last executing test programs: 2.050928349s ago: executing program 4 (id=5782): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.992232773s ago: executing program 0 (id=5784): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000180), 0x2000) 1.790750518s ago: executing program 4 (id=5793): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 1.722813583s ago: executing program 0 (id=5794): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) unshare(0x400) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 1.699463255s ago: executing program 4 (id=5798): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.646480709s ago: executing program 0 (id=5800): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') pread64(r1, &(0x7f0000002040)=""/81, 0x51, 0x7ffb) 1.646378859s ago: executing program 3 (id=5801): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.62530037s ago: executing program 3 (id=5802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.62517676s ago: executing program 0 (id=5803): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)) write$binfmt_script(r2, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 1.62450441s ago: executing program 4 (id=5804): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r0, r1) setsockopt(r1, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0xebca) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @empty=0x1700000000000000}, 0x10) 1.558682705s ago: executing program 3 (id=5806): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x926}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0xfdef) 1.536464566s ago: executing program 3 (id=5808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r3 = dup2(r1, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) copy_file_range(r5, 0x0, r4, 0x0, 0xffffffffa003e45b, 0x700000000000000) 1.456843333s ago: executing program 3 (id=5810): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x5, 0x1, "fd"}, 0x9) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) 1.456122082s ago: executing program 0 (id=5811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r1}, 0x18) 1.404901846s ago: executing program 2 (id=5812): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='gadgetfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) getdents64(r1, &(0x7f0000002ec0)=""/4096, 0x1000) 1.404461326s ago: executing program 2 (id=5814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 1.404082906s ago: executing program 0 (id=5816): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x8, 0x2}, 0x10}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x4208, 0x0) wait4(0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000668000/0x4000)=nil, 0x4000, 0x0) fsopen(&(0x7f0000000140)='gfs2meta\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0xc0000) r3 = dup(r2) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000002080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c776681006f3d", @ANYBLOB="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", @ANYBLOB="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"]) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0xa0}}, 0x8000010) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="3af608857e505ca2b539be8f0cc8afcb4340bbde4fc071c3b0cf3b1e02cef4ca699e3e7da2b7ba"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x3440, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c726664453eb6e84cdc6e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',version=9p2000,uid<', @ANYRESDEC=0x0, @ANYBLOB=',hash,fsuuid=bf94e6ab-32bb-579c-T001-70fa1fe4,context=user_u,subj_role=,%-*,async,dont_hash,k']) llistxattr(&(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000440)='cgroup.stat\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @rand_addr=0x64010100}, {0x0, @remote}, 0x1c, {0x2, 0x4e22, @broadcast}, 'veth0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 1.366257079s ago: executing program 2 (id=5817): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000500000000000000000010000000000008000400", @ANYRES32=r4, @ANYBLOB="0600150007"], 0x44}}, 0x0) 1.365726729s ago: executing program 1 (id=5818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xa, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 1.282708645s ago: executing program 2 (id=5819): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) 1.248526808s ago: executing program 2 (id=5820): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.248322758s ago: executing program 2 (id=5821): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resgid}], [{@audit}, {@euid_gt}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$eJzs3EtvVGUfAPD/mbaUvtC3fXm9cVFG0dhopLRcFy6AaMLGxERjcFnbQpAChtYESCPFGEhcaPgEXnYmfgJXujFqXGjcStwaE2K6AV2YY87MmTrt6fTGtGPp75fM8JzbPM//nPMwz2VOA9iwytlbErE1In6OiJ7q4uwdytV/7k5PDv8xPTmcRJq+8ntS2e/O9ORwbdfacVvyhb5SROm9JHYWs+0cv3zl7NDY2OjFfEX/RClPnRs6PXp69PzgkSMH9ncdPjR4sClxZmW6s+OdC7u2n3j95kvDJ2++8e3nWXnTfHt9HFW9lfdNS86hrbCmHOXZ57LOU0sv+rrQXZdO2rP3UusKw5Jld212uToq9b8n2ipLVT3x4rstLRywqtI0TTsLa2e+y6bSeklSPSBNr6XAfSCJVpcAaI3aF/2d6aynOjlc7Aff324fi0oPKIv7bv6qbmmv9GDLvdW+Uccq5f9ARJyc+vOj7BXzjkMAADTXl8cibhyvtjtqr+qWUjxUt99/87mh3oj4X0Rsi4j/5+2XByMq+z4cEY/UHdO9hFmA8pzlYvvnx648Ud9cbZqs/fd8Prc1u/03U/LetnypuxJ/R3LqzNjovvyc9EVHZ7Y8UPzomWG1r1746cNG+Zfr2n/ZK8u/1hbMy/Fb+5wBupGhiaF7jbvm9rXKib1ajD+J9qSWitgeETtW8PnZOTvzzGe7Gm2fFX8WZyH+Dxp/ePsKCjRH+knE09XrPxVz4o98/i+pzE+ee6t//PKV587Uz08OHD40eLB/c4yN7uuv3RVF3/1w/eU8WehGLHD9a1VjVSfSsuv/n3nv/5mZy94sNTNfO778PK7futGwT7PS+39T8molXZufvTQ0MXFxIGJTMlVcP/jPsZeGumbtn8Xft2f++r8t4q+P8+N2RkR2Ez8aEY9FxO687I9HxBMRsWeB+L85/uSbjbqQi8e/urL4R5Z1/Rsljn4fMf+mtrNff1HI+P1yIf6OaHT9D1RSffmakaGJzYvFtVBJ6xP3fAIBAABgHdgdEVsjKe3NB5q2Rqm0d2/ElpkRlPGJZ09dePv8SPUZgd7oKNVGunrqxkMH8rHhbDk7arBuOdu+vzJunKZp2pUtZ/33se7Whg4b3pYG9T/za/GRFuB+s6x5tEZPtAHr0tz6f2vJRzb/BxnA2mrC72iAdUr9h41ryfV/tZ6CA1pmvvp/NeJuC4oCrLH56v9rhTVH16QswNrS/4eNa+X1348BYL3z/Q8b0pIekl9BYtuJBfZJ2lcn08aJUiz8VwB6I2pram2ahT/wl1JEc0rY1tRIu2Zd09K8+2yOZuQVpUX3aV/GH2JY20Tp31GMaqIzIha5e2dutqu1xJXVLlilEnza2v+dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7t3fAQAA///tUdPr") 1.246617158s ago: executing program 1 (id=5822): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) r2 = syz_io_uring_setup(0x4f3c, &(0x7f00000003c0)={0x0, 0x1a8f, 0x100, 0x3, 0xc}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.07864747s ago: executing program 1 (id=5823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = dup(r0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x14, 0x17, 0xa, 0x101}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) 994.752166ms ago: executing program 1 (id=5824): socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) 763.966474ms ago: executing program 4 (id=5825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x293d, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000002c0)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 726.726026ms ago: executing program 4 (id=5826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8080) syz_usb_disconnect(r2) syz_usb_connect(0x1, 0x24, &(0x7f0000000840)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000500)=0x18a5) writev(r1, &(0x7f0000002800)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) 574.770968ms ago: executing program 3 (id=5827): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 21.113918ms ago: executing program 1 (id=5828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @timestamp, @window, @window, @sack_perm, @mss, @timestamp, @sack_perm], 0x2d0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="49bbe4121f35be052595bd4892ad64d5c5d7f7a0c4527f09933c2e0d24eedb4089682bc3", 0x24}, {&(0x7f0000001780)="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", 0xfd}], 0x2}}], 0x1, 0x4008095) 0s ago: executing program 1 (id=5829): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x7fffffff}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faffdb41", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): 00. [ 255.439966][T15297] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 256.220503][T15193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.439226][T15309] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 256.458497][T15310] IPv6: Can't replace route, no match found [ 256.514578][T15315] vlan2: entered promiscuous mode [ 256.521100][T15315] vlan2: entered allmulticast mode [ 256.531152][T15315] bond0: entered allmulticast mode [ 256.536307][T15315] bond_slave_0: entered allmulticast mode [ 256.543609][T15315] bond_slave_1: entered allmulticast mode [ 256.550718][T15315] bond0: entered promiscuous mode [ 256.555831][T15315] bond_slave_0: entered promiscuous mode [ 256.562981][T15315] bond_slave_1: entered promiscuous mode [ 256.658504][T15315] bond0: left allmulticast mode [ 256.663626][T15315] bond_slave_0: left allmulticast mode [ 256.670580][T15315] bond_slave_1: left allmulticast mode [ 256.676092][T15315] bond0: left promiscuous mode [ 256.682247][T15315] bond_slave_0: left promiscuous mode [ 256.688862][T15315] bond_slave_1: left promiscuous mode [ 257.087859][T15332] veth0_vlan: entered allmulticast mode [ 257.148530][T15335] veth0_vlan: left promiscuous mode [ 257.183067][T15335] veth0_vlan: entered promiscuous mode [ 257.449210][T15360] loop0: detected capacity change from 0 to 512 [ 257.473372][T15360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.486319][T15360] ext4 filesystem being mounted at /968/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.500277][T15367] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 257.515202][T15360] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.4211: corrupted inode contents [ 257.528337][T15360] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz.0.4211: mark_inode_dirty error [ 257.541595][T15360] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.4211: corrupted inode contents [ 257.561014][T15360] syz.0.4211[15360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.561086][T15360] syz.0.4211[15360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.575440][T15360] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.4211: Directory hole found for htree leaf block 0 [ 257.611840][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.698675][T15383] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15383 comm=syz.0.4221 [ 257.751989][T15389] loop0: detected capacity change from 0 to 256 [ 257.846354][T15393] bond0: entered promiscuous mode [ 257.851558][T15393] macvlan2: entered promiscuous mode [ 257.857019][T15393] team0: entered promiscuous mode [ 257.884075][T15393] netlink: 'syz.0.4226': attribute type 10 has an invalid length. [ 257.991937][T15401] loop0: detected capacity change from 0 to 128 [ 257.999014][T15401] EXT4-fs: Ignoring removed nobh option [ 258.010219][T15401] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.024580][T15401] ext4 filesystem being mounted at /977/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.051350][ T3560] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.126458][T15404] lo speed is unknown, defaulting to 1000 [ 258.403471][T15409] lo speed is unknown, defaulting to 1000 [ 258.603026][T15416] loop0: detected capacity change from 0 to 256 [ 258.630650][T15193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.721033][T15193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.744590][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4241'. [ 258.753667][T15428] bond0: option miimon: invalid value (18446744072501592068) [ 258.761181][T15428] bond0: option miimon: allowed values 0 - 2147483647 [ 258.870320][T15193] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.887896][T15193] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.903220][T15193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.915771][T15193] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.967128][T15445] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.023061][T15450] SELinux: Context system_u:object_r:dhcp_sta is not valid (left unmapped). [ 259.051199][T15454] syz.2.4253[15454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.051263][T15454] syz.2.4253[15454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.089282][T15458] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4255'. [ 259.110938][T15458] netlink: 'syz.1.4255': attribute type 10 has an invalid length. [ 259.334235][T15467] lo speed is unknown, defaulting to 1000 [ 259.799742][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 259.799759][ T29] audit: type=1400 audit(2000000011.670:15628): avc: denied { read write } for pid=3560 comm="syz-executor" name="loop0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.853871][ T29] audit: type=1400 audit(2000000011.670:15629): avc: denied { create } for pid=15482 comm="syz.4.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.873777][ T29] audit: type=1400 audit(2000000011.670:15630): avc: denied { shutdown } for pid=15482 comm="syz.4.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.893842][ T29] audit: type=1400 audit(2000000011.670:15631): avc: denied { getopt } for pid=15482 comm="syz.4.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.913575][ T29] audit: type=1400 audit(2000000011.670:15632): avc: denied { connect } for pid=15482 comm="syz.4.4267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.918035][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 259.933414][ T29] audit: type=1400 audit(2000000011.670:15633): avc: denied { name_connect } for pid=15482 comm="syz.4.4267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 259.952598][ T4240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.963010][ T29] audit: type=1400 audit(2000000011.670:15634): avc: denied { setopt } for pid=15482 comm="syz.4.4267" lport=55595 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.963062][ T29] audit: type=1400 audit(2000000011.710:15635): avc: denied { prog_load } for pid=15484 comm="syz.4.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 259.963091][ T29] audit: type=1400 audit(2000000011.710:15636): avc: denied { open } for pid=3560 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.963124][ T29] audit: type=1400 audit(2000000011.710:15637): avc: denied { ioctl } for pid=3560 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=683 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.068765][ T4240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 260.076328][ T4240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 260.085870][ T4240] rtc_cmos 00:00: Alarms can be up to one day in the future [ 260.094276][ T4240] rtc rtc0: __rtc_set_alarm: err=-22 [ 260.212794][T15510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.389632][T15535] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 261.495537][T15580] 9pnet_fd: Insufficient options for proto=fd [ 262.173356][T15618] 9pnet_fd: Insufficient options for proto=fd [ 263.726356][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4338'. [ 265.066318][T15716] 9pnet_fd: Insufficient options for proto=fd [ 265.245520][T15725] 9pnet_fd: p9_fd_create_tcp (15725): problem connecting socket to 127.0.0.1 [ 265.258999][T15727] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 265.275646][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 265.275666][ T29] audit: type=1326 audit(2000000017.140:15879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.327829][ T29] audit: type=1326 audit(2000000017.190:15880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.361240][T15729] lo speed is unknown, defaulting to 1000 [ 265.385578][T15733] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 265.475001][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4377'. [ 265.475365][ T29] audit: type=1326 audit(2000000017.300:15881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.508987][ T29] audit: type=1326 audit(2000000017.300:15882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15728 comm="syz.3.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.534089][ T29] audit: type=1400 audit(2000000017.310:15883): avc: denied { create } for pid=15736 comm="syz.0.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.555407][ T29] audit: type=1400 audit(2000000017.310:15884): avc: denied { connect } for pid=15736 comm="syz.0.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 265.611243][ T29] audit: type=1326 audit(2000000017.480:15885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.3.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.636317][ T29] audit: type=1326 audit(2000000017.480:15886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.3.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.665134][ T29] audit: type=1326 audit(2000000017.540:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.3.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.690110][ T29] audit: type=1326 audit(2000000017.540:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.3.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 265.750284][T15749] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.000298][T15774] lo speed is unknown, defaulting to 1000 [ 266.106126][T15791] macvtap0: entered promiscuous mode [ 266.119771][T15791] macvtap0: left promiscuous mode [ 266.261321][T15810] dummy0: entered promiscuous mode [ 266.290812][T15810] batman_adv: batadv0: Adding interface: macsec1 [ 266.298609][T15810] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.329510][T15810] batman_adv: batadv0: Interface activated: macsec1 [ 266.430642][T15819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4414'. [ 266.459806][T15823] lo speed is unknown, defaulting to 1000 [ 266.506617][T15826] netlink: 'syz.0.4416': attribute type 4 has an invalid length. [ 266.991244][T15856] lo speed is unknown, defaulting to 1000 [ 267.242379][T15859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.462401][T15870] loop0: detected capacity change from 0 to 1024 [ 267.500813][T15870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.505145][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'. [ 267.622445][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.783088][T15895] lo speed is unknown, defaulting to 1000 [ 267.827184][T15897] 9pnet: p9_errstr2errno: server reported unknown error õ’ô [ 268.411238][T15914] lo speed is unknown, defaulting to 1000 [ 268.716724][T15938] pim6reg: entered allmulticast mode [ 268.726348][T15938] pim6reg: left allmulticast mode [ 268.754822][T15942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.837110][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4470'. [ 268.942089][T15958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 268.953469][T15958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.985713][T15962] loop0: detected capacity change from 0 to 512 [ 269.004945][T15958] dummy0: entered promiscuous mode [ 269.013582][T15965] syz.2.4480[15965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.013761][T15965] syz.2.4480[15965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.039354][T15958] batman_adv: batadv0: Adding interface: macsec1 [ 269.058174][T15958] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.092093][T15958] batman_adv: batadv0: Interface activated: macsec1 [ 269.178774][T15972] lo speed is unknown, defaulting to 1000 [ 269.185216][T15962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 269.224963][T15962] ext4 filesystem being mounted at /1018/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.302680][T15983] lo speed is unknown, defaulting to 1000 [ 269.601720][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 269.766406][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'. [ 269.814024][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 271.039077][T16014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=16014 comm=syz.3.4499 [ 271.088453][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 271.088472][ T29] audit: type=1400 audit(2000000022.960:16103): avc: denied { setopt } for pid=16018 comm="syz.3.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 271.565202][T16036] loop0: detected capacity change from 0 to 128 [ 271.592432][ T29] audit: type=1400 audit(2000000023.450:16104): avc: denied { mount } for pid=16035 comm="syz.0.4511" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 271.641776][ T29] audit: type=1400 audit(2000000023.480:16105): avc: denied { read } for pid=16041 comm="syz.2.4513" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.665072][ T29] audit: type=1400 audit(2000000023.480:16106): avc: denied { open } for pid=16041 comm="syz.2.4513" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.688803][ T29] audit: type=1400 audit(2000000023.490:16107): avc: denied { unmount } for pid=3560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 271.709019][ T29] audit: type=1400 audit(2000000023.500:16108): avc: denied { sys_module } for pid=16031 comm="syz.1.4509" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 271.730273][ T29] audit: type=1400 audit(2000000023.500:16109): avc: denied { ioctl } for pid=16041 comm="syz.2.4513" path="/dev/rtc0" dev="devtmpfs" ino=220 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 271.784603][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4521'. [ 271.793816][ T29] audit: type=1400 audit(2000000023.660:16110): avc: denied { ioctl } for pid=16046 comm="syz.4.4515" path="socket:[51263]" dev="sockfs" ino=51263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.822713][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4521'. [ 271.855103][ T29] audit: type=1326 audit(2000000023.720:16111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16065 comm="syz.3.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 271.912280][ T29] audit: type=1326 audit(2000000023.750:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16065 comm="syz.3.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 272.010840][T16089] syzkaller1: entered promiscuous mode [ 272.016351][T16089] syzkaller1: entered allmulticast mode [ 272.268229][T16099] lo speed is unknown, defaulting to 1000 [ 272.807005][T16117] tipc: Enabling of bearer rejected, failed to enable media [ 273.046196][T16135] lo speed is unknown, defaulting to 1000 [ 273.527813][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4559'. [ 273.611093][T16166] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4564'. [ 273.620492][T16166] netlink: 'syz.1.4564': attribute type 2 has an invalid length. [ 273.647565][T16169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.656110][T16169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.768190][T16179] loop0: detected capacity change from 0 to 2048 [ 273.800772][T16179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.850927][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.942800][T16200] loop0: detected capacity change from 0 to 128 [ 273.951422][T16200] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.963710][T16200] ext4 filesystem being mounted at /1040/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 274.009777][ T3560] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.459922][T16208] lo speed is unknown, defaulting to 1000 [ 274.752661][T16211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4581'. [ 274.824015][T16213] bond0: entered promiscuous mode [ 274.830449][T16213] bond_slave_0: entered promiscuous mode [ 274.836237][T16213] bond_slave_1: entered promiscuous mode [ 274.895139][T16218] netlink: 'syz.3.4583': attribute type 10 has an invalid length. [ 274.941806][T16218] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.969462][T16218] team0: entered promiscuous mode [ 274.974606][T16218] team_slave_0: entered promiscuous mode [ 274.982089][T16218] team_slave_1: entered promiscuous mode [ 275.011798][T16218] bond0: (slave team0): Enslaving as an active interface with an up link [ 275.074380][T16230] loop0: detected capacity change from 0 to 512 [ 275.084558][T16230] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 275.311872][T16259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.487488][T16268] lo speed is unknown, defaulting to 1000 [ 276.336490][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.376537][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.093539][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 280.093557][ T29] audit: type=1326 audit(2000000031.960:16189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.143609][ T29] audit: type=1326 audit(2000000032.000:16190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.167309][ T29] audit: type=1326 audit(2000000032.000:16191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.170116][T16284] loop0: detected capacity change from 0 to 256 [ 280.190978][ T29] audit: type=1326 audit(2000000032.000:16192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.191048][ T29] audit: type=1326 audit(2000000032.000:16193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.191081][ T29] audit: type=1326 audit(2000000032.010:16194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.191112][ T29] audit: type=1326 audit(2000000032.010:16195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.191144][ T29] audit: type=1326 audit(2000000032.010:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.191200][ T29] audit: type=1326 audit(2000000032.010:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.191243][ T29] audit: type=1326 audit(2000000032.010:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16275 comm="syz.1.