4): 1 orphan inode deleted [ 110.900016][ T8988] EXT4-fs (loop4): 1 truncate cleaned up [ 110.916945][ T8039] EXT4-fs error (device loop4): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 110.929838][ T8039] EXT4-fs error (device loop4): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 111.075183][ T4198] net_ratelimit: 6 callbacks suppressed [ 111.075199][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.146324][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.208591][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.257324][ T9012] netlink: 'syz.0.1941': attribute type 29 has an invalid length. [ 111.269704][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.282764][ T9012] netlink: 'syz.0.1941': attribute type 29 has an invalid length. [ 111.293650][ T9012] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1941'. [ 111.302910][ T9012] unsupported nla_type 40 [ 111.312779][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.380103][ T8997] chnl_net:caif_netlink_parms(): no params data found [ 111.394545][ T50] bridge_slave_1: left allmulticast mode [ 111.400352][ T50] bridge_slave_1: left promiscuous mode [ 111.406155][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.414075][ T50] bridge_slave_0: left allmulticast mode [ 111.419858][ T50] bridge_slave_0: left promiscuous mode [ 111.425922][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.508182][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.518607][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.529691][ T50] bond0 (unregistering): Released all slaves [ 111.539693][ T9024] smc: net device lo applied user defined pnetid SYZ1 [ 111.547001][ T9025] smc: net device lo erased user defined pnetid SYZ1 [ 111.575052][ T50] tipc: Disabling bearer [ 111.580032][ T50] tipc: Left network mode [ 111.585112][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.592226][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.600571][ T8997] bridge_slave_0: entered allmulticast mode [ 111.607137][ T8997] bridge_slave_0: entered promiscuous mode [ 111.614097][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.621289][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.628947][ T8997] bridge_slave_1: entered allmulticast mode [ 111.635479][ T8997] bridge_slave_1: entered promiscuous mode [ 111.646592][ T50] hsr_slave_0: left promiscuous mode [ 111.675938][ T50] hsr_slave_1: left promiscuous mode [ 111.696195][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.703610][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.727896][ T6703] ================================================================== [ 111.735980][ T6703] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 111.743183][ T6703] [ 111.745495][ T6703] race at unknown origin, with assert no writes to 0xffff88810791d2e8 of 4 bytes by task 6703 on cpu 1: [ 111.756587][ T6703] dequeue_entities+0x6df/0x760 [ 111.761431][ T6703] pick_next_task_fair+0x7d/0x410 [ 111.766445][ T6703] __schedule+0x284/0x940 [ 111.770775][ T6703] schedule+0x55/0xc0 [ 111.774917][ T6703] do_nanosleep+0xa3/0x300 [ 111.779317][ T6703] hrtimer_nanosleep+0xc4/0x1c0 [ 111.784157][ T6703] common_nsleep+0x68/0x90 [ 111.788562][ T6703] __se_sys_clock_nanosleep+0x20a/0x240 [ 111.794095][ T6703] __x64_sys_clock_nanosleep+0x55/0x70 [ 111.799540][ T6703] x64_sys_call+0x253f/0x2d60 [ 111.804202][ T6703] do_syscall_64+0xc9/0x1c0 [ 111.808789][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.814675][ T6703] [ 111.816978][ T6703] value changed: 0x00000000 -> 0x00000001 [ 111.822673][ T6703] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.824978][ T6703] Reported by Kernel Concurrency Sanitizer on: [ 111.831116][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz-executor Not tainted 6.11.0-syzkaller-11653-g3630400697a3 #0 [ 111.841604][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.851764][ T6703] ================================================================== [ 111.872956][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.880431][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.935289][ T50] veth1_macvtap: left promiscuous mode [ 111.940834][ T50] veth0_macvtap: left promiscuous mode [ 111.946371][ T50] veth1_vlan: left promiscuous mode [ 111.951633][ T50] veth0_vlan: left promiscuous mode [ 112.036452][ T50] team0 (unregistering): Port device team_slave_1 removed [ 112.046319][ T50] team0 (unregistering): Port device team_slave_0 removed [ 112.105382][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.265806][ T7390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 112.487097][ T50] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.546243][ T50] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.626304][ T50] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.666425][ T50] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.727685][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.777410][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.837524][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.897443][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.908382][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.945695][ T50] bridge_slave_1: left allmulticast mode [ 112.951344][ T50] bridge_slave_1: left promiscuous mode [ 112.957007][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.964551][ T50] bridge_slave_0: left allmulticast mode [ 112.970297][ T50] bridge_slave_0: left promiscuous mode [ 112.976048][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.984060][ T50] bridge_slave_1: left allmulticast mode [ 112.989747][ T50] bridge_slave_1: left promiscuous mode [ 112.995472][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.003322][ T50] bridge_slave_0: left allmulticast mode [ 113.009077][ T50] bridge_slave_0: left promiscuous mode [ 113.014653][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.022264][ T50] team0: left allmulticast mode [ 113.027162][ T50] team_slave_0: left allmulticast mode [ 113.032628][ T50] team_slave_1: left allmulticast mode [ 113.038100][ T50] team0: left promiscuous mode [ 113.042848][ T50] team_slave_0: left promiscuous mode [ 113.048478][ T50] team_slave_1: left promiscuous mode [ 113.053897][ T50] bridge0: port 3(team0) entered disabled state [ 113.060546][ T50] bridge_slave_1: left allmulticast mode [ 113.066220][ T50] bridge_slave_1: left promiscuous mode [ 113.071824][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.079386][ T50] bridge_slave_0: left allmulticast mode [ 113.085053][ T50] bridge_slave_0: left promiscuous mode [ 113.090707][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.156852][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.296979][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.307252][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.317231][ T50] bond0 (unregistering): (slave team0): Releasing backup interface [ 113.326762][ T50] bond0 (unregistering): Released all slaves [ 113.334715][ T50] bond0 (unregistering): Released all slaves [ 113.343685][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.354202][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.363677][ T50] bond0 (unregistering): Released all slaves [ 113.396634][ T50] tipc: Left network mode [ 113.405296][ T50] hsr_slave_0: left promiscuous mode [ 113.410804][ T50] hsr_slave_1: left promiscuous mode [ 113.416701][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.424173][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.431598][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.439129][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.447635][ T50] hsr_slave_0: left promiscuous mode [ 113.453322][ T50] hsr_slave_1: left promiscuous mode [ 113.459480][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.466902][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.474280][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.481763][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.491532][ T50] veth0_macvtap: left promiscuous mode [ 113.497118][ T50] veth1_vlan: left promiscuous mode [ 113.502332][ T50] veth0_vlan: left promiscuous mode [ 113.507958][ T50] veth1_macvtap: left promiscuous mode [ 113.513415][ T50] veth0_macvtap: left promiscuous mode [ 113.518921][ T50] veth0_vlan: left promiscuous mode [ 113.615532][ T50] team0 (unregistering): Port device team_slave_1 removed [ 113.625832][ T50] team0 (unregistering): Port device team_slave_0 removed [ 113.702449][ T50] team0 (unregistering): Port device team_slave_1 removed [ 113.713111][ T50] team0 (unregistering): Port device team_slave_0 removed [ 114.185394][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.825381][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.825610][ T7390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 114.846670][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 115.225446][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.944882][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.265190][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.305484][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.385082][ T4198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.385357][ T7402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.407527][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.025172][ T5925] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 118.345668][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.985270][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.385187][ T3344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.425084][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.585192][ T7402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.585421][ T7390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.465554][ T4198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog