last executing test programs: 3.565309301s ago: executing program 1 (id=2568): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecff0b1a75f9bf746bec66bae2dc750129b09d60db3d1392d48f254579cf9dcab7a06a88d5f2eaf73fff36f749828367cb4174f63aefd86e58b97841c3963fd7ee14a7", 0xfffffffffffffec7, 0x20040183, 0x0, 0x27) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 3.535172673s ago: executing program 1 (id=2570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='module_request\x00', r0}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 3.500176307s ago: executing program 1 (id=2574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) 3.484771568s ago: executing program 1 (id=2576): r0 = socket$kcm(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/177, 0xb1}], 0x2, &(0x7f0000000340)=""/131, 0x83}, 0x2003) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r5, r6, 0x3, 0x0) 2.592803535s ago: executing program 1 (id=2595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, r2, 0x0, 0x1000) 2.52953005s ago: executing program 1 (id=2596): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 1.822591822s ago: executing program 3 (id=2604): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="10000000120003474cbb65e1c3e4ffff", 0x10}], 0x1) 1.807173193s ago: executing program 3 (id=2605): r0 = socket$kcm(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/177, 0xb1}], 0x2, &(0x7f0000000340)=""/131, 0x83}, 0x2003) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r1) epoll_create1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r5, r6, 0x3, 0x0) 1.519807008s ago: executing program 4 (id=2609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) tee(r1, r4, 0x7, 0x5) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13}, &(0x7f00000002c0)=0x0) timer_settime(r5, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) 1.135264341s ago: executing program 0 (id=2617): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 904.648851ms ago: executing program 3 (id=2618): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000640)={0x25, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) io_uring_setup(0x5394, &(0x7f0000005480)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r5) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) 898.598602ms ago: executing program 3 (id=2619): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB="01000000270000000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 636.984444ms ago: executing program 4 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 580.640039ms ago: executing program 4 (id=2622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 515.467115ms ago: executing program 4 (id=2623): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381", 0xe}, {&(0x7f00000005c0)="c2c186", 0x3}], 0x2) 448.561681ms ago: executing program 2 (id=2627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 432.478112ms ago: executing program 2 (id=2628): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 387.780216ms ago: executing program 2 (id=2629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@sb={'sb', 0x3d, 0x3ff}}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f00000001c0)={[{@init_itable}, {@noquota}, {@quota}, {@barrier}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x10, 0x4de, &(0x7f0000000540)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 288.892835ms ago: executing program 4 (id=2630): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0x58) 288.668975ms ago: executing program 2 (id=2631): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000001d0000d6adfad9b6b34f410000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 278.178066ms ago: executing program 2 (id=2632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) alarm(0x0) 276.348756ms ago: executing program 0 (id=2633): socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 245.465768ms ago: executing program 0 (id=2634): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = io_uring_setup(0x24d4, &(0x7f0000000080)) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 244.992428ms ago: executing program 2 (id=2635): gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$sock_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 236.441839ms ago: executing program 4 (id=2636): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb}, 0xb) sendfile(r0, r0, &(0x7f0000000240), 0x7f03) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 101.611911ms ago: executing program 0 (id=2637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) getxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 70.168794ms ago: executing program 0 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 69.753594ms ago: executing program 0 (id=2639): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 541.88µs ago: executing program 3 (id=2640): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040102000000000059"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) ptrace(0x10, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1e003300a0f0ffff070211000001080211"], 0x3c}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x283, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa326"}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 0s ago: executing program 3 (id=2641): syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r0 = socket(0x2, 0x2, 0x1) connect$unix(r0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xffffffffffffffd2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 133.177264][ T29] audit: type=1326 audit(1725927551.993:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 133.200746][ T29] audit: type=1326 audit(1725927551.993:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 133.224105][ T29] audit: type=1326 audit(1725927551.993:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 133.249136][ T29] audit: type=1326 audit(1725927552.073:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 133.272560][ T29] audit: type=1326 audit(1725927552.073:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5932 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 133.306013][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.313029][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.339018][ T5903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.362119][ T3290] hsr_slave_0: left promiscuous mode [ 133.376268][ T3290] hsr_slave_1: left promiscuous mode [ 133.382341][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.389829][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.398179][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.405673][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.415973][ T3290] veth1_macvtap: left promiscuous mode [ 133.421539][ T3290] veth0_macvtap: left promiscuous mode [ 133.427151][ T3290] veth1_vlan: left promiscuous mode [ 133.432525][ T3290] veth0_vlan: left promiscuous mode [ 133.526837][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 133.544308][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 133.588341][ T5903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.595341][ T5903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.621484][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.634051][ T5942] loop3: detected capacity change from 0 to 128 [ 133.674470][ T5903] hsr_slave_0: entered promiscuous mode [ 133.695418][ T5903] hsr_slave_1: entered promiscuous mode [ 134.282694][ T3290] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.306741][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 134.347288][ T3290] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.363418][ T29] audit: type=1326 audit(1725927553.233:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 134.386810][ T29] audit: type=1326 audit(1725927553.233:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 134.410204][ T29] audit: type=1326 audit(1725927553.233:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5986 comm="syz.3.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 134.437134][ T5903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.460168][ T3290] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.474143][ T5903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.490324][ T5903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.504015][ T5903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.521407][ T3290] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.525766][ T6005] loop3: detected capacity change from 0 to 2048 [ 134.539330][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.546420][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.553987][ T5925] bridge_slave_0: entered allmulticast mode [ 134.561170][ T5925] bridge_slave_0: entered promiscuous mode [ 134.561793][ T6005] Alternate GPT is invalid, using primary GPT. [ 134.570294][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.573385][ T6005] loop3: p1 p2 p3 [ 134.580384][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.615225][ T5925] bridge_slave_1: entered allmulticast mode [ 134.621949][ T5925] bridge_slave_1: entered promiscuous mode [ 134.643095][ T3424] udevd[3424]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 134.655742][ T3999] udevd[3999]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 134.668949][ T3968] udevd[3968]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 134.705100][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.729556][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.756223][ T5925] team0: Port device team_slave_0 added [ 134.762281][ T3290] bridge_slave_1: left allmulticast mode [ 134.768073][ T3290] bridge_slave_1: left promiscuous mode [ 134.773723][ T3290] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.781566][ T3290] bridge_slave_0: left allmulticast mode [ 134.787380][ T3290] bridge_slave_0: left promiscuous mode [ 134.793039][ T3290] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.889310][ T3290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.899850][ T3290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.910180][ T3290] bond0 (unregistering): Released all slaves [ 134.920524][ T5925] team0: Port device team_slave_1 added [ 134.941359][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.948636][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.974711][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.988869][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.995859][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.021842][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.050164][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 135.059071][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 135.079919][ T3290] hsr_slave_0: left promiscuous mode [ 135.085833][ T3290] hsr_slave_1: left promiscuous mode [ 135.091970][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.099445][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.108861][ T3290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.116290][ T3290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.125915][ T3290] veth1_macvtap: left promiscuous mode [ 135.131509][ T3290] veth0_macvtap: left promiscuous mode [ 135.137057][ T3290] veth1_vlan: left promiscuous mode [ 135.142508][ T3290] veth0_vlan: left promiscuous mode [ 135.236210][ T3290] team0 (unregistering): Port device team_slave_1 removed [ 135.249080][ T3290] team0 (unregistering): Port device team_slave_0 removed [ 135.299163][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.314532][ T5903] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.334956][ T6018] loop2: detected capacity change from 0 to 128 [ 135.364004][ T5903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.374536][ T5903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.462110][ T5925] hsr_slave_0: entered promiscuous mode [ 135.469981][ T5925] hsr_slave_1: entered promiscuous mode [ 135.477078][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.484878][ T5925] Cannot create hsr debugfs directory [ 135.554400][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.561612][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.648644][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.655779][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.818724][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.833894][ T6039] loop3: detected capacity change from 0 to 2048 [ 135.842229][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.880750][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.052937][ T5903] veth0_vlan: entered promiscuous mode [ 136.118400][ T6056] loop0: detected capacity change from 0 to 128 [ 136.173566][ T5903] veth1_vlan: entered promiscuous mode [ 136.318640][ T6039] loop3: unable to read partition table [ 136.332853][ T5903] veth0_macvtap: entered promiscuous mode [ 136.381234][ T5925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.432927][ T5903] veth1_macvtap: entered promiscuous mode [ 136.440601][ T6039] loop3: partition table beyond EOD, truncated [ 136.446831][ T6039] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 136.461640][ T5925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.486634][ T5925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.497217][ T5925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.523174][ T5903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.533708][ T5903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.543661][ T5903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.554234][ T5903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.564202][ T5903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.565405][ T2962] loop3: unable to read partition table [ 136.574636][ T5903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.581492][ T2962] loop3: partition table beyond EOD, truncated [ 136.605600][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.628183][ T5903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.638755][ T5903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.648711][ T5903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.659316][ T5903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.669536][ T5903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.680311][ T5903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.692775][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.705470][ T5903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.714308][ T5903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.723254][ T5903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.732015][ T5903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.792419][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.829667][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.852229][ T6075] loop1: detected capacity change from 0 to 256 [ 136.852536][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.865670][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.975542][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.982714][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.017381][ T5925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.027988][ T5925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.110841][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.583288][ T5925] veth0_vlan: entered promiscuous mode [ 137.593736][ T5925] veth1_vlan: entered promiscuous mode [ 137.616711][ T5925] veth0_macvtap: entered promiscuous mode [ 137.624869][ T5925] veth1_macvtap: entered promiscuous mode [ 137.636946][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.647489][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.657380][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.667916][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.677762][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.688219][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.698085][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.708591][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.721077][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.729832][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.740360][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.750234][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.760694][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.770537][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.781011][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.790928][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.801367][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.813170][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.855707][ T6124] loop1: detected capacity change from 0 to 512 [ 137.862542][ T5925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.871361][ T5925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.880080][ T5925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.888819][ T5925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.925939][ T6124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 137.955054][ T6124] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.186683][ T6138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.450985][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 138.451015][ T29] audit: type=1326 audit(1725927557.323:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 138.501663][ T29] audit: type=1326 audit(1725927557.353:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 138.525531][ T29] audit: type=1326 audit(1725927557.353:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 138.548922][ T29] audit: type=1326 audit(1725927557.353:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6142 comm="syz.4.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 138.605248][ T29] audit: type=1326 audit(1725927557.463:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d366cef9 code=0x7ffc0000 [ 138.605743][ T6147] loop4: detected capacity change from 0 to 2048 [ 138.628737][ T29] audit: type=1326 audit(1725927557.463:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f40d366cef9 code=0x7ffc0000 [ 138.658532][ T29] audit: type=1326 audit(1725927557.463:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6148 comm="syz.2.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d366cef9 code=0x7ffc0000 [ 138.697727][ T6147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.711276][ T6147] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.888781][ T6156] loop2: detected capacity change from 0 to 128 [ 139.051083][ T6161] loop3: detected capacity change from 0 to 512 [ 139.084629][ T6163] loop0: detected capacity change from 0 to 256 [ 139.118724][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.174670][ T6161] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.235074][ T6161] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 139.251875][ T6161] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.874: invalid indirect mapped block 1 (level 1) [ 139.299801][ T6161] EXT4-fs (loop3): 1 truncate cleaned up [ 139.305974][ T6161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.524709][ T29] audit: type=1326 audit(1725927558.393:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 139.548475][ T29] audit: type=1326 audit(1725927558.393:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 139.572038][ T29] audit: type=1326 audit(1725927558.393:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 139.597256][ T5903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 139.883906][ T5317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.931028][ T6177] loop3: detected capacity change from 0 to 512 [ 139.958256][ T6177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 139.975195][ T6177] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.132850][ T6184] loop1: detected capacity change from 0 to 2048 [ 140.259689][ T6184] loop1: unable to read partition table [ 140.265430][ T6184] loop1: partition table beyond EOD, truncated [ 140.271635][ T6184] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 140.386592][ T2962] loop1: unable to read partition table [ 140.425601][ T2962] loop1: partition table beyond EOD, truncated [ 140.453107][ T6189] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 140.806141][ T5317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 140.945618][ T6204] syzkaller0: entered promiscuous mode [ 140.951282][ T6204] syzkaller0: entered allmulticast mode [ 141.003430][ T6207] loop3: detected capacity change from 0 to 2048 [ 141.047679][ T6207] Alternate GPT is invalid, using primary GPT. [ 141.054079][ T6207] loop3: p1 p2 p3 [ 142.043937][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.068169][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.213882][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 142.379490][ T6252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.391719][ T6252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.491464][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.500501][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.585522][ T6273] program syz.1.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.595659][ T6273] netlink: 64 bytes leftover after parsing attributes in process `syz.1.913'. [ 142.657713][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.666385][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.942739][ T6288] netlink: 'syz.3.921': attribute type 11 has an invalid length. [ 142.953232][ T6288] dns_resolver: Unsupported content type (98) [ 142.961929][ T6288] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 143.131059][ T6318] mmap: syz.3.934 (6318) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.153744][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.168579][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.229964][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.241440][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.282153][ T6330] netlink: 68 bytes leftover after parsing attributes in process `syz.0.940'. [ 143.291108][ T6330] netlink: 68 bytes leftover after parsing attributes in process `syz.0.940'. [ 143.298157][ T6331] gretap0: entered promiscuous mode [ 143.306355][ T6331] macsec1: entered promiscuous mode [ 143.311656][ T6331] macsec1: entered allmulticast mode [ 143.317096][ T6331] gretap0: entered allmulticast mode [ 143.325358][ T6331] gretap0: left allmulticast mode [ 143.325459][ T6331] gretap0: left promiscuous mode [ 143.430533][ T6337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.455981][ T6337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.473021][ T6337] netlink: 'syz.3.943': attribute type 2 has an invalid length. [ 143.529877][ T6343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.538517][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 143.538533][ T29] audit: type=1400 audit(1725927562.413:3526): avc: denied { watch_reads } for pid=6339 comm="syz.4.944" path="/22/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.539174][ T6343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.641649][ T6347] Zero length message leads to an empty skb [ 143.647820][ T6347] program syz.4.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.699921][ T29] audit: type=1400 audit(1725927562.563:3527): avc: denied { connect } for pid=6350 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.719452][ T29] audit: type=1400 audit(1725927562.563:3528): avc: denied { write } for pid=6350 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 143.776844][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.789434][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.798389][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.809779][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.831100][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.839705][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.902090][ T29] audit: type=1400 audit(1725927562.773:3529): avc: denied { ioctl } for pid=6364 comm="syz.1.956" path="socket:[13267]" dev="sockfs" ino=13267 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 143.926673][ T29] audit: type=1400 audit(1725927562.773:3530): avc: denied { bind } for pid=6364 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 143.946020][ T29] audit: type=1400 audit(1725927562.773:3531): avc: denied { name_bind } for pid=6364 comm="syz.1.956" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 143.966748][ T29] audit: type=1400 audit(1725927562.773:3532): avc: denied { node_bind } for pid=6364 comm="syz.1.956" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 143.987478][ T29] audit: type=1400 audit(1725927562.773:3533): avc: denied { listen } for pid=6364 comm="syz.1.956" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 144.007922][ T29] audit: type=1400 audit(1725927562.773:3534): avc: denied { connect } for pid=6364 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 144.027501][ T29] audit: type=1400 audit(1725927562.773:3535): avc: denied { name_connect } for pid=6364 comm="syz.1.956" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 144.084802][ T6374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.960'. [ 144.150206][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 144.378425][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.406567][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.573453][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.986'. [ 144.582188][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.582426][ T6443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.607605][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.621550][ T6445] usb usb9: usbfs: process 6445 (syz.4.987) did not claim interface 0 before use [ 144.631251][ T6445] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 144.784446][ T6451] syz.1.989 (6451) used greatest stack depth: 10056 bytes left [ 144.903466][ T6470] netlink: 277 bytes leftover after parsing attributes in process `syz.0.994'. [ 144.975998][ T6479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.003636][ T6479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.017381][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.027640][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.102672][ T6482] delete_channel: no stack [ 145.153704][ T6494] syz.1.1004 uses obsolete (PF_INET,SOCK_PACKET) [ 145.170654][ T6497] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 145.181075][ T6497] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 145.357025][ T6511] netlink: 'syz.4.1010': attribute type 13 has an invalid length. [ 145.372386][ T6511] veth1_macvtap: left promiscuous mode [ 145.377937][ T6511] macsec0: entered allmulticast mode [ 145.450206][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 145.802503][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.811464][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.835795][ T3424] printk: udevd: 10 output lines suppressed due to ratelimiting [ 146.054507][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.063250][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.627825][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1039'. [ 146.752030][ T6585] infiniband syz2: set active [ 146.756833][ T6585] infiniband syz2: added team_slave_1 [ 146.819309][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.831048][ T6596] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 146.834960][ T6585] RDS/IB: syz2: added [ 146.843709][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.852537][ T6585] smc: adding ib device syz2 with port count 1 [ 146.860444][ T6585] smc: ib device syz2 port 1 has pnetid [ 147.507320][ T6630] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1057'. [ 147.525799][ T6630] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1057'. [ 147.531989][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.535476][ T6630] tipc: Enabling of bearer rejected, failed to enable media [ 147.552010][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.625186][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 147.918583][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.929157][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.189859][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1076'. [ 148.583507][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 148.583524][ T29] audit: type=1400 audit(1725927567.453:3666): avc: denied { setopt } for pid=6687 comm="syz.4.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.716190][ T29] audit: type=1400 audit(1725927567.583:3667): avc: denied { accept } for pid=6692 comm="syz.2.1083" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.740906][ T29] audit: type=1400 audit(1725927567.583:3668): avc: denied { write } for pid=6692 comm="syz.2.1083" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=34984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 148.991059][ T6706] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 148.997709][ T6706] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 149.005560][ T6706] vhci_hcd vhci_hcd.0: Device attached [ 149.015172][ T29] audit: type=1400 audit(1725927567.883:3669): avc: denied { read } for pid=6698 comm="syz.3.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.042109][ T6716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.051635][ T6716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.199716][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.208558][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.326594][ T3395] usb 8-1: SetAddress Request (2) to port 0 [ 149.332620][ T3395] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 149.341543][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.350283][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.745612][ T6708] vhci_hcd: connection reset by peer [ 149.751193][ T3359] vhci_hcd: stop threads [ 149.755472][ T3359] vhci_hcd: release socket [ 149.760000][ T3359] vhci_hcd: disconnect device [ 150.013056][ T6750] process 'syz.1.1106' launched './file0' with NULL argv: empty string added [ 150.022442][ T29] audit: type=1400 audit(1725927568.893:3670): avc: denied { execute_no_trans } for pid=6749 comm="syz.1.1106" path="/64/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.048444][ T29] audit: type=1400 audit(1725927568.923:3671): avc: denied { map } for pid=6749 comm="syz.1.1106" path="socket:[14952]" dev="sockfs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.071806][ T29] audit: type=1400 audit(1725927568.923:3672): avc: denied { read } for pid=6749 comm="syz.1.1106" path="socket:[14952]" dev="sockfs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.165760][ T29] audit: type=1400 audit(1725927569.033:3673): avc: denied { read } for pid=6752 comm="syz.0.1107" name="event0" dev="devtmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.248297][ T29] audit: type=1400 audit(1725927569.123:3674): avc: denied { ioctl } for pid=6752 comm="syz.0.1107" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.376377][ T6765] tipc: Enabling of bearer rejected, failed to enable media [ 150.546224][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.555152][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.601915][ T6776] capability: warning: `syz.2.1117' uses deprecated v2 capabilities in a way that may be insecure [ 150.662235][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.671086][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.678996][ T29] audit: type=1400 audit(1725927569.553:3675): avc: denied { bind } for pid=6790 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.400753][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.422762][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.686854][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'. [ 151.712515][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 151.722813][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.731527][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.813381][ T6881] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 151.819176][ T6881] pim6reg0: linktype set to 776 [ 151.996583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.667816][ T6882] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1159'. [ 152.690032][ T6885] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.862400][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.871158][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.923170][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'. [ 153.007576][ T6929] netlink: 'syz.0.1180': attribute type 12 has an invalid length. [ 153.029343][ T6931] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 153.029343][ T6931] program syz.0.1181 not setting count and/or reply_len properly [ 153.032261][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.055132][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.078458][ T6937] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1182'. [ 153.135025][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.143981][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.175065][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.183546][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.625631][ T6962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12306 sclass=netlink_route_socket pid=6962 comm=syz.2.1194 [ 153.693441][ T6965] veth0_vlan: left promiscuous mode [ 153.701763][ T6965] veth0_vlan: entered promiscuous mode [ 153.815218][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.823870][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.365826][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 154.365843][ T29] audit: type=1400 audit(1725927573.233:3750): avc: denied { create } for pid=7001 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.396555][ T3395] usb 8-1: device descriptor read/8, error -110 [ 154.454563][ T29] audit: type=1326 audit(1725927573.323:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40d366cef9 code=0x0 [ 154.484274][ T29] audit: type=1400 audit(1725927573.353:3752): avc: denied { bind } for pid=7001 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.504050][ T29] audit: type=1400 audit(1725927573.353:3753): avc: denied { connect } for pid=7001 comm="syz.1.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.524166][ T3395] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 154.556734][ T3395] usb 8-1: enqueue for inactive port 0 [ 154.562252][ T3395] usb 8-1: enqueue for inactive port 0 [ 154.567840][ T3395] usb 8-1: enqueue for inactive port 0 [ 154.656560][ T29] audit: type=1400 audit(1725927573.513:3754): avc: denied { write } for pid=7015 comm="syz.1.1215" path="socket:[15787]" dev="sockfs" ino=15787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 154.680929][ T29] audit: type=1400 audit(1725927573.513:3755): avc: denied { nlmsg_write } for pid=7015 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 154.886632][ T29] audit: type=1400 audit(1725927573.763:3756): avc: denied { name_connect } for pid=7021 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 154.943765][ T29] audit: type=1400 audit(1725927573.783:3757): avc: denied { listen } for pid=7021 comm="syz.0.1217" lport=51393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 154.981716][ T29] audit: type=1400 audit(1725927573.843:3758): avc: denied { accept } for pid=7021 comm="syz.0.1217" lport=51393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.004824][ T29] audit: type=1400 audit(1725927573.853:3759): avc: denied { setopt } for pid=7021 comm="syz.0.1217" lport=51393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.268184][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 155.283143][ T7035] ªªªªªª: renamed from syzkaller0 [ 155.349022][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.357617][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.461630][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 155.483769][ T7053] usb usb9: usbfs: process 7053 (syz.1.1228) did not claim interface 0 before use [ 155.505479][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.514145][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.941022][ T7065] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1233'. [ 155.956751][ T3395] usb usb8-port1: attempt power cycle [ 156.062732][ T7079] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 156.198213][ T7096] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1244'. [ 156.200176][ T7097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.219782][ T7097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.254692][ T1022] IPVS: starting estimator thread 0... [ 156.261561][ T7101] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 156.325197][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1253'. [ 156.356690][ T7102] IPVS: using max 2304 ests per chain, 115200 per kthread [ 156.512960][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.521463][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.749829][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.758572][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.852410][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.861648][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.274080][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1283'. [ 157.601244][ T3336] IPVS: starting estimator thread 0... [ 157.605511][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.615751][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.706650][ T7217] IPVS: using max 2352 ests per chain, 117600 per kthread [ 157.916834][ T3395] usb usb8-port1: unable to enumerate USB device [ 158.130817][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'. [ 158.139830][ T7265] netlink: 'syz.4.1307': attribute type 3 has an invalid length. [ 158.337351][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.346150][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.030198][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.040020][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.043026][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.056763][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.293491][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.302109][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.828652][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 159.828669][ T29] audit: type=1326 audit(1725927578.703:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 159.858261][ T29] audit: type=1326 audit(1725927578.703:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 159.898050][ T29] audit: type=1326 audit(1725927578.703:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 159.921493][ T29] audit: type=1400 audit(1725927578.703:3859): avc: denied { getattr } for pid=7359 comm="syz.0.1348" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 159.944020][ T29] audit: type=1326 audit(1725927578.703:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 159.967418][ T29] audit: type=1326 audit(1725927578.733:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7359 comm="syz.0.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 159.991081][ T29] audit: type=1326 audit(1725927578.753:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 160.014641][ T29] audit: type=1326 audit(1725927578.753:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 160.038083][ T29] audit: type=1326 audit(1725927578.753:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 160.061805][ T29] audit: type=1326 audit(1725927578.753:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7361 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1d07cef9 code=0x7ffc0000 [ 160.148247][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.161066][ T7362] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1349'. [ 160.170500][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.131048][ T7437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.150902][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.158338][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.166143][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.173735][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.181175][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.188654][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.196058][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.203534][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.211019][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.218458][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.225907][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.233398][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.240884][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.248354][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.255786][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.263216][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.270824][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.278391][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.285798][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.293286][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.300819][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.308275][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.315706][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.323197][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.330732][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.338174][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.345747][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.353285][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.360955][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.368462][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.375894][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.383337][ T3395] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 161.416206][ T3395] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.466210][ T7462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.484391][ T7462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.491095][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.502004][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.514930][ T7470] netlink: 'syz.1.1389': attribute type 30 has an invalid length. [ 161.555303][ T7475] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1391'. [ 162.400544][ T7528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.409451][ T7528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.799746][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 162.843694][ T7557] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 162.859285][ T7557] batman_adv: batadv0: Adding interface: team0 [ 162.865471][ T7557] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.890959][ T7557] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 162.916051][ T7558] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 162.923976][ T7558] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1424'. [ 162.933145][ T7558] team0: entered promiscuous mode [ 162.938382][ T7558] team_slave_0: entered promiscuous mode [ 162.944228][ T7558] team_slave_1: entered promiscuous mode [ 162.953238][ T7558] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.960944][ T7558] batman_adv: batadv0: Interface activated: team0 [ 162.967476][ T7558] batman_adv: batadv0: Interface deactivated: team0 [ 162.974181][ T7558] batman_adv: batadv0: Removing interface: team0 [ 162.981623][ T7558] bridge0: port 3(team0) entered blocking state [ 162.988062][ T7558] bridge0: port 3(team0) entered disabled state [ 162.994975][ T7558] team0: entered allmulticast mode [ 163.000188][ T7558] team_slave_0: entered allmulticast mode [ 163.005976][ T7558] team_slave_1: entered allmulticast mode [ 163.013235][ T7558] bridge0: port 3(team0) entered blocking state [ 163.019579][ T7558] bridge0: port 3(team0) entered forwarding state [ 163.028673][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 163.152958][ T7577] xt_cgroup: xt_cgroup: no path or classid specified [ 163.740834][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.749669][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.135017][ T7637] netlink: 'syz.2.1446': attribute type 11 has an invalid length. [ 164.272110][ T7692] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1470'. [ 164.281261][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1470'. [ 164.888774][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 164.888791][ T29] audit: type=1326 audit(1725927583.763:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.2.1504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40d366cef9 code=0x0 [ 164.952598][ T7778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=7778 comm=syz.0.1509 [ 164.982133][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 165.049014][ T29] audit: type=1326 audit(1725927583.923:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.0.1511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x0 [ 165.192386][ T7790] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.200180][ T7790] vhci_hcd: invalid port number 9 [ 165.205225][ T7790] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 165.242739][ T29] audit: type=1400 audit(1725927584.113:4119): avc: denied { write } for pid=7793 comm="syz.1.1514" name="ptp0" dev="devtmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 165.299177][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 165.373064][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.383013][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.481829][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 165.604909][ T29] audit: type=1326 audit(1725927584.473:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7839 comm="syz.3.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e1d07cef9 code=0x0 [ 165.760955][ T29] audit: type=1326 audit(1725927584.633:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7847 comm="syz.2.1538" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40d366cef9 code=0x0 [ 165.873805][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.882310][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.129663][ T7878] netlink: 'syz.1.1551': attribute type 3 has an invalid length. [ 166.246431][ T29] audit: type=1400 audit(1725927585.113:4122): avc: denied { create } for pid=7895 comm="syz.1.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 166.291343][ T7896] netlink: 'syz.1.1560': attribute type 4 has an invalid length. [ 166.755626][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'. [ 167.087278][ T8005] usb usb8: usbfs: process 8005 (syz.2.1604) did not claim interface 0 before use [ 167.152162][ T8006] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1606'. [ 167.534331][ T8017] netlink: 'syz.0.1611': attribute type 11 has an invalid length. [ 168.238721][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.248526][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.249607][ T29] audit: type=1326 audit(1725927587.123:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8066 comm="syz.1.1629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x0 [ 168.306396][ T1022] IPVS: starting estimator thread 0... [ 168.396533][ T8077] IPVS: using max 2400 ests per chain, 120000 per kthread [ 168.415794][ T29] audit: type=1400 audit(1725927587.283:4124): avc: denied { write } for pid=8086 comm="syz.4.1635" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 169.036738][ T3395] usb usb8-port1: attempt power cycle [ 169.204120][ T29] audit: type=1400 audit(1725927588.073:4125): avc: denied { create } for pid=8146 comm="syz.1.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.222548][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.232251][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.399991][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1679'. [ 169.441297][ T29] audit: type=1400 audit(1725927588.313:4126): avc: denied { append } for pid=8182 comm="syz.3.1681" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 169.659064][ T8186] netlink: 'syz.3.1682': attribute type 11 has an invalid length. [ 169.805457][ T8200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=8200 comm=syz.1.1685 [ 169.895152][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.903677][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.206923][ T8206] netlink: 'syz.4.1688': attribute type 1 has an invalid length. [ 170.217231][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.225746][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.355263][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 170.410466][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.419242][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.912865][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1702'. [ 171.089002][ T8251] usb usb2: usbfs: process 8251 (syz.3.1707) did not claim interface 0 before use [ 171.186698][ T3395] usb usb8-port1: unable to enumerate USB device [ 171.264770][ T8267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1713'. [ 171.279386][ T8269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.295821][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.304400][ T29] audit: type=1400 audit(1725927590.163:4127): avc: denied { create } for pid=8268 comm="syz.3.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.324356][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.328060][ T8269] Driver unsupported XDP return value 0 on prog (id 626) dev N/A, expect packet loss! [ 171.513982][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1726'. [ 171.603164][ T29] audit: type=1400 audit(1725927590.473:4128): avc: denied { connect } for pid=8295 comm="syz.1.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.606283][ T8296] random: crng reseeded on system resumption [ 171.624891][ T29] audit: type=1400 audit(1725927590.473:4129): avc: denied { write } for pid=8295 comm="syz.1.1727" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 171.652701][ T29] audit: type=1400 audit(1725927590.473:4130): avc: denied { open } for pid=8295 comm="syz.1.1727" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 172.324663][ T8310] usb usb9: usbfs: process 8310 (syz.4.1730) did not claim interface 0 before use [ 172.334069][ T8310] usb usb9: selecting invalid altsetting 21783 [ 172.626153][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1736'. [ 172.765511][ T29] audit: type=1326 audit(1725927591.633:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 172.788988][ T29] audit: type=1326 audit(1725927591.633:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 172.812672][ T29] audit: type=1326 audit(1725927591.653:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 172.836380][ T29] audit: type=1326 audit(1725927591.653:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 172.860085][ T29] audit: type=1326 audit(1725927591.653:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 172.883957][ T29] audit: type=1326 audit(1725927591.653:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8341 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 172.949559][ T8366] vlan2: entered allmulticast mode [ 173.356043][ T8375] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1754'. [ 173.574090][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.582748][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.120362][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'. [ 176.129596][ T8460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.284079][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.292824][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.572613][ T8480] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 176.642322][ T8480] bridge0: port 3(team0) entered disabled state [ 176.685519][ T8480] team0: left allmulticast mode [ 176.690486][ T8480] team_slave_0: left allmulticast mode [ 176.695998][ T8480] team_slave_1: left allmulticast mode [ 176.701501][ T8480] team0: left promiscuous mode [ 176.706475][ T8480] team_slave_0: left promiscuous mode [ 176.711970][ T8480] team_slave_1: left promiscuous mode [ 176.717670][ T8480] bridge0: port 3(team0) entered disabled state [ 176.737764][ T8480] batman_adv: batadv0: Adding interface: team0 [ 176.744204][ T8480] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.769578][ T8480] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 177.384160][ T8514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 177.408188][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 177.419740][ T8517] vlan2: entered promiscuous mode [ 177.424910][ T8517] macvlan1: entered promiscuous mode [ 177.431602][ T8517] macvlan1: left promiscuous mode [ 177.498350][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1805'. [ 177.527248][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1806'. [ 177.623711][ T8543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 177.670749][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'. [ 177.760570][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 177.760646][ T29] audit: type=1400 audit(1725927596.633:4203): avc: denied { create } for pid=8562 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.789263][ T29] audit: type=1400 audit(1725927596.633:4204): avc: denied { bind } for pid=8562 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.869433][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1826'. [ 178.371704][ T29] audit: type=1400 audit(1725927597.243:4205): avc: denied { connect } for pid=8597 comm="syz.0.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.391889][ T29] audit: type=1400 audit(1725927597.243:4206): avc: denied { setopt } for pid=8597 comm="syz.0.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.411811][ T29] audit: type=1400 audit(1725927597.243:4207): avc: denied { shutdown } for pid=8597 comm="syz.0.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.608737][ T29] audit: type=1326 audit(1725927597.483:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.2.1836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40d366cef9 code=0x0 [ 179.079695][ C1] hrtimer: interrupt took 57803 ns [ 179.109543][ T8634] bridge0: port 3(veth0_to_bond) entered blocking state [ 179.117481][ T8634] bridge0: port 3(veth0_to_bond) entered disabled state [ 179.126145][ T8634] veth0_to_bond: entered allmulticast mode [ 179.137813][ T8634] veth0_to_bond: entered promiscuous mode [ 179.145814][ T8634] bridge0: port 3(veth0_to_bond) entered blocking state [ 179.154003][ T8634] bridge0: port 3(veth0_to_bond) entered forwarding state [ 179.164010][ T8636] veth0_to_bond: left allmulticast mode [ 179.169661][ T8636] veth0_to_bond: left promiscuous mode [ 179.175313][ T8636] bridge0: port 3(veth0_to_bond) entered disabled state [ 179.443278][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1861'. [ 180.784077][ T29] audit: type=1326 audit(1725927599.653:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.2.1882" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40d366cef9 code=0x0 [ 181.383213][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1897'. [ 181.420398][ T8765] loop3: detected capacity change from 0 to 512 [ 181.429228][ T8765] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1900: casefold flag without casefold feature [ 181.443905][ T8765] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1900: couldn't read orphan inode 15 (err -117) [ 181.456353][ T8765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.471466][ T29] audit: type=1400 audit(1725927600.343:4210): avc: denied { create } for pid=8764 comm="syz.3.1900" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.471500][ T8765] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1900: Directory hole found for htree leaf block 0 [ 181.534044][ T5317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.666001][ T8783] loop4: detected capacity change from 0 to 1024 [ 181.672869][ T8783] EXT4-fs: Ignoring removed orlov option [ 181.678642][ T8783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.700054][ T8783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.714314][ T29] audit: type=1400 audit(1725927600.583:4211): avc: denied { read write open } for pid=8782 comm="syz.4.1908" path="/213/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.738134][ T29] audit: type=1400 audit(1725927600.583:4212): avc: denied { append } for pid=8782 comm="syz.4.1908" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 181.741124][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.883287][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1911'. [ 181.943066][ T8796] vlan2: entered promiscuous mode [ 181.948239][ T8796] vlan2: entered allmulticast mode [ 181.954861][ T8796] vlan0: entered allmulticast mode [ 181.960044][ T8796] veth0_vlan: entered allmulticast mode [ 181.965623][ T8796] vlan0: entered promiscuous mode [ 181.974118][ T8796] team0: Port device vlan2 added [ 182.005126][ T8796] veth0_vlan: left allmulticast mode [ 182.050819][ T8796] vlan0: left allmulticast mode [ 182.055835][ T8796] vlan0: left promiscuous mode [ 182.094420][ T8796] team0: Port device vlan2 removed [ 182.315808][ T8802] syz.4.1914[8802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.315859][ T8802] syz.4.1914[8802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.063779][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 183.063801][ T29] audit: type=1400 audit(1725927601.933:4216): avc: denied { unmount } for pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 183.221233][ T8826] pim6reg1: entered promiscuous mode [ 183.226686][ T8826] pim6reg1: entered allmulticast mode [ 184.297826][ T1022] usb usb8-port1: attempt power cycle [ 184.347316][ T29] audit: type=1400 audit(1725927603.223:4217): avc: denied { mount } for pid=8878 comm="syz.1.1946" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.370328][ T29] audit: type=1400 audit(1725927603.223:4218): avc: denied { remount } for pid=8878 comm="syz.1.1946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.390717][ T29] audit: type=1400 audit(1725927603.243:4219): avc: denied { unmount } for pid=5903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 184.427084][ T29] audit: type=1400 audit(1725927603.303:4220): avc: denied { read } for pid=8884 comm="syz.1.1948" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 184.449842][ T29] audit: type=1400 audit(1725927603.303:4221): avc: denied { open } for pid=8884 comm="syz.1.1948" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 184.479578][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'. [ 184.488940][ T8889] bridge_slave_1: left allmulticast mode [ 184.494655][ T8889] bridge_slave_1: left promiscuous mode [ 184.500421][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.510637][ T8889] bridge_slave_0: left allmulticast mode [ 184.516345][ T8889] bridge_slave_0: left promiscuous mode [ 184.522158][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.547485][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.556279][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.270444][ T29] audit: type=1400 audit(1725927605.133:4222): avc: denied { read write } for pid=3265 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.294741][ T29] audit: type=1400 audit(1725927605.133:4223): avc: denied { open } for pid=3265 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.318977][ T29] audit: type=1400 audit(1725927605.133:4224): avc: denied { ioctl } for pid=3265 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.344790][ T29] audit: type=1400 audit(1725927605.153:4225): avc: denied { create } for pid=8920 comm="syz.2.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.392206][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1962'. [ 186.401362][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1962'. [ 186.410408][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1962'. [ 186.435008][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.443778][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.688051][ T1022] usb usb8-port1: unable to enumerate USB device [ 186.803128][ T3335] kernel write not supported for file bpf-prog (pid: 3335 comm: kworker/1:3) [ 187.318857][ T8968] vlan2: entered promiscuous mode [ 187.323938][ T8968] vlan2: entered allmulticast mode [ 187.329514][ T8968] vlan0: entered allmulticast mode [ 187.334708][ T8968] veth0_vlan: entered allmulticast mode [ 187.340439][ T8968] vlan0: entered promiscuous mode [ 187.347255][ T8968] team0: Port device vlan2 added [ 187.655445][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.666073][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.203968][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 188.204030][ T29] audit: type=1400 audit(1725927607.073:4284): avc: denied { create } for pid=9026 comm="syz.2.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 188.230686][ T29] audit: type=1400 audit(1725927607.073:4285): avc: denied { create } for pid=9026 comm="syz.2.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.251226][ T29] audit: type=1400 audit(1725927607.073:4286): avc: denied { write } for pid=9026 comm="syz.2.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.271758][ T29] audit: type=1400 audit(1725927607.073:4287): avc: denied { read } for pid=9026 comm="syz.2.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.519916][ T29] audit: type=1326 audit(1725927607.213:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 188.543548][ T29] audit: type=1326 audit(1725927607.213:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 188.567059][ T29] audit: type=1326 audit(1725927607.213:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 188.590591][ T29] audit: type=1326 audit(1725927607.213:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 188.590691][ T29] audit: type=1326 audit(1725927607.213:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.4.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 188.713522][ T29] audit: type=1400 audit(1725927607.583:4293): avc: denied { create } for pid=9093 comm="syz.0.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.721611][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1988'. [ 188.952662][ T9110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1990'. [ 189.871343][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.879952][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.425175][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1999'. [ 190.946698][ T35] usb usb8-port1: attempt power cycle [ 191.001268][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2003'. [ 192.372683][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2010'. [ 192.902331][ T9200] syzkaller0: entered promiscuous mode [ 192.908732][ T9200] syzkaller0: entered allmulticast mode [ 192.919763][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2022'. [ 192.946715][ T35] usb usb8-port1: unable to enumerate USB device [ 192.965141][ T9109] vhci_hcd: default hub control req: ff03 v0010 i0005 l5 [ 193.050269][ T9213] syz.2.2026 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 193.251034][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2033'. [ 193.283666][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 193.283684][ T29] audit: type=1326 audit(1725927612.153:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.313610][ T29] audit: type=1326 audit(1725927612.153:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.337058][ T29] audit: type=1326 audit(1725927612.153:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.337192][ T29] audit: type=1326 audit(1725927612.153:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.337224][ T29] audit: type=1326 audit(1725927612.153:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.337300][ T29] audit: type=1326 audit(1725927612.153:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.431104][ T29] audit: type=1326 audit(1725927612.153:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.454561][ T29] audit: type=1326 audit(1725927612.153:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.478037][ T29] audit: type=1326 audit(1725927612.153:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 193.501543][ T29] audit: type=1326 audit(1725927612.153:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9239 comm="syz.0.2034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce164acef9 code=0x7ffc0000 [ 194.056156][ T9250] syz.2.2037[9250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.056229][ T9250] syz.2.2037[9250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.269597][ T9278] loop1: detected capacity change from 0 to 2048 [ 194.295248][ T9278] EXT4-fs: Ignoring removed orlov option [ 194.327507][ T9278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.357354][ T5903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.373236][ T9303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9303 comm=syz.0.2059 [ 194.496238][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.506923][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.971937][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2069'. [ 195.141148][ T9349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2075'. [ 195.255100][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2080'. [ 195.277845][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.286415][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.579996][ T9364] loop4: detected capacity change from 0 to 512 [ 195.586571][ T9364] EXT4-fs: Ignoring removed orlov option [ 195.600321][ T9364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.613049][ T9364] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.634351][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.747182][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2086'. [ 195.772082][ T9377] loop4: detected capacity change from 0 to 736 [ 195.778831][ T9377] iso9660: Bad value for 'mode' [ 195.830272][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 196.017814][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2097'. [ 196.068743][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.077820][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.146399][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2104'. [ 196.363820][ T9428] tmpfs: Unsupported parameter 'huge' [ 196.447039][ T9429] bridge0: port 3(veth0_to_bond) entered blocking state [ 196.455370][ T9429] bridge0: port 3(veth0_to_bond) entered disabled state [ 196.468464][ T9429] veth0_to_bond: entered allmulticast mode [ 196.479985][ T9429] veth0_to_bond: entered promiscuous mode [ 196.487606][ T9429] bridge0: port 3(veth0_to_bond) entered blocking state [ 196.495518][ T9429] bridge0: port 3(veth0_to_bond) entered forwarding state [ 196.510125][ T9434] veth0_to_bond: left allmulticast mode [ 196.515724][ T9434] veth0_to_bond: left promiscuous mode [ 196.521385][ T9434] bridge0: port 3(veth0_to_bond) entered disabled state [ 196.652085][ T9455] loop1: detected capacity change from 0 to 512 [ 196.669852][ T9455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.682954][ T9455] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.714905][ T9455] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 196.731355][ T9455] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 511 with error 28 [ 196.743956][ T9455] EXT4-fs (loop1): This should not happen!! Data will be lost [ 196.743956][ T9455] [ 196.753646][ T9455] EXT4-fs (loop1): Total free blocks count 0 [ 196.759714][ T9455] EXT4-fs (loop1): Free/Dirty block details [ 196.765607][ T9455] EXT4-fs (loop1): free_blocks=65280 [ 196.771074][ T9455] EXT4-fs (loop1): dirty_blocks=511 [ 196.776277][ T9455] EXT4-fs (loop1): Block reservation details [ 196.782351][ T9455] EXT4-fs (loop1): i_reserved_data_blocks=511 [ 196.806758][ T9455] syz.1.2118 (9455) used greatest stack depth: 10008 bytes left [ 196.817976][ T5903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.991635][ T9462] hsr_slave_1 (unregistering): left promiscuous mode [ 197.410324][ T9483] __nla_validate_parse: 4 callbacks suppressed [ 197.410340][ T9483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'. [ 197.469269][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2131'. [ 198.301093][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2142'. [ 198.332441][ T9521] loop4: detected capacity change from 0 to 1024 [ 198.339209][ T9521] EXT4-fs: Ignoring removed orlov option [ 198.345151][ T9521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.358665][ T9521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.372648][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 198.372665][ T29] audit: type=1400 audit(1725927617.243:4851): avc: denied { write } for pid=9520 comm="syz.4.2143" path="/257/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 198.429915][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.563409][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2153'. [ 198.590993][ T29] audit: type=1326 audit(1725927617.463:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.624188][ T29] audit: type=1326 audit(1725927617.463:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.647854][ T29] audit: type=1326 audit(1725927617.463:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.671306][ T29] audit: type=1326 audit(1725927617.463:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.694813][ T29] audit: type=1326 audit(1725927617.463:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.718340][ T29] audit: type=1326 audit(1725927617.463:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.741916][ T29] audit: type=1326 audit(1725927617.463:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.765501][ T29] audit: type=1326 audit(1725927617.463:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.788930][ T29] audit: type=1326 audit(1725927617.463:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.4.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6655acef9 code=0x7ffc0000 [ 198.834226][ T9564] loop1: detected capacity change from 0 to 512 [ 198.842183][ T9564] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.869720][ T9564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2160: bg 0: block 64: padding at end of block bitmap is not set [ 198.884852][ T9564] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2160: Failed to acquire dquot type 0 [ 198.897612][ T9564] EXT4-fs (loop1): 1 truncate cleaned up [ 198.903679][ T9564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.917684][ T9564] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.2160: Failed to acquire dquot type 0 [ 198.920489][ T9574] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 198.932280][ T9564] syz.1.2160 (9564) used greatest stack depth: 9392 bytes left [ 198.936965][ T9574] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 198.955259][ T5903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.158438][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2168'. [ 199.202867][ T9594] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 199.457424][ T9604] loop4: detected capacity change from 0 to 512 [ 199.473679][ T9604] EXT4-fs: Ignoring removed orlov option [ 199.480696][ T9604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 199.489764][ T9604] System zones: 1-12 [ 199.493894][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2174: casefold flag without casefold feature [ 199.506705][ T9604] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2174: couldn't read orphan inode 15 (err -117) [ 199.519206][ T9604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.534658][ T9604] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2174: Directory hole found for htree leaf block 0 [ 199.549399][ T9604] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.2174: Directory hole found for htree leaf block 0 [ 199.764105][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2174'. [ 199.807404][ T9611] hsr_slave_1 (unregistering): left promiscuous mode [ 200.127824][ T9624] loop2: detected capacity change from 0 to 2048 [ 200.134686][ T9624] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.158964][ T9624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.174416][ T9624] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2180: bg 0: block 234: padding at end of block bitmap is not set [ 200.189964][ T9624] EXT4-fs (loop2): Remounting filesystem read-only [ 200.204595][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.262087][ T9637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9637 comm=syz.2.2184 [ 200.344885][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.404811][ T9653] loop4: detected capacity change from 0 to 512 [ 200.413079][ T9653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 200.421414][ T9653] EXT4-fs (loop4): orphan cleanup on readonly fs [ 200.428216][ T9653] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 200.443199][ T9653] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 200.450775][ T9653] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.2192: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 200.468981][ T9653] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2192: couldn't read orphan inode 13 (err -117) [ 200.481409][ T9653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.496965][ T9653] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 200.506534][ T9653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 200.516857][ T9653] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 200.540167][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.845151][ T9666] loop4: detected capacity change from 0 to 512 [ 200.853796][ T9666] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2196: bg 0: block 393: padding at end of block bitmap is not set [ 200.868914][ T9666] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 200.878043][ T9666] EXT4-fs (loop4): 2 truncates cleaned up [ 200.884034][ T9666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.910787][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.987968][ T9678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2201'. [ 201.962350][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2214'. [ 202.068640][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 202.121929][ T9706] chnl_net:caif_netlink_parms(): no params data found [ 202.190991][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.198142][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.205344][ T9706] bridge_slave_0: entered allmulticast mode [ 202.211900][ T9706] bridge_slave_0: entered promiscuous mode [ 202.219294][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.226380][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.254358][ T9706] bridge_slave_1: entered allmulticast mode [ 202.261016][ T9706] bridge_slave_1: entered promiscuous mode [ 202.273443][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2225'. [ 202.305070][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.324417][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.354003][ T9706] team0: Port device team_slave_0 added [ 202.364796][ T9706] team0: Port device team_slave_1 added [ 202.386063][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.393111][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.419177][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.432241][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.439226][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.465453][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.505566][ T9706] hsr_slave_0: entered promiscuous mode [ 202.514978][ T9706] hsr_slave_1: entered promiscuous mode [ 202.522531][ T9706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.532076][ T9706] Cannot create hsr debugfs directory [ 202.568594][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2234'. [ 202.614601][ T9706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.701454][ T9706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.718611][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2238'. [ 202.763850][ T9706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.817159][ T9706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.860531][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.869089][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.891032][ T9706] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.900110][ T9706] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.908997][ T9706] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.917703][ T9706] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.959795][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.968446][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 202.973058][ T9706] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.988703][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.995787][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.006524][ T9084] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.013630][ T9084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.102190][ T9706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.185757][ T9840] loop4: detected capacity change from 0 to 128 [ 203.223029][ T9706] veth0_vlan: entered promiscuous mode [ 203.232235][ T9706] veth1_vlan: entered promiscuous mode [ 203.251756][ T9706] veth0_macvtap: entered promiscuous mode [ 203.259770][ T9706] veth1_macvtap: entered promiscuous mode [ 203.274419][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.285019][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.295237][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.305859][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.315830][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.326363][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.336367][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.346958][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.347892][ T9851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2254'. [ 203.356928][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.356958][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.359478][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.397171][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.407740][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.417595][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.428048][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.438114][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.448642][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.458717][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.469196][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.479312][ T9706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.489879][ T9706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.501909][ T9706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.516170][ T9706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.524952][ T9706] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.533702][ T9706] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.542454][ T9706] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.573136][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 203.573153][ T29] audit: type=1400 audit(1725927622.443:5025): avc: denied { mounton } for pid=9706 comm="syz-executor" path="/root/syzkaller.qIk6HG/syz-tmp" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 203.604229][ T29] audit: type=1400 audit(1725927622.443:5026): avc: denied { mount } for pid=9706 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.626661][ T29] audit: type=1326 audit(1725927622.453:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.650273][ T29] audit: type=1326 audit(1725927622.453:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.673896][ T29] audit: type=1326 audit(1725927622.453:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.697322][ T29] audit: type=1326 audit(1725927622.453:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.720737][ T29] audit: type=1326 audit(1725927622.453:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.744051][ T29] audit: type=1326 audit(1725927622.453:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.767516][ T29] audit: type=1326 audit(1725927622.453:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.790981][ T29] audit: type=1326 audit(1725927622.453:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f353048cef9 code=0x7ffc0000 [ 203.842236][ T9874] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2261'. [ 203.853600][ T9874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9874 comm=syz.1.2261 [ 203.886650][ T9880] loop1: detected capacity change from 0 to 256 [ 204.737772][ T9903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2271'. [ 204.809183][ T9911] loop3: detected capacity change from 0 to 512 [ 204.815838][ T9911] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.826492][ T9911] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.841197][ T9911] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2275: corrupted in-inode xattr: e_value out of bounds [ 204.868826][ T9911] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2275: couldn't read orphan inode 15 (err -117) [ 204.884391][ T9911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.915080][ T9706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.034791][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2282'. [ 205.566738][ T9952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2292'. [ 205.610817][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'. [ 205.619962][ T9954] bridge_slave_1: left allmulticast mode [ 205.625982][ T9954] bridge_slave_1: left promiscuous mode [ 205.631924][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.640137][ T9954] bridge_slave_0: left allmulticast mode [ 205.645827][ T9954] bridge_slave_0: left promiscuous mode [ 205.651626][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.798234][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2297'. [ 205.915320][ T9981] loop4: detected capacity change from 0 to 1024 [ 205.927310][ T9981] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 205.940614][ T9981] loop4: detected capacity change from 0 to 512 [ 205.947415][ T9981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.958683][ T9981] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 206.159997][ T9999] veth0_vlan: entered allmulticast mode [ 206.193216][ T9999] veth0_vlan: left promiscuous mode [ 206.202988][ T9999] veth0_vlan: entered promiscuous mode [ 206.762330][T10012] vlan2: entered promiscuous mode [ 206.767546][T10012] vlan2: entered allmulticast mode [ 206.772821][T10012] vlan0: entered allmulticast mode [ 206.777993][T10012] veth0_vlan: entered allmulticast mode [ 206.783724][T10012] vlan0: entered promiscuous mode [ 206.790142][T10012] team0: Port device vlan2 added [ 206.797333][T10012] veth0_vlan: left allmulticast mode [ 206.810909][T10012] vlan0: left allmulticast mode [ 206.815804][T10012] vlan0: left promiscuous mode [ 206.828248][T10012] team0: Port device vlan2 removed [ 207.201924][T10030] devpts: called with bogus options [ 207.566831][T10041] xt_hashlimit: size too large, truncated to 1048576 [ 207.959686][T10052] __nla_validate_parse: 4 callbacks suppressed [ 207.959703][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2331'. [ 207.990462][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.002464][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.228713][T10063] syz.4.2336[10063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.228851][T10063] syz.4.2336[10063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.615950][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 208.615968][ T29] audit: type=1400 audit(1725927627.483:5225): avc: denied { watch } for pid=10077 comm="syz.1.2342" path="/357/control" dev="tmpfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.659185][ T29] audit: type=1400 audit(1725927627.533:5226): avc: denied { execmem } for pid=10080 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 209.100346][ T29] audit: type=1400 audit(1725927627.973:5227): avc: denied { read write } for pid=5925 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.124894][ T29] audit: type=1400 audit(1725927627.973:5228): avc: denied { open } for pid=5925 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.149085][ T29] audit: type=1400 audit(1725927627.973:5229): avc: denied { ioctl } for pid=5925 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.281943][ T29] audit: type=1400 audit(1725927628.153:5230): avc: denied { name_bind } for pid=10088 comm="syz.0.2345" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 209.303829][ T29] audit: type=1400 audit(1725927628.153:5231): avc: denied { node_bind } for pid=10088 comm="syz.0.2345" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 209.326717][ T29] audit: type=1400 audit(1725927628.153:5232): avc: denied { prog_load } for pid=10087 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.346021][ T29] audit: type=1400 audit(1725927628.153:5233): avc: denied { bpf } for pid=10087 comm="syz.4.2346" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.367029][ T29] audit: type=1400 audit(1725927628.153:5234): avc: denied { map_create } for pid=10087 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.562571][T10103] loop2: detected capacity change from 0 to 512 [ 209.569140][T10103] EXT4-fs: Ignoring removed i_version option [ 209.575409][T10103] EXT4-fs: Ignoring removed nobh option [ 209.582420][T10103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.593627][T10103] EXT4-fs (loop2): 1 truncate cleaned up [ 209.600064][T10103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.633560][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.657703][T10111] loop1: detected capacity change from 0 to 2048 [ 209.680220][T10111] Alternate GPT is invalid, using primary GPT. [ 209.686675][T10111] loop1: p1 p2 p3 [ 210.547959][T10136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.557948][T10136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.626419][T10145] loop3: detected capacity change from 0 to 1024 [ 210.635335][T10145] EXT4-fs: Ignoring removed orlov option [ 210.641247][T10145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.658084][T10145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.812272][ T9706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.023285][T10240] loop4: detected capacity change from 0 to 1024 [ 212.040672][T10240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.249678][T10240] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 212.264764][T10240] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 212.277155][T10240] EXT4-fs (loop4): This should not happen!! Data will be lost [ 212.277155][T10240] [ 212.286912][T10240] EXT4-fs (loop4): Total free blocks count 0 [ 212.292894][T10240] EXT4-fs (loop4): Free/Dirty block details [ 212.298825][T10240] EXT4-fs (loop4): free_blocks=68451041280 [ 212.304649][T10240] EXT4-fs (loop4): dirty_blocks=16 [ 212.309804][T10240] EXT4-fs (loop4): Block reservation details [ 212.315811][T10240] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 212.331777][T10240] syz.4.2398 (10240) used greatest stack depth: 9352 bytes left [ 212.340568][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.700712][T10257] syz.3.2404[10257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.700832][T10257] syz.3.2404[10257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.903181][T10270] pim6reg1: entered promiscuous mode [ 212.919984][T10270] pim6reg1: entered allmulticast mode [ 213.083508][T10291] loop1: detected capacity change from 0 to 1024 [ 213.090876][T10291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.102837][T10291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.130464][ T5903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.677887][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 213.677906][ T29] audit: type=1400 audit(1725927632.553:5581): avc: denied { prog_run } for pid=10303 comm="syz.2.