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 280.289681][T16290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 280.353949][T16284] FAT-fs (loop0): Directory bread(block 64) failed [ 280.369044][T16290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 280.419642][T16294] hsr_slave_0: left promiscuous mode [ 280.425567][T16284] FAT-fs (loop0): Directory bread(block 65) failed [ 280.425630][T16294] hsr_slave_1: left promiscuous mode [ 280.440734][T16284] FAT-fs (loop0): Directory bread(block 66) failed [ 280.467283][T16284] FAT-fs (loop0): Directory bread(block 67) failed [ 280.473877][T16284] FAT-fs (loop0): Directory bread(block 68) failed [ 280.491686][T16284] FAT-fs (loop0): Directory bread(block 69) failed [ 280.499889][T16284] FAT-fs (loop0): Directory bread(block 70) failed [ 280.515146][T16284] FAT-fs (loop0): Directory bread(block 71) failed [ 280.523783][T16284] FAT-fs (loop0): Directory bread(block 72) failed [ 280.533907][T16284] FAT-fs (loop0): Directory bread(block 73) failed [ 280.624401][T16310] lo speed is unknown, defaulting to 1000 [ 280.821250][T16341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4635'. [ 280.929700][T16355] syzkaller1: entered promiscuous mode [ 280.935264][T16355] syzkaller1: entered allmulticast mode [ 281.165598][T16385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4652'. [ 281.175129][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4652'. [ 282.091795][T16440] serio: Serial port ptm0 [ 282.109434][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.118277][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.125953][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.127290][T16442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.135095][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.152320][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.161472][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.170310][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.179548][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.188547][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.196256][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.204931][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.214089][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.223083][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.232325][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.241107][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.250197][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.259232][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.268360][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.276044][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.284788][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.293217][ T3556] hid-generic 0000:1000003:0000.0008: unknown main item tag 0x0 [ 282.300950][T16442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.302407][ T3556] hid-generic 0000:1000003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 284.300453][T16511] loop0: detected capacity change from 0 to 512 [ 284.331686][T16511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.363101][T16511] ext4 filesystem being mounted at /1071/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.411228][T16525] syz.1.4711[16525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.411300][T16525] syz.1.4711[16525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.433435][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.512125][T16531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.670148][T16540] 9pnet_fd: Insufficient options for proto=fd [ 284.740440][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4720'. [ 284.760251][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4721'. [ 284.795357][T16549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4721'. [ 285.673322][T16563] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 285.679752][T16563] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 285.765367][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 285.765386][ T29] audit: type=1326 audit(2000000037.630:16322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.830012][T16566] 9pnet_fd: Insufficient options for proto=fd [ 285.839210][ T29] audit: type=1326 audit(2000000037.680:16323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.862802][ T29] audit: type=1326 audit(2000000037.680:16324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.886447][ T29] audit: type=1326 audit(2000000037.680:16325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.910050][ T29] audit: type=1326 audit(2000000037.680:16326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.933590][ T29] audit: type=1326 audit(2000000037.680:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.957299][ T29] audit: type=1326 audit(2000000037.680:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 285.981255][ T29] audit: type=1326 audit(2000000037.680:16329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 286.004932][ T29] audit: type=1326 audit(2000000037.680:16330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16571 comm="syz.3.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 286.087934][T16584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4736'. [ 286.225581][ T29] audit: type=1400 audit(2000000038.090:16331): avc: denied { write } for pid=16594 comm="syz.3.4740" name="file0" dev="tmpfs" ino=4148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 286.280332][T16589] ebtables: ebtables: counters copy to user failed while replacing table [ 286.405550][T16612] syz.2.4748[16612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.405613][T16612] syz.2.4748[16612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.654058][T16625] lo speed is unknown, defaulting to 1000 [ 287.554533][T16626] lo speed is unknown, defaulting to 1000 [ 287.998123][T16650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16650 comm=syz.1.4763 [ 288.028159][T16652] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 288.409221][T16698] netlink: 'syz.4.4786': attribute type 1 has an invalid length. [ 288.479683][T16706] syz.2.4788[16706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.479791][T16706] syz.2.4788[16706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.509610][T16706] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.748467][T16731] 9pnet_fd: Insufficient options for proto=fd [ 288.849166][T16746] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.856550][T16746] vhci_hcd: invalid port number 23 [ 288.861678][T16746] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 289.001983][T16757] 9pnet_fd: Insufficient options for proto=fd [ 289.064346][T16766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16766 comm=syz.4.4816 [ 289.465714][T16799] lo speed is unknown, defaulting to 1000 [ 289.802088][T16806] 9pnet_fd: Insufficient options for proto=fd [ 290.656038][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'. [ 290.711796][T16842] 9pnet_fd: Insufficient options for proto=fd [ 290.979116][T16864] lo speed is unknown, defaulting to 1000 [ 292.427789][T16869] loop0: detected capacity change from 0 to 512 [ 292.437663][T16869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.817047][T16867] lo speed is unknown, defaulting to 1000 [ 293.217666][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 293.223857][T16869] EXT4-fs (loop0): 1 truncate cleaned up [ 293.230144][T16869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.272860][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 293.272876][ T29] audit: type=1326 audit(2000000045.140:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16874 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5149eb9 code=0x7ffc0000 [ 293.336457][ T29] audit: type=1326 audit(2000000045.140:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16874 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5149eb9 code=0x7ffc0000 [ 293.360117][ T29] audit: type=1326 audit(2000000045.140:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16874 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f4ea5149eb9 code=0x7ffc0000 [ 293.383736][ T29] audit: type=1326 audit(2000000045.140:16484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16874 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5149eb9 code=0x7ffc0000 [ 293.407409][ T29] audit: type=1326 audit(2000000045.140:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16874 comm="syz.4.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea5149eb9 code=0x7ffc0000 [ 293.438815][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.089166][T16889] syz.1.4869[16889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.089229][T16889] syz.1.4869[16889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.104728][T16893] 9pnet_fd: Insufficient options for proto=fd [ 295.114649][ T29] audit: type=1326 audit(2000000046.980:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.1.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 295.146048][ T29] audit: type=1326 audit(2000000046.980:16487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.1.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 295.169759][ T29] audit: type=1326 audit(2000000046.980:16488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.1.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 295.193398][ T29] audit: type=1326 audit(2000000046.980:16489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.1.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 295.193433][ T29] audit: type=1326 audit(2000000046.980:16490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.1.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f0761479eb9 code=0x7ffc0000 [ 295.202826][T16900] loop0: detected capacity change from 0 to 1024 [ 295.276360][T16900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.311620][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.373736][T16952] tipc: Started in network mode [ 296.380078][T16952] tipc: Node identity 1, cluster identity 4711 [ 296.386336][T16952] tipc: Node number set to 1 [ 296.540131][T16950] syz.1.4893[16950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.540192][T16950] syz.1.4893[16950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.555154][ T3701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.632247][ T3701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.720879][ T3701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.794557][T16970] 9pnet_fd: Insufficient options for proto=fd [ 296.800511][ T3701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.842123][T16971] lo speed is unknown, defaulting to 1000 [ 296.920185][ T3701] bridge_slave_1: left allmulticast mode [ 296.926033][ T3701] bridge_slave_1: left promiscuous mode [ 296.931782][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.952059][ T3701] bridge_slave_0: left allmulticast mode [ 296.957807][ T3701] bridge_slave_0: left promiscuous mode [ 296.963645][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.094860][ T3701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.109646][ T3701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.124773][ T3701] bond0 (unregistering): Released all slaves [ 297.173209][T16971] chnl_net:caif_netlink_parms(): no params data found [ 297.211958][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.219331][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.227058][T16971] bridge_slave_0: entered allmulticast mode [ 297.234506][T16971] bridge_slave_0: entered promiscuous mode [ 297.247736][ T3701] hsr_slave_0: left promiscuous mode [ 297.253609][ T3701] hsr_slave_1: left promiscuous mode [ 297.261884][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.269364][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.280359][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.287864][ T3701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.296866][ T3701] batman_adv: batadv0: Interface deactivated: macsec1 [ 297.303726][ T3701] batman_adv: batadv0: Removing interface: macsec1 [ 297.313938][ T3701] dummy0: left promiscuous mode [ 297.318892][ T3701] veth1_macvtap: left promiscuous mode [ 297.324404][ T3701] veth0_macvtap: left promiscuous mode [ 297.329951][ T3701] veth1_vlan: left promiscuous mode [ 297.335223][ T3701] veth0_vlan: left promiscuous mode [ 297.444261][ T3701] team0 (unregistering): Port device team_slave_1 removed [ 297.454795][ T3701] team0 (unregistering): Port device team_slave_0 removed [ 297.506612][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.513847][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.526074][T16971] bridge_slave_1: entered allmulticast mode [ 297.532509][T16971] bridge_slave_1: entered promiscuous mode [ 297.557695][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.569460][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.601267][T16971] team0: Port device team_slave_0 added [ 297.613098][T16971] team0: Port device team_slave_1 added [ 297.664476][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.671527][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.697527][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.715657][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.722797][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.748890][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.783123][T16971] hsr_slave_0: entered promiscuous mode [ 297.796761][T16971] hsr_slave_1: entered promiscuous mode [ 297.804460][T16971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.826487][T16971] Cannot create hsr debugfs directory [ 298.138980][T16971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.149173][T16971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.159175][T16971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.168997][T16971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.238700][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.258014][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.280741][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 298.280758][ T29] audit: type=1400 audit(2000000050.150:16588): avc: denied { write } for pid=17047 comm="syz.1.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.308857][ T29] audit: type=1400 audit(2000000050.150:16589): avc: denied { connect } for pid=17047 comm="syz.1.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.330128][ T29] audit: type=1400 audit(2000000050.150:16590): avc: denied { name_connect } for pid=17047 comm="syz.1.4933" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 298.355195][ T29] audit: type=1400 audit(2000000050.230:16591): avc: denied { getopt } for pid=17047 comm="syz.1.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.377910][ T29] audit: type=1400 audit(2000000050.250:16592): avc: denied { setopt } for pid=17047 comm="syz.1.4933" lport=51100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 298.403147][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.410301][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.420603][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.427758][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.486886][ T29] audit: type=1400 audit(2000000050.350:16593): avc: denied { sys_module } for pid=16971 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 298.548546][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.678227][ T29] audit: type=1400 audit(2000000050.550:16594): avc: denied { create } for pid=17069 comm="syz.2.