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.681745][T10304] loop2: detected capacity change from 0 to 128 [ 213.709968][ T29] audit: type=1400 audit(1725927632.583:5582): avc: denied { mounton } for pid=10303 comm="syz.2.2421" path="/415/file0" dev="tmpfs" ino=2189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.733031][ T29] audit: type=1400 audit(1725927632.583:5583): avc: denied { mount } for pid=10303 comm="syz.2.2421" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 213.755117][ T29] audit: type=1400 audit(1725927632.593:5584): avc: denied { unmount } for pid=3265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 213.768301][T10306] loop2: detected capacity change from 0 to 512 [ 213.783509][T10306] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2422: casefold flag without casefold feature [ 213.796762][T10306] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2422: couldn't read orphan inode 15 (err -117) [ 213.809262][T10306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.822237][ T29] audit: type=1400 audit(1725927632.693:5585): avc: denied { mount } for pid=10305 comm="syz.2.2422" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 213.847404][ T29] audit: type=1400 audit(1725927632.693:5586): avc: denied { map_create } for pid=10305 comm="syz.2.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.856083][T10306] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.2422: Directory hole found for htree leaf block 0 [ 213.866751][ T29] audit: type=1400 audit(1725927632.693:5587): avc: denied { map_read map_write } for pid=10305 comm="syz.2.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.900435][ T29] audit: type=1400 audit(1725927632.723:5588): avc: denied { write } for pid=10305 comm="syz.2.2422" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.922239][ T29] audit: type=1400 audit(1725927632.723:5589): avc: denied { add_name } for pid=10305 comm="syz.2.2422" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.944402][ T29] audit: type=1400 audit(1725927632.723:5590): avc: denied { create } for pid=10305 comm="syz.2.2422" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 213.971158][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.005103][T10319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.017387][T10319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.096815][T10335] loop4: detected capacity change from 0 to 512 [ 214.105045][T10335] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.2432: invalid block [ 214.117289][T10335] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2432: invalid indirect mapped block 4294967295 (level 1) [ 214.133095][T10335] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2432: invalid indirect mapped block 4294967295 (level 1) [ 214.147559][T10335] EXT4-fs (loop4): 2 truncates cleaned up [ 214.154006][T10335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.178373][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.919735][T10364] loop1: detected capacity change from 0 to 764 [ 214.928476][T10364] rock: directory entry would overflow storage [ 214.934671][T10364] rock: sig=0x4654, size=5, remaining=4 [ 214.980601][T10370] loop1: detected capacity change from 0 to 2048 [ 214.987357][T10370] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.994567][T10370] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.004367][T10370] EXT4-fs (loop1): group descriptors corrupted! [ 215.049628][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.058455][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.153515][T10386] loop4: detected capacity change from 0 to 1024 [ 215.160694][T10386] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 215.172082][T10386] JBD2: no valid journal superblock found [ 215.177887][T10386] EXT4-fs (loop4): Could not load journal inode [ 215.738613][T10397] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 216.108657][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 216.222594][T10444] netlink: 'syz.4.2476': attribute type 4 has an invalid length. [ 216.420001][T10463] loop4: detected capacity change from 0 to 8192 [ 216.486796][T10463] loop4: p1 p2 p4 < > [ 216.491029][T10463] loop4: partition table partially beyond EOD, truncated [ 216.498219][T10463] loop4: p1 size 8388608 extends beyond EOD, truncated [ 216.506605][T10463] loop4: p2 size 67174400 extends beyond EOD, truncated [ 216.514106][T10463] loop4: p4 start 131073 is beyond EOD, truncated [ 216.698484][T10477] syzkaller0: entered promiscuous mode [ 216.704031][T10477] syzkaller0: entered allmulticast mode [ 216.709521][T10481] loop1: detected capacity change from 0 to 1024 [ 216.755672][T10485] tmpfs: Unknown parameter ' ' [ 216.879625][T10494] loop4: detected capacity change from 0 to 764 [ 216.923169][T10505] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.304831][T10506] loop3: detected capacity change from 0 to 2048 [ 217.348861][T10506] Alternate GPT is invalid, using primary GPT. [ 217.355165][T10506] loop3: p1 p2 p3 [ 217.420016][T10516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2507'. [ 217.614255][T10533] loop2: detected capacity change from 0 to 2048 [ 217.674375][T10541] tmpfs: Unsupported parameter 'huge' [ 217.675606][T10533] Alternate GPT is invalid, using primary GPT. [ 217.686319][T10533] loop2: p2 p3 p7 [ 217.773789][T10549] pim6reg1: entered promiscuous mode [ 217.779190][T10549] pim6reg1: entered allmulticast mode [ 217.863008][T10562] netlink: 'syz.0.2526': attribute type 4 has an invalid length. [ 218.423751][T10596] loop3: detected capacity change from 0 to 512 [ 218.438451][T10596] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2539: bg 0: block 248: padding at end of block bitmap is not set [ 218.453611][T10596] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.2539: Failed to acquire dquot type 1 [ 218.466048][T10596] EXT4-fs (loop3): 1 truncate cleaned up [ 218.471983][T10596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.484874][T10596] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.506405][ T9706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.704804][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 218.704867][ T29] audit: type=1400 audit(1725927637.573:5842): avc: denied { ioctl } for pid=10612 comm="syz.1.2546" path="/dev/input/event0" dev="devtmpfs" ino=218 ioctlcmd=0x4506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 218.836485][ T29] audit: type=1326 audit(1725927637.703:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce164acef9 code=0x7fc00000 [ 218.865344][ T29] audit: type=1400 audit(1725927637.733:5844): avc: denied { create } for pid=10620 comm="syz.0.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.885110][ T29] audit: type=1400 audit(1725927637.733:5845): avc: denied { bind } for pid=10620 comm="syz.0.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.904594][ T29] audit: type=1400 audit(1725927637.733:5846): avc: denied { listen } for pid=10620 comm="syz.0.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.940255][ T29] audit: type=1400 audit(1725927637.803:5847): avc: denied { bind } for pid=10620 comm="syz.0.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.944258][T10624] serio: Serial port ptm0 [ 219.057157][ T29] audit: type=1326 audit(1725927637.933:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.0.2551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce164acef9 code=0x0 [ 219.437653][ T29] audit: type=1400 audit(1725927638.313:5849): avc: denied { mounton } for pid=10635 comm="syz.3.2552" path="/proc/114/task" dev="proc" ino=26587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 219.478846][ T29] audit: type=1400 audit(1725927638.333:5850): avc: denied { mount } for pid=10635 comm="syz.3.2552" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 219.506213][T10638] syz.3.2553[10638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.506297][T10638] syz.3.2553[10638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.521059][ T29] audit: type=1400 audit(1725927638.393:5851): avc: denied { name_bind } for pid=10637 comm="syz.3.2553" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 219.640513][T10642] pim6reg1: entered promiscuous mode [ 219.645875][T10642] pim6reg1: entered allmulticast mode [ 219.700770][T10645] syzkaller0: entered promiscuous mode [ 219.706411][T10645] syzkaller0: entered allmulticast mode [ 219.755517][T10646] loop4: detected capacity change from 0 to 8192 [ 219.787823][T10646] loop4: p1 p2 p3 [ 219.794121][T10653] loop3: detected capacity change from 0 to 2048 [ 219.818085][T10653] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 220.769337][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2591'. [ 221.619688][T10768] loop3: detected capacity change from 0 to 736 [ 221.626581][T10768] iso9660: Bad value for 'mode' [ 222.207033][T10804] syz.0.2614[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.207118][T10804] syz.0.2614[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.219597][T10804] syz.0.2614[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.231242][T10804] syz.0.2614[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.993730][T10826] loop4: detected capacity change from 0 to 4096 [ 223.016107][T10826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.060545][T10839] netlink: 'syz.2.2628': attribute type 7 has an invalid length. [ 223.068409][T10839] netlink: 'syz.2.2628': attribute type 39 has an invalid length. [ 223.104877][T10841] loop2: detected capacity change from 0 to 512 [ 223.111747][T10841] EXT4-fs (loop2): unable to read superblock [ 223.121678][T10841] loop2: detected capacity change from 0 to 512 [ 223.129871][T10841] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 223.149619][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.180950][T10845] loop4: detected capacity change from 0 to 1024 [ 223.208082][T10845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.245289][ T5925] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.291079][T10856] loop4: detected capacity change from 0 to 8192 [ 223.423710][T10867] pim6reg1: entered promiscuous mode [ 223.429230][T10867] pim6reg1: entered allmulticast mode [ 223.524505][T10861] ================================================================== [ 223.532640][T10861] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 223.541197][T10861] [ 223.543534][T10861] write to 0xffff888108085fc8 of 8 bytes by task 10856 on cpu 1: [ 223.551262][T10861] sync_mapping_buffers+0x162/0x7e0 [ 223.556501][T10861] fat_file_fsync+0xad/0x100 [ 223.561128][T10861] vfs_fsync_range+0x122/0x140 [ 223.565909][T10861] generic_file_write_iter+0x191/0x1d0 [ 223.571389][T10861] iter_file_splice_write+0x5e6/0x970 [ 223.576799][T10861] direct_splice_actor+0x16c/0x2c0 [ 223.582009][T10861] splice_direct_to_actor+0x305/0x670 [ 223.587420][T10861] do_splice_direct+0xd7/0x150 [ 223.592219][T10861] do_sendfile+0x3ab/0x950 [ 223.596653][T10861] __x64_sys_sendfile64+0xbd/0x150 [ 223.601812][T10861] x64_sys_call+0xed5/0x2d60 [ 223.606435][T10861] do_syscall_64+0xc9/0x1c0 [ 223.611051][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.616982][T10861] [ 223.619315][T10861] read to 0xffff888108085fc8 of 8 bytes by task 10861 on cpu 0: [ 223.626962][T10861] mark_buffer_dirty_inode+0x96/0x1c0 [ 223.632383][T10861] fat16_ent_put+0x4f/0x60 [ 223.636853][T10861] fat_ent_write+0x66/0xe0 [ 223.641294][T10861] fat_chain_add+0x15f/0x400 [ 223.645913][T10861] fat_add_cluster+0x78/0xe0 [ 223.650542][T10861] fat_fallocate+0x129/0x1d0 [ 223.655176][T10861] vfs_fallocate+0x392/0x3e0 [ 223.659800][T10861] do_vfs_ioctl+0x1481/0x1560 [ 223.664505][T10861] __se_sys_ioctl+0x81/0x150 [ 223.669116][T10861] __x64_sys_ioctl+0x43/0x50 [ 223.673721][T10861] x64_sys_call+0x15cc/0x2d60 [ 223.678440][T10861] do_syscall_64+0xc9/0x1c0 [ 223.682966][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.688881][T10861] [ 223.691210][T10861] value changed: 0xffff8881135aa308 -> 0x0000000000000000 [ 223.698327][T10861] [ 223.700663][T10861] Reported by Kernel Concurrency Sanitizer on: [ 223.706828][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.4.2636 Not tainted 6.11.0-rc7-syzkaller #0 [ 223.715869][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 223.725957][T10861] ================================================================== [ 223.953868][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 223.953885][ T29] audit: type=1400 audit(1725927642.823:6011): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1