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.708183][ T29] audit: type=1400 audit(2000000050.570:16595): avc: denied { open } for pid=17073 comm="syz.3.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 298.727702][ T29] audit: type=1400 audit(2000000050.570:16596): avc: denied { kernel } for pid=17073 comm="syz.3.4938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 298.747371][ T29] audit: type=1400 audit(2000000050.580:16597): avc: denied { setopt } for pid=17069 comm="syz.2.4937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.810428][T16971] veth0_vlan: entered promiscuous mode [ 298.830473][T16971] veth1_vlan: entered promiscuous mode [ 298.865744][T16971] veth0_macvtap: entered promiscuous mode [ 298.880895][T16971] veth1_macvtap: entered promiscuous mode [ 298.893990][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.906081][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.917275][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.929160][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.940347][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.951982][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.963022][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.974596][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.986201][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.998267][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.011032][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.023486][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4939'. [ 299.035703][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.046311][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.057681][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.069485][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.080693][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.092663][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.103929][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.116150][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.127586][T16971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.139660][T16971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.153553][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.168109][T16971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.178293][T16971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.188586][T16971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.198701][T16971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.260439][T17097] syz.1.4947[17097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.260503][T17097] syz.1.4947[17097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.328718][T17107] lo speed is unknown, defaulting to 1000 [ 301.268583][T17117] loop0: detected capacity change from 0 to 512 [ 301.285121][T17117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.285831][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4956'. [ 301.325841][T17117] EXT4-fs (loop0): 1 truncate cleaned up [ 301.333868][T17117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.344918][T17121] syzkaller0: entered promiscuous mode [ 301.352791][T17121] syzkaller0: entered allmulticast mode [ 301.366221][T17125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4958'. [ 301.420068][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4958'. [ 301.438951][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.486056][T17138] loop0: detected capacity change from 0 to 1764 [ 301.554313][T17145] 9pnet_fd: Insufficient options for proto=fd [ 301.725392][T17176] syz.1.4980[17176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.725453][T17176] syz.1.4980[17176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.927167][T17188] netlink: 'syz.4.4985': attribute type 10 has an invalid length. [ 301.968954][T17188] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 302.069323][T17194] ebtables: ebtables: counters copy to user failed while replacing table [ 302.948415][T17231] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 303.225227][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5004'. [ 303.248063][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5004'. [ 303.290731][T17241] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 303.310542][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 303.310558][ T29] audit: type=1400 audit(2000000055.180:16689): avc: denied { getopt } for pid=17246 comm="syz.4.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 303.362284][ T29] audit: type=1326 audit(2000000055.220:16690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.363906][T17257] loop0: detected capacity change from 0 to 512 [ 303.388414][ T29] audit: type=1326 audit(2000000055.260:16691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.417794][ T29] audit: type=1326 audit(2000000055.260:16692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.442607][ T29] audit: type=1326 audit(2000000055.260:16693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.468117][ T29] audit: type=1326 audit(2000000055.320:16694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.480850][T17257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.493017][ T29] audit: type=1326 audit(2000000055.320:16695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.530789][ T29] audit: type=1326 audit(2000000055.320:16696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.556062][ T29] audit: type=1326 audit(2000000055.320:16697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.581290][ T29] audit: type=1326 audit(2000000055.320:16698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 303.609679][T17257] ext4 filesystem being mounted at /1095/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.662192][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.732654][T17276] loop0: detected capacity change from 0 to 1764 [ 303.765428][T17282] 9pnet_fd: Insufficient options for proto=fd [ 303.820664][T17285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.999866][T17301] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 304.013129][T17301] SELinux: failed to load policy [ 304.110841][T17309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.153241][T17311] 9pnet_fd: Insufficient options for proto=fd [ 304.219124][T17320] SELinux: policydb string does not match my string SE Linux [ 304.233851][T17320] SELinux: failed to load policy [ 304.605423][T17354] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 304.633299][T17360] syz_tun: refused to change device tx_queue_len [ 304.639968][T17360] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 304.988582][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5082'. [ 305.141095][T17418] program syz.2.5090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.555992][T17466] syz.2.5110[17466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.556083][T17466] syz.2.5110[17466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.652477][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 305.832234][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.841208][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.850063][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.858844][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.866240][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.875132][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.883924][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.892633][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x4 [ 305.901534][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.910197][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 305.919115][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.927936][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.935415][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.944226][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.953254][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.962114][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.970634][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.978066][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.985461][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 305.992985][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.001878][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.010756][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.020310][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.029188][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.038040][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.045469][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.054387][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.063130][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.071849][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.080997][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.089908][ T4243] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 306.099343][ T4243] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 306.935863][T17523] 9pnet: p9_errstr2errno: server reported unknown error õ’T‘]‹‘ŽéHº¬RFÙl [ 307.005659][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5138'. [ 307.243660][T17557] vhci_hcd: invalid port number 236 [ 307.250354][T17557] vhci_hcd: invalid port number 236 [ 307.250838][T17559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5152'. [ 307.264632][T17559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5152'. [ 307.281339][T17559] netlink: 'syz.2.5152': attribute type 10 has an invalid length. [ 307.292708][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.300050][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.337556][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.344679][T17559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.352375][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.359633][T17559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.387368][T17559] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 308.412337][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 308.412352][ T29] audit: type=1400 audit(2000000060.280:16966): avc: denied { mount } for pid=17586 comm="syz.3.5166" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 308.450880][T17587] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 308.471515][ T29] audit: type=1400 audit(2000000060.300:16967): avc: denied { lock } for pid=17589 comm="syz.0.5167" path="socket:[56525]" dev="sockfs" ino=56525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 308.507237][T17596] syz.3.5169[17596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.507371][T17596] syz.3.5169[17596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.512213][ T29] audit: type=1400 audit(2000000060.380:16968): avc: denied { unmount } for pid=16971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 308.573774][ T29] audit: type=1326 audit(2000000060.440:16969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.4.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0b1b9eb9 code=0x7ffc0000 [ 308.598960][ T29] audit: type=1326 audit(2000000060.440:16970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.4.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0b1b9eb9 code=0x7ffc0000 [ 308.642345][ T29] audit: type=1326 audit(2000000060.440:16971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.4.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f4e0b1b9eb9 code=0x7ffc0000 [ 308.668626][ T29] audit: type=1326 audit(2000000060.440:16972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.4.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0b1b9eb9 code=0x7ffc0000 [ 308.693404][ T29] audit: type=1326 audit(2000000060.500:16973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.2.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 308.719423][T17617] vlan2: entered promiscuous mode [ 308.719442][T17617] macvtap0: entered promiscuous mode [ 308.719598][T17617] vlan2: entered allmulticast mode [ 308.719639][T17617] macvtap0: entered allmulticast mode [ 308.719653][T17617] veth0_macvtap: entered allmulticast mode [ 308.736147][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5180'. [ 308.738421][ T29] audit: type=1326 audit(2000000060.500:16974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.2.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 308.784668][ T29] audit: type=1326 audit(2000000060.500:16975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17603 comm="syz.2.5174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 309.351577][T17672] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17672 comm=syz.1.5206 [ 309.474780][T17676] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5207'. [ 309.496721][T17675] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5207'. [ 310.089928][T17712] pim6reg1: entered allmulticast mode [ 310.160962][T17718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5226'. [ 310.340653][T17741] block device autoloading is deprecated and will be removed. [ 310.548316][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5244'. [ 310.576615][T17769] erspan0: entered promiscuous mode [ 310.583551][T17769] macvtap1: entered promiscuous mode [ 310.589050][T17769] macvtap1: entered allmulticast mode [ 310.594516][T17769] erspan0: entered allmulticast mode [ 310.660935][T17780] loop0: detected capacity change from 0 to 1024 [ 310.672658][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies. [ 310.684026][T17780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.695564][T17780] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 310.711471][T17780] System zones: 0-1, 3-36 [ 310.722563][T17780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.785277][T17796] lo speed is unknown, defaulting to 1000 [ 310.793612][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.823554][T17798] lo speed is unknown, defaulting to 1000 [ 310.881380][T17807] syz.0.5261[17807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.881477][T17807] syz.0.5261[17807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.930025][T17807] loop0: detected capacity change from 0 to 512 [ 310.981981][T17807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.000521][T17807] ext4 filesystem being mounted at /1119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.051115][ T3560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.090102][T17819] loop0: detected capacity change from 0 to 2048 [ 311.128188][T17819] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5266: bad orphan inode 8192 [ 311.143890][T17819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.227754][T17819] loop0: detected capacity change from 2048 to 2047 [ 311.250738][T17819] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5266: bg 0: block 16370: padding at end of block bitmap is not set [ 311.270382][T17819] EXT4-fs error (device loop0): ext4_discard_preallocations:5606: comm syz.0.5266: Error -117 reading block bitmap for 0 [ 311.315329][ T3560] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /1120/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=2048 fake=0 [ 311.372705][T17833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.421060][ T5100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.698366][T17841] lo speed is unknown, defaulting to 1000 [ 311.761656][T17841] chnl_net:caif_netlink_parms(): no params data found [ 312.040939][ T11] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 312.050526][ T11] macvlan2: left promiscuous mode [ 312.055570][ T11] team0: left promiscuous mode [ 312.060434][ T11] batadv1: left promiscuous mode [ 312.074069][ T11] bond0 (unregistering): Released all slaves [ 312.082943][ T11] bond1 (unregistering): Released all slaves [ 312.104090][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.111304][T17841] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.124737][T17841] bridge_slave_0: entered allmulticast mode [ 312.132669][T17841] bridge_slave_0: entered promiscuous mode [ 312.141362][T17841] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.149828][T17841] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.160263][T17841] bridge_slave_1: entered allmulticast mode [ 312.169446][T17841] bridge_slave_1: entered promiscuous mode [ 312.198796][T17841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.212888][T17841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.263142][ T11] hsr_slave_0: left promiscuous mode [ 312.281571][ T11] hsr_slave_1: left promiscuous mode [ 312.312026][ T11] team0 (unregistering): Port device batadv1 removed [ 312.478790][T17841] team0: Port device team_slave_0 added [ 312.497025][T17841] team0: Port device team_slave_1 added [ 312.556467][T17841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.563453][T17841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.589740][T17841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.633407][T17841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.641876][T17841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.669991][T17841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.722766][T17878] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5287'. [ 312.740201][T17841] hsr_slave_0: entered promiscuous mode [ 312.749264][T17841] hsr_slave_1: entered promiscuous mode [ 312.984822][T17896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5296'. [ 312.985377][ T11] IPVS: stop unused estimator thread 0... [ 313.090521][T17907] netlink: 'syz.2.5299': attribute type 1 has an invalid length. [ 313.108036][T17907] bond3: entered promiscuous mode [ 313.122283][T17907] team_slave_1: entered promiscuous mode [ 313.142606][T17907] team0: Port device team_slave_1 removed [ 313.165428][T17907] bond3: (slave team_slave_1): making interface the new active one [ 313.174562][T17907] bond3: (slave team_slave_1): Enslaving as an active interface with an up link [ 313.185685][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5299'. [ 313.194580][T17913] bond3: left promiscuous mode [ 313.221563][T17841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.232513][T17841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.243591][T17841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.253980][T17841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.281280][T17916] 9pnet_fd: Insufficient options for proto=fd [ 313.312129][T17841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.330396][T17841] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.341804][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.348943][ T3701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.366281][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.373485][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.475177][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 313.475195][ T29] audit: type=1400 audit(2000000065.340:17190): avc: denied { setopt } for pid=17928 comm="syz.2.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.484383][T17841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.537900][ T29] audit: type=1326 audit(2000000065.410:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.563105][ T29] audit: type=1326 audit(2000000065.410:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.598984][ T29] audit: type=1326 audit(2000000065.410:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.624111][ T29] audit: type=1326 audit(2000000065.410:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.649285][ T29] audit: type=1326 audit(2000000065.410:17195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.674209][ T29] audit: type=1326 audit(2000000065.410:17196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.699465][ T29] audit: type=1326 audit(2000000065.410:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.724730][ T29] audit: type=1326 audit(2000000065.410:17198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.739508][T17841] veth0_vlan: entered promiscuous mode [ 313.750003][ T29] audit: type=1326 audit(2000000065.410:17199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 313.821207][T17841] veth1_vlan: entered promiscuous mode [ 313.838119][T17841] veth0_macvtap: entered promiscuous mode [ 313.849741][T17841] veth1_macvtap: entered promiscuous mode [ 313.863913][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.875861][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.887148][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.899073][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.910293][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.922056][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.933387][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.945350][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.956992][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.969147][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.980451][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.992462][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.005539][T17841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.020328][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.032318][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.043895][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.055604][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.066861][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.078356][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.088319][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.098829][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.109950][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.121466][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.132679][T17841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.144325][T17841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.159294][T17841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.166703][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5315'. [ 314.206182][T17841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.215060][T17841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.223865][T17841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.232603][T17841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.352080][T17966] loop0: detected capacity change from 0 to 512 [ 314.383187][T17966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.404009][T17976] 9pnet_fd: Insufficient options for proto=fd [ 314.410516][T17966] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.452970][T17841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.958955][T18005] lo speed is unknown, defaulting to 1000 [ 315.238547][T18026] vhci_hcd: default hub control req: 0016 v0101 i0000 l0 [ 315.265037][T18028] loop0: detected capacity change from 0 to 764 [ 315.320293][T18033] rose0: refused to change device tx_queue_len [ 315.475741][T18038] loop0: detected capacity change from 0 to 1024 [ 315.500111][T18038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.513006][T18038] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.568160][T18038] support for the xor transformation has been removed. [ 315.602112][T18050] loop0: detected capacity change from 0 to 512 [ 315.610400][T18050] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 315.622126][T18050] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz.0.5354: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 315.643595][T18050] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5354: couldn't read orphan inode 15 (err -117) [ 315.668114][T18050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.681764][T18050] ext2 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.695570][T18050] EXT4-fs warning (device loop0): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 315.722252][T17841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.759015][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5357'. [ 316.373814][T18126] netlink: 'syz.4.5390': attribute type 1 has an invalid length. [ 316.674667][T18177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.684537][T18177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.775794][T18183] syz.4.5398[18183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.775855][T18183] syz.4.5398[18183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.247412][T18194] syz.2.5403[18194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.259203][T18194] syz.2.5403[18194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.683558][T18224] 9pnet_fd: Insufficient options for proto=fd [ 317.835093][T18245] Cannot find set identified by id 0 to match [ 317.961441][T18253] 9pnet_fd: Insufficient options for proto=fd [ 318.095022][T18272] syz.2.5440[18272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.095092][T18272] syz.2.5440[18272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.115787][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'. [ 318.136354][T18275] netlink: 'syz.4.5439': attribute type 15 has an invalid length. [ 318.218509][T18277] netlink: 'syz.3.5442': attribute type 1 has an invalid length. [ 318.446945][T18304] netlink: 2024 bytes leftover after parsing attributes in process `syz.3.5450'. [ 318.456118][T18304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5450'. [ 318.520703][T18307] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.5455'. [ 318.530088][T18307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5455'. [ 318.961440][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 318.961458][ T29] audit: type=1400 audit(2000000070.830:17405): avc: denied { mount } for pid=18314 comm="syz.4.5459" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 319.006433][ T29] audit: type=1400 audit(2000000070.870:17406): avc: denied { execmem } for pid=18316 comm="syz.4.5460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 319.169537][ T29] audit: type=1400 audit(2000000071.040:17407): avc: denied { create } for pid=18319 comm="syz.4.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.190520][ T29] audit: type=1400 audit(2000000071.040:17408): avc: denied { setopt } for pid=18319 comm="syz.4.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.211331][ T29] audit: type=1400 audit(2000000071.040:17409): avc: denied { bind } for pid=18319 comm="syz.4.5461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.232079][ T29] audit: type=1400 audit(2000000071.040:17410): avc: denied { name_bind } for pid=18319 comm="syz.4.5461" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 319.255541][ T29] audit: type=1400 audit(2000000071.040:17411): avc: denied { node_bind } for pid=18319 comm="syz.4.5461" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 319.278803][ T29] audit: type=1400 audit(2000000071.040:17412): avc: denied { write } for pid=18319 comm="syz.4.5461" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.301447][ T29] audit: type=1400 audit(2000000071.040:17413): avc: denied { connect } for pid=18319 comm="syz.4.5461" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 319.325253][ T29] audit: type=1400 audit(2000000071.040:17414): avc: denied { name_connect } for pid=18319 comm="syz.4.5461" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 319.522113][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.534334][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.654853][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5473'. [ 319.665610][T18350] netlink: 'syz.2.5473': attribute type 14 has an invalid length. [ 319.679286][T18350] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.687697][T18350] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.695937][T18350] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.704328][T18350] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.713876][T18350] vxlan0: entered promiscuous mode [ 319.724450][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.791799][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.843553][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.858497][T18352] lo speed is unknown, defaulting to 1000 [ 319.909014][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.937926][T18352] chnl_net:caif_netlink_parms(): no params data found [ 319.986356][T18352] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.993528][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.000888][T18352] bridge_slave_0: entered allmulticast mode [ 320.014276][T18352] bridge_slave_0: entered promiscuous mode [ 320.021181][T18352] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.028315][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.035553][T18352] bridge_slave_1: entered allmulticast mode [ 320.042247][T18352] bridge_slave_1: entered promiscuous mode [ 320.064368][ T11] bridge_slave_1: left allmulticast mode [ 320.071250][ T11] bridge_slave_1: left promiscuous mode [ 320.078223][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.081077][T18367] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 320.092898][T18367] vhci_hcd: invalid port number 23 [ 320.098933][ T11] bridge_slave_0: left allmulticast mode [ 320.104707][ T11] bridge_slave_0: left promiscuous mode [ 320.111716][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.260169][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.273737][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.284518][ T11] bond0 (unregistering): Released all slaves [ 320.306967][T18352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.341110][T18352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.350464][T18386] syzkaller1: entered promiscuous mode [ 320.356059][T18386] syzkaller1: entered allmulticast mode [ 320.381679][T18352] team0: Port device team_slave_0 added [ 320.411597][T18352] team0: Port device team_slave_1 added [ 320.423284][ T11] hsr_slave_0: left promiscuous mode [ 320.432908][ T11] hsr_slave_1: left promiscuous mode [ 320.456207][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.461571][T18392] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 320.465243][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.473443][T18392] vhci_hcd: invalid port number 23 [ 320.485571][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.494622][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.504839][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.512408][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.519863][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 320.527348][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.534765][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.542238][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.549648][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.557098][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.564499][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.571939][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x2 [ 320.579459][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.586874][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.594305][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.601826][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.609256][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.616673][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.624084][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.631659][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.639784][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.647239][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.654682][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.662116][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.669544][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.676967][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.684356][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.691753][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.699151][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.706649][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.714230][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.721640][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.729116][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.736675][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.744067][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.751516][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.758932][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.766466][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.773996][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.781465][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.789024][ T982] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 320.802059][ T982] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 320.808856][ T11] veth1_macvtap: left promiscuous mode [ 320.818552][ T11] veth0_macvtap: left promiscuous mode [ 320.824154][ T11] veth1_vlan: left promiscuous mode [ 320.830788][ T11] veth0_vlan: left promiscuous mode [ 320.848064][ T982] hid-generic 0000:0000:0000.000B: unknown main item tag 0x7 [ 320.856094][ T982] hid-generic 0000:0000:0000.000B: ignoring exceeding usage max [ 320.868486][ T982] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 320.877003][ T982] hid-generic 0000:0000:0000.000B: unknown main item tag 0x6 [ 320.884421][ T982] hid-generic 0000:0000:0000.000B: unknown main item tag 0xd [ 320.892398][ T982] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 321.084085][ T11] team0 (unregistering): Port device team_slave_1 removed [ 321.116085][ T11] team0 (unregistering): Port device team_slave_0 removed [ 321.139877][T18412] 9pnet_fd: Insufficient options for proto=fd [ 321.193563][T18352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.200609][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.226719][T18352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.248617][T18352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.255612][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.282746][T18352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.331427][T18429] 9pnet_fd: Insufficient options for proto=fd [ 321.341716][T18352] hsr_slave_0: entered promiscuous mode [ 321.348586][T18352] hsr_slave_1: entered promiscuous mode [ 321.535554][T18448] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 321.712667][T18352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.723179][T18352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.732237][T18352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.741368][T18352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.781093][T18352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.794958][T18352] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.805782][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.812904][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.826162][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.833277][ T3701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.909963][T18352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.964418][T18460] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5514'. [ 321.974747][T18460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5514'. [ 321.988887][T18460] netlink: 'syz.4.5514': attribute type 10 has an invalid length. [ 321.998571][T18460] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.005781][T18460] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.032961][T18460] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.040212][T18460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.047558][T18460] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.054740][T18460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.072783][T18460] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 322.099230][T18352] veth0_vlan: entered promiscuous mode [ 322.109660][T18352] veth1_vlan: entered promiscuous mode [ 322.129082][T18352] veth0_macvtap: entered promiscuous mode [ 322.140067][T18352] veth1_macvtap: entered promiscuous mode [ 322.160248][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.170865][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.182212][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.194245][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.205506][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.217475][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.228633][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.240462][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.251606][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.263508][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.274686][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.286461][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.299159][T18352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.313232][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.324856][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.335829][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.347710][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.357586][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.369222][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.380140][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.391727][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.402686][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.414234][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.425173][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.436794][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.472446][T18352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.489026][T18352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.497832][T18352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.506667][T18352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.515438][T18352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.607039][T18482] syz.3.5533[18482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.607178][T18482] syz.3.5533[18482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.741764][T18502] loop0: detected capacity change from 0 to 1024 [ 322.878600][T18520] syz.0.5540[18520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.878676][T18520] syz.0.5540[18520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.044989][T18568] 9pnet_fd: Insufficient options for proto=fd [ 324.111699][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5561'. [ 324.448289][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 324.448305][ T29] audit: type=1400 audit(2000000076.320:17744): avc: denied { getopt } for pid=18584 comm="syz.0.5566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.659867][ T29] audit: type=1400 audit(2000000076.530:17745): avc: denied { create } for pid=18603 comm="syz.0.5578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.680170][T18606] syzkaller0: entered promiscuous mode [ 324.686802][T18604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5578'. [ 324.708078][ T29] audit: type=1400 audit(2000000076.530:17746): avc: denied { relabelfrom } for pid=18605 comm="syz.3.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 324.729487][ T29] audit: type=1400 audit(2000000076.530:17747): avc: denied { relabelto } for pid=18605 comm="syz.3.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 324.853285][ T29] audit: type=1400 audit(2000000076.710:17748): avc: denied { name_connect } for pid=18607 comm="syz.4.5580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 324.873893][ T29] audit: type=1400 audit(2000000076.730:17749): avc: denied { name_bind } for pid=18609 comm="syz.0.5581" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 324.972270][ T29] audit: type=1326 audit(2000000076.840:17750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18621 comm="syz.3.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 325.000589][ T29] audit: type=1326 audit(2000000076.840:17751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18621 comm="syz.3.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 325.025822][ T29] audit: type=1326 audit(2000000076.870:17752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18621 comm="syz.3.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 325.049456][ T29] audit: type=1326 audit(2000000076.870:17753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18621 comm="syz.3.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a85749eb9 code=0x7ffc0000 [ 325.816031][T18649] 9pnet: p9_errstr2errno: server reported unknown error Í00000000000000000003 [ 326.094435][T18673] loop0: detected capacity change from 0 to 1024 [ 326.111731][T18673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.144991][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.176105][T18682] delete_channel: no stack [ 326.361161][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5620'. [ 326.645857][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5636'. [ 326.780930][T18756] loop0: detected capacity change from 0 to 1024 [ 326.813725][T18756] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.5653: bad orphan inode 1536 [ 326.835090][T18756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.875526][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.932419][T18766] netlink: 'syz.4.5646': attribute type 1 has an invalid length. [ 326.963672][T18766] bond2: entered promiscuous mode [ 326.979648][T18766] team_slave_1: entered promiscuous mode [ 327.019352][T18766] team0: Port device team_slave_1 removed [ 327.032595][T18766] bond2: (slave team_slave_1): making interface the new active one [ 327.042951][T18766] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 327.063375][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5646'. [ 327.073761][T18766] bond2: left promiscuous mode [ 327.088503][T18778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5654'. [ 327.097853][T18778] unsupported nlmsg_type 40 [ 327.178813][T18789] netlink: 'syz.0.5659': attribute type 1 has an invalid length. [ 327.186661][T18789] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5659'. [ 327.280766][T18797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5663'. [ 327.316165][T18803] syz.4.5665[18803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.316224][T18803] syz.4.5665[18803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.346299][T18805] delete_channel: no stack [ 327.444279][T18813] 9pnet: p9_errstr2errno: server reported unknown error Í00000000000000000003 [ 327.471735][T18815] netlink: 'syz.0.5670': attribute type 1 has an invalid length. [ 327.485295][T18815] bond1: entered promiscuous mode [ 327.506149][T18815] team_slave_1: entered promiscuous mode [ 327.531806][T18815] team0: Port device team_slave_1 removed [ 327.540557][T18815] bond1: (slave team_slave_1): making interface the new active one [ 327.549959][T18815] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 327.560641][T18822] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5673'. [ 327.570930][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5670'. [ 327.581079][T18815] bond1: left promiscuous mode [ 327.590029][T18824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.628406][T18828] loop0: detected capacity change from 0 to 512 [ 327.638151][T18830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5677'. [ 327.649211][T18828] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 327.660313][T18828] EXT4-fs (loop0): invalid journal inode [ 327.666009][T18828] EXT4-fs (loop0): can't get journal size [ 327.681986][T18828] EXT4-fs (loop0): 1 truncate cleaned up [ 327.689456][T18828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.712408][T18837] delete_channel: no stack [ 327.725989][T18352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.758127][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5683'. [ 327.912920][T18859] loop0: detected capacity change from 0 to 128 [ 327.922883][T18859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.937865][T18859] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.997631][T18859] loop0: detected capacity change from 128 to 0 [ 328.004739][T18859] syz.0.5689: attempt to access beyond end of device [ 328.004739][T18859] loop0: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 328.018460][T18859] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.0.5689: error -5 reading directory block [ 328.041298][T18352] syz-executor: attempt to access beyond end of device [ 328.041298][T18352] loop0: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 328.056032][T18352] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 328.073751][T18864] netlink: 'syz.1.5692': attribute type 1 has an invalid length. [ 328.082771][T18864] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5692'. [ 328.093096][T18352] syz-executor: attempt to access beyond end of device [ 328.093096][T18352] loop0: rw=524288, sector=72, nr_sectors = 2 limit=0 [ 328.117398][T18352] syz-executor: attempt to access beyond end of device [ 328.117398][T18352] loop0: rw=12288, sector=70, nr_sectors = 2 limit=0 [ 328.131072][T18352] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #2: block 35: comm syz-executor: unable to read itable block [ 328.144472][T18352] syz-executor: attempt to access beyond end of device [ 328.144472][T18352] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 328.157969][T18352] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 328.169501][T18352] EXT4-fs (loop0): I/O error while writing superblock [ 328.176271][T18352] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: IO failure [ 328.185109][T18352] syz-executor: attempt to access beyond end of device [ 328.185109][T18352] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 328.198567][T18352] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 328.206861][T18352] EXT4-fs (loop0): I/O error while writing superblock [ 328.213625][T18352] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 328.225340][T18352] syz-executor: attempt to access beyond end of device [ 328.225340][T18352] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 328.238825][T18352] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 328.247172][T18352] EXT4-fs (loop0): I/O error while writing superblock [ 328.253991][ T1673] kworker/u8:6: attempt to access beyond end of device [ 328.253991][ T1673] loop0: rw=524288, sector=70, nr_sectors = 2 limit=0 [ 328.277720][ T1673] kworker/u8:6: attempt to access beyond end of device [ 328.277720][ T1673] loop0: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 328.302012][ T1673] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #12: block 36: comm kworker/u8:6: unable to read itable block [ 328.322889][ T1673] kworker/u8:6: attempt to access beyond end of device [ 328.322889][ T1673] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 328.337252][T18871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5694'. [ 328.348146][ T1673] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 328.402031][ T1673] EXT4-fs (loop0): I/O error while writing superblock [ 328.415267][ T1673] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4559: inode #2: block 35: comm kworker/u8:6: unable to read itable block [ 328.459852][ T1673] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 328.483514][ T1673] EXT4-fs (loop0): I/O error while writing superblock [ 328.518317][T18352] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.537699][T18352] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 328.550044][T18352] EXT4-fs (loop0): I/O error while writing superblock [ 328.743744][T18904] syz.1.5718[18904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.743824][T18904] syz.1.5718[18904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.751476][ T1673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.839908][T18910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.866023][ T1673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.921596][ T1673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.992490][ T1673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.020424][T18912] lo speed is unknown, defaulting to 1000 [ 329.097972][ T1673] bridge_slave_1: left allmulticast mode [ 329.103672][ T1673] bridge_slave_1: left promiscuous mode [ 329.109425][ T1673] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.118664][T18915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.128303][T18915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.138121][ T1673] bridge_slave_0: left allmulticast mode [ 329.143777][ T1673] bridge_slave_0: left promiscuous mode [ 329.150622][ T1673] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.251074][ T1673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.262124][ T1673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.272569][ T1673] bond0 (unregistering): Released all slaves [ 329.281819][ T1673] bond1 (unregistering): (slave team_slave_1): Releasing active interface [ 329.292219][ T1673] bond1 (unregistering): Released all slaves [ 329.309054][T18912] chnl_net:caif_netlink_parms(): no params data found [ 329.346008][T18912] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.353192][T18912] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.361596][T18912] bridge_slave_0: entered allmulticast mode [ 329.369830][T18912] bridge_slave_0: entered promiscuous mode [ 329.376980][T18912] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.384095][T18912] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.391409][T18912] bridge_slave_1: entered allmulticast mode [ 329.398280][T18912] bridge_slave_1: entered promiscuous mode [ 329.416975][T18912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.429600][T18912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.440850][ T1673] hsr_slave_0: left promiscuous mode [ 329.448309][ T1673] hsr_slave_1: left promiscuous mode [ 329.454284][ T1673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.463064][ T1673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.472915][ T1673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.481537][ T1673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.492817][ T1673] veth1_macvtap: left promiscuous mode [ 329.499778][ T1673] veth0_macvtap: left promiscuous mode [ 329.505446][ T1673] veth1_vlan: left promiscuous mode [ 329.512216][ T1673] veth0_vlan: left promiscuous mode [ 329.611228][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 329.611243][ T29] audit: type=1326 audit(2000000081.480:17904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.643574][ T29] audit: type=1326 audit(2000000081.490:17905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.667908][ T29] audit: type=1326 audit(2000000081.530:17906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.691562][ T29] audit: type=1326 audit(2000000081.530:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.715329][ T29] audit: type=1326 audit(2000000081.530:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.739196][ T29] audit: type=1326 audit(2000000081.540:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.762884][ T29] audit: type=1326 audit(2000000081.540:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.787135][ T29] audit: type=1326 audit(2000000081.540:17911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.810822][ T29] audit: type=1326 audit(2000000081.590:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.834427][ T29] audit: type=1326 audit(2000000081.590:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18939 comm="syz.2.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15a949eb9 code=0x7ffc0000 [ 329.862131][ T1673] team0 (unregistering): Port device team_slave_0 removed [ 329.970577][T18912] team0: Port device team_slave_0 added [ 329.986147][T18912] team0: Port device team_slave_1 added [ 330.015681][T18912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.022922][T18912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.048907][T18912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.061018][T18912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.068033][T18912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.094041][T18912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.130011][T18912] hsr_slave_0: entered promiscuous mode [ 330.136258][T18912] hsr_slave_1: entered promiscuous mode [ 330.355419][T18984] rose0: refused to change device tx_queue_len [ 330.513410][T18912] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.523413][T18912] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.533327][T18912] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.543407][T18912] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.599766][T18912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.615749][T18912] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.628120][ T1673] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.635220][ T1673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.655231][ T1673] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.662461][ T1673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.771423][T18912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.923330][T19023] lo speed is unknown, defaulting to 1000 [ 330.942086][T18912] veth0_vlan: entered promiscuous mode [ 330.990057][T18912] veth1_vlan: entered promiscuous mode [ 331.033024][T18912] veth0_macvtap: entered promiscuous mode [ 331.041534][T18912] veth1_macvtap: entered promiscuous mode [ 331.065745][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.076459][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.086300][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.097076][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.106911][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.117434][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.127390][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.138031][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.147906][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.158394][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.168255][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.178823][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.200687][T18912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.248397][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.259035][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.268947][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.279594][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.289682][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.300249][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.310143][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.320610][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.330444][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.340891][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.350841][T18912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.361298][T18912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.373883][T18912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.386992][T18912] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.395895][T18912] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.404798][T18912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.413556][T18912] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.497728][T19053] syzkaller0: entered promiscuous mode [ 331.503229][T19053] syzkaller0: entered allmulticast mode [ 331.589804][T19066] lo speed is unknown, defaulting to 1000 [ 331.775974][T19097] syz.2.5781[19097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.776073][T19097] syz.2.5781[19097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.822648][T19102] openvswitch: netlink: IPv4 tun info is not correct [ 331.861454][T19104] loop0: detected capacity change from 0 to 1024 [ 331.893923][T19106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19106 comm=syz.1.5786 [ 331.921015][T19104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.049980][T18912] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.175346][T19133] syzkaller0: entered promiscuous mode [ 332.182345][T19133] syzkaller0: entered allmulticast mode [ 332.204331][T19148] loop0: detected capacity change from 0 to 128 [ 332.220961][T19148] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.234395][T19148] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.342365][T18912] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.454121][T19177] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 332.463094][T19177] __nla_validate_parse: 4 callbacks suppressed [ 332.463105][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5817'. [ 332.485643][T19179] Â: renamed from pim6reg1 [ 332.490173][T19173] 9pnet_fd: Insufficient options for proto=fd [ 333.295261][T19184] syz.2.5821 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 333.307711][T19184] CPU: 0 UID: 0 PID: 19184 Comm: syz.2.5821 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 333.318522][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 333.328617][T19184] Call Trace: [ 333.331951][T19184] [ 333.334881][T19184] dump_stack_lvl+0xf2/0x150 [ 333.339571][T19184] dump_stack+0x15/0x20 [ 333.343799][T19184] dump_header+0x83/0x2d0 [ 333.348169][T19184] oom_kill_process+0x341/0x4c0 [ 333.353143][T19184] out_of_memory+0x9af/0xbe0 [ 333.357788][T19184] ? __rcu_read_unlock+0x4e/0x70 [ 333.358539][T19201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.362771][T19184] mem_cgroup_out_of_memory+0x13e/0x190 [ 333.362814][T19184] try_charge_memcg+0x51b/0x810 [ 333.381590][T19184] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 333.387709][T19184] __read_swap_cache_async+0x2b7/0x520 [ 333.393186][T19184] swap_cluster_readahead+0x276/0x3f0 [ 333.398590][T19184] swapin_readahead+0xe4/0x760 [ 333.403486][T19184] ? __filemap_get_folio+0x420/0x5b0 [ 333.408788][T19184] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 333.414435][T19184] ? swap_cache_get_folio+0x77/0x210 [ 333.419800][T19184] do_swap_page+0x3da/0x1ef0 [ 333.424596][T19184] ? cgroup_rstat_updated+0x99/0x550 [ 333.429904][T19184] ? __rcu_read_lock+0x36/0x50 [ 333.434694][T19184] ? pte_offset_map_nolock+0x124/0x1d0 [ 333.440155][T19184] handle_mm_fault+0x8cb/0x2a30 [ 333.445025][T19184] exc_page_fault+0x3b9/0x650 [ 333.449852][T19184] asm_exc_page_fault+0x26/0x30 [ 333.454760][T19184] RIP: 0033:0x7fa15a81d988 [ 333.459177][T19184] Code: 31 d2 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 18 a1 2c 00 00 0f 8e 99 fd ff ff e8 31 e5 fe ff 49 39 c4 72 64 0f 1f 40 00 <69> 3d 06 7d df 00 e8 03 00 00 48 8d 1d e7 85 2c 00 e8 72 c4 12 00 [ 333.478882][T19184] RSP: 002b:00007ffdefb81900 EFLAGS: 00010212 [ 333.485024][T19184] RAX: 00000000000515cc RBX: 00007fa15aae7a80 RCX: 00000000000514c8 [ 333.493001][T19184] RDX: 0000000000000104 RSI: 00007ffdefb818e0 RDI: 0000000000000001 [ 333.501046][T19184] RBP: 00007fa15aae7a80 R08: 000000000f8e2c4f R09: 7fffffffffffffff [ 333.509039][T19184] R10: 00007fa15b61f0b8 R11: 00007fa15b61f080 R12: 0000000000051648 [ 333.517083][T19184] R13: 00007ffdefb81a00 R14: 0000000000000fd2 R15: ffffffffffffffff [ 333.525166][T19184] [ 333.528308][T19201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.529735][T19184] memory: usage 307200kB, limit 307200kB, failcnt 124 [ 333.544023][T19184] memory+swap: usage 307752kB, limit 9007199254740988kB, failcnt 0 [ 333.553173][T19184] kmem: usage 307132kB, limit 9007199254740988kB, failcnt 0 [ 333.561704][T19184] Memory cgroup stats for /syz2: [ 333.562953][T19184] cache 57344 [ 333.572464][T19184] rss 4096 [ 333.575500][T19184] shmem 0 [ 333.579822][T19184] mapped_file 57344 [ 333.583623][T19184] dirty 57344 [ 333.588009][T19184] writeback 4096 [ 333.591632][T19184] workingset_refault_anon 3 [ 333.596121][T19184] workingset_refault_file 0 [ 333.601857][T19184] swap 565248 [ 333.605155][T19184] swapcached 12288 [ 333.610246][T19184] pgpgin 305269 [ 333.613709][T19184] pgpgout 305252 [ 333.618390][T19184] pgfault 414089 [ 333.621952][T19184] pgmajfault 7 [ 333.625337][T19184] inactive_anon 0 [ 333.630123][T19184] active_anon 12288 [ 333.634027][T19184] inactive_file 0 [ 333.638779][T19184] active_file 57344 [ 333.642607][T19184] unevictable 0 [ 333.646056][T19184] hierarchical_memory_limit 314572800 [ 333.652788][T19184] hierarchical_memsw_limit 9223372036854771712 [ 333.660207][T19184] total_cache 57344 [ 333.664034][T19184] total_rss 4096 [ 333.668970][T19184] total_shmem 0 [ 333.672556][T19184] total_mapped_file 57344 [ 333.678161][T19184] total_dirty 57344 [ 333.681963][T19184] total_writeback 4096 [ 333.686041][T19184] total_workingset_refault_anon 3 [ 333.692160][T19184] total_workingset_refault_file 0 [ 333.698588][T19184] total_swap 565248 [ 333.702479][T19184] total_swapcached 12288 [ 333.707812][T19184] total_pgpgin 305269 [ 333.711846][T19184] total_pgpgout 305252 [ 333.715938][T19184] total_pgfault 414089 [ 333.721233][T19184] total_pgmajfault 7 [ 333.725142][T19184] total_inactive_anon 0 [ 333.730403][T19184] total_active_anon 12288 [ 333.734726][T19184] total_inactive_file 0 [ 333.739867][T19184] total_active_file 57344 [ 333.744276][T19184] total_unevictable 0 [ 333.748265][T19184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3901,pid=14593,uid=0 [ 333.763215][T19184] Memory cgroup out of memory: Killed process 14595 (syz.2.3901) total-vm:86856kB, anon-rss:520kB, file-rss:16180kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 333.875962][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5829'. [ 333.893464][T19209] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.903694][T19209] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.913933][T19209] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.924082][T19209] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.942317][T19185] ================================================================== [ 333.949090][T19209] vxlan0: entered promiscuous mode [ 333.950417][T19185] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 333.962892][T19185] [ 333.965227][T19185] read to 0xffff888115048e68 of 4 bytes by task 19184 on cpu 0: [ 333.972872][T19185] mem_cgroup_iter+0x93/0x380 [ 333.977588][T19185] shrink_node+0x74a/0x1d40 [ 333.982112][T19185] do_try_to_free_pages+0x3c6/0xc50 [ 333.987344][T19185] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 333.993276][T19185] try_charge_memcg+0x2bc/0x810 [ 333.998149][T19185] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 334.004326][T19185] __read_swap_cache_async+0x2b7/0x520 [ 334.009804][T19185] swap_cluster_readahead+0x276/0x3f0 [ 334.015204][T19185] swapin_readahead+0xe4/0x760 [ 334.019992][T19185] do_swap_page+0x3da/0x1ef0 [ 334.024599][T19185] handle_mm_fault+0x8cb/0x2a30 [ 334.029469][T19185] exc_page_fault+0x3b9/0x650 [ 334.034185][T19185] asm_exc_page_fault+0x26/0x30 [ 334.039070][T19185] [ 334.041402][T19185] read-write to 0xffff888115048e68 of 4 bytes by task 19185 on cpu 1: [ 334.049576][T19185] mem_cgroup_iter+0x28e/0x380 [ 334.054360][T19185] shrink_node+0x74a/0x1d40 [ 334.058878][T19185] do_try_to_free_pages+0x3c6/0xc50 [ 334.064103][T19185] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 334.070023][T19185] try_charge_memcg+0x2bc/0x810 [ 334.074884][T19185] obj_cgroup_charge_pages+0xbd/0x1a0 [ 334.080273][T19185] __memcg_kmem_charge_page+0x9d/0x170 [ 334.085745][T19185] __alloc_pages_noprof+0x1bc/0x360 [ 334.090975][T19185] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 334.096362][T19185] alloc_pages_noprof+0xe1/0x100 [ 334.101324][T19185] __vmalloc_node_range_noprof+0x736/0xec0 [ 334.107414][T19185] __kvmalloc_node_noprof+0x121/0x170 [ 334.112818][T19185] ip_set_alloc+0x1f/0x30 [ 334.117169][T19185] hash_netiface_create+0x273/0x730 [ 334.122393][T19185] ip_set_create+0x359/0x8a0 [ 334.127016][T19185] nfnetlink_rcv_msg+0x4a9/0x570 [ 334.131983][T19185] netlink_rcv_skb+0x12c/0x230 [ 334.136767][T19185] nfnetlink_rcv+0x16c/0x15e0 [ 334.141469][T19185] netlink_unicast+0x599/0x670 [ 334.146252][T19185] netlink_sendmsg+0x5cc/0x6e0 [ 334.151038][T19185] __sock_sendmsg+0x140/0x180 [ 334.155749][T19185] ____sys_sendmsg+0x312/0x410 [ 334.160535][T19185] __sys_sendmsg+0x1e9/0x280 [ 334.165156][T19185] __x64_sys_sendmsg+0x46/0x50 [ 334.170022][T19185] x64_sys_call+0x2689/0x2d60 [ 334.174721][T19185] do_syscall_64+0xc9/0x1c0 [ 334.179241][T19185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.185155][T19185] [ 334.187489][T19185] value changed: 0x00000964 -> 0x00000968 [ 334.193215][T19185] [ 334.195543][T19185] Reported by Kernel Concurrency Sanitizer on: [ 334.201700][T19185] CPU: 1 UID: 0 PID: 19185 Comm: syz.2.5821 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 334.212481][T19185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 334.222547][T19185] ================================================================== [ 334.450615][T19184] ================================================================== [ 334.458740][T19184] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 334.466125][T19184] [ 334.468449][T19184] read to 0xffff888115048e68 of 4 bytes by task 19185 on cpu 1: [ 334.476258][T19184] mem_cgroup_iter+0xba/0x380 [ 334.480955][T19184] shrink_node+0x458/0x1d40 [ 334.485472][T19184] do_try_to_free_pages+0x3c6/0xc50 [ 334.490703][T19184] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 334.496626][T19184] try_charge_memcg+0x2bc/0x810 [ 334.501494][T19184] obj_cgroup_charge_pages+0xbd/0x1a0 [ 334.506885][T19184] __memcg_kmem_charge_page+0x9d/0x170 [ 334.512361][T19184] __alloc_pages_noprof+0x1bc/0x360 [ 334.517587][T19184] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 334.522985][T19184] alloc_pages_noprof+0xe1/0x100 [ 334.527952][T19184] __vmalloc_node_range_noprof+0x736/0xec0 [ 334.533774][T19184] __kvmalloc_node_noprof+0x121/0x170 [ 334.539158][T19184] ip_set_alloc+0x1f/0x30 [ 334.543503][T19184] hash_netiface_create+0x273/0x730 [ 334.548723][T19184] ip_set_create+0x359/0x8a0 [ 334.553339][T19184] nfnetlink_rcv_msg+0x4a9/0x570 [ 334.558296][T19184] netlink_rcv_skb+0x12c/0x230 [ 334.563095][T19184] nfnetlink_rcv+0x16c/0x15e0 [ 334.567800][T19184] netlink_unicast+0x599/0x670 [ 334.572580][T19184] netlink_sendmsg+0x5cc/0x6e0 [ 334.577371][T19184] __sock_sendmsg+0x140/0x180 [ 334.582170][T19184] ____sys_sendmsg+0x312/0x410 [ 334.586960][T19184] __sys_sendmsg+0x1e9/0x280 [ 334.591574][T19184] __x64_sys_sendmsg+0x46/0x50 [ 334.596356][T19184] x64_sys_call+0x2689/0x2d60 [ 334.601054][T19184] do_syscall_64+0xc9/0x1c0 [ 334.605590][T19184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.611529][T19184] [ 334.613859][T19184] read-write to 0xffff888115048e68 of 4 bytes by task 19184 on cpu 0: [ 334.622013][T19184] mem_cgroup_iter+0x28e/0x380 [ 334.626791][T19184] shrink_node+0x74a/0x1d40 [ 334.631312][T19184] do_try_to_free_pages+0x3c6/0xc50 [ 334.636533][T19184] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 334.642448][T19184] try_charge_memcg+0x2bc/0x810 [ 334.647317][T19184] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 334.653506][T19184] __read_swap_cache_async+0x2b7/0x520 [ 334.658997][T19184] swap_cluster_readahead+0x276/0x3f0 [ 334.664410][T19184] swapin_readahead+0xe4/0x760 [ 334.669217][T19184] do_swap_page+0x3da/0x1ef0 [ 334.673830][T19184] handle_mm_fault+0x8cb/0x2a30 [ 334.678717][T19184] exc_page_fault+0x3b9/0x650 [ 334.683416][T19184] asm_exc_page_fault+0x26/0x30 [ 334.688299][T19184] [ 334.690624][T19184] value changed: 0x00001adc -> 0x00001add [ 334.696348][T19184] [ 334.698678][T19184] Reported by Kernel Concurrency Sanitizer on: [ 334.704843][T19184] CPU: 0 UID: 0 PID: 19184 Comm: syz.2.5821 Not tainted 6.11.0-rc5-syzkaller-00310-ge8784b0aef62 #0 [ 334.715617][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 334.725688][T19184] ================================================================== [ 335.790526][T19185] syz.2.5821 (19185) used greatest stack depth: 7528 bytes left [ 335.859971][ T30] oom_reaper: reaped process 14595 (syz.2.3901), now anon-rss:0kB, file-rss:15052kB, shmem-rss:0kB