last executing test programs: 10.453269094s ago: executing program 2 (id=2097): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10.429894856s ago: executing program 2 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) dup3(r3, r2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) 10.361573272s ago: executing program 2 (id=2100): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x6c, r3, 0x213, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x83b1, 0x0) 8.702276094s ago: executing program 2 (id=2128): ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 8.488626904s ago: executing program 2 (id=2131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffd, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000140)=' ', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x42}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 4.007853673s ago: executing program 3 (id=2122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0xee01) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}}], 0x1, 0x4000804) 2.349899625s ago: executing program 1 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 2.310470668s ago: executing program 1 (id=2123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x7ee9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8010000100001000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a8}}, 0x0) syz_open_dev$usbmon(0x0, 0x6, 0x80) 2.310127108s ago: executing program 3 (id=2124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x100000, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3}}, 0xe8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 2.247068665s ago: executing program 1 (id=2125): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x0) syz_usbip_server_init(0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'raw\x00', 0x7003, [0x0, 0x0, 0x8, 0x4]}, &(0x7f0000000100)=0x54) 2.246532565s ago: executing program 3 (id=2140): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.151450245s ago: executing program 1 (id=2130): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x6c, r3, 0x213, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}]}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x83b1, 0x0) 1.09029621s ago: executing program 3 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 1.021468876s ago: executing program 3 (id=2139): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x2040400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 653.83012ms ago: executing program 0 (id=2153): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x16, 0x0, @void}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 633.840352ms ago: executing program 0 (id=2154): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 594.310675ms ago: executing program 4 (id=2155): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r2, r3) close_range(r0, 0xffffffffffffffff, 0x0) 575.439497ms ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff64000200475400f6a13bb1000000080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 557.447909ms ago: executing program 0 (id=2157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000980)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 525.194131ms ago: executing program 4 (id=2158): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) 519.105512ms ago: executing program 0 (id=2159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7b, 0x12, r0, 0x2000000) 481.614475ms ago: executing program 4 (id=2160): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 314.159981ms ago: executing program 0 (id=2161): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0xc, 0x1, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) 307.295082ms ago: executing program 4 (id=2162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b000014000780080001000e00000008000200c00000001300010062726f6164636173742d6c696e6b"], 0x1ac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800c001a80080002800400018006002200c630000008001c00", @ANYRES32], 0x60}}, 0x0) 248.422177ms ago: executing program 1 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000900), 0x103, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r5, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 166.768504ms ago: executing program 3 (id=2164): ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) 107.58481ms ago: executing program 1 (id=2165): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 107.32837ms ago: executing program 4 (id=2166): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) listen(r1, 0x9) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close(r1) 106.95933ms ago: executing program 0 (id=2174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b000014000780080001000e00000008000200c00000001300010062726f6164636173742d6c696e6b"], 0x1ac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b0001006272696467650000040002800c001a80080002800400018006002200c630000008001c00", @ANYRES32], 0x60}}, 0x0) 0s ago: executing program 2 (id=2136): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ] type 2 family 0 port 6081 - 0 [ 66.611102][ T5372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.646728][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.671216][ T5385] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.681535][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.688789][ T1681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.712996][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.720108][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.734256][ T5375] veth0_vlan: entered promiscuous mode [ 66.754048][ T5375] veth1_vlan: entered promiscuous mode [ 66.760898][ T5524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.778'. [ 66.772409][ T5524] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.780783][ T5524] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.789096][ T5524] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.797588][ T5524] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.807133][ T5524] vxlan0: entered promiscuous mode [ 66.834407][ T5528] netlink: 176 bytes leftover after parsing attributes in process `syz.1.773'. [ 66.851251][ T5375] veth0_macvtap: entered promiscuous mode [ 66.866795][ T5375] veth1_macvtap: entered promiscuous mode [ 66.883545][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.894229][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.904143][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.914807][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.924748][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.935285][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.945270][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.955947][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.967427][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.981096][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.991702][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.001559][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.012072][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.021911][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.032386][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.042231][ T5375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.052801][ T5375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.064326][ T5375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.073415][ T5375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.082260][ T5375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.091008][ T5375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.099755][ T5375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.118100][ T5385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.186191][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.193752][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.201379][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.208911][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.216588][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.220923][ T5385] veth0_vlan: entered promiscuous mode [ 67.224117][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.236449][ T5385] veth1_vlan: entered promiscuous mode [ 67.236910][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.249958][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.257374][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.259464][ T5385] veth0_macvtap: entered promiscuous mode [ 67.264840][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.276402][ T5385] veth1_macvtap: entered promiscuous mode [ 67.278523][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.291385][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.291726][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.302270][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.309589][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.319415][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.326771][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.337218][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.337236][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.344774][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.354557][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.354579][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.364990][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.365093][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.372410][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.372425][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.382325][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.392737][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.400130][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.410435][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.417385][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.429381][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.435171][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.445067][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.452532][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.452561][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.459757][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.467210][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.477614][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.485021][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.494998][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.502406][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.509862][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.520404][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.527730][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.537547][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.544905][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.544919][ T5385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.544959][ T5385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.583233][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.590766][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.626049][ T5385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.628244][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.628271][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.628293][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.628314][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.635557][ T5385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.642914][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.642937][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.642958][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.651698][ T5385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.659065][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.666408][ T5385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.673795][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.745415][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.752864][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.760275][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.767735][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.775194][ T3341] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.786539][ T3341] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.011552][ T5581] syz.4.792[5581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.011693][ T5581] syz.4.792[5581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.047882][ T5581] syz.4.792[5581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.093342][ T5588] syz.0.805[5588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.145701][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 68.158735][ T5593] block device autoloading is deprecated and will be removed. [ 68.186276][ T5591] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.195109][ T5591] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.203989][ T5591] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.212980][ T5591] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.225117][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.225363][ T5591] vxlan0: entered promiscuous mode [ 68.232766][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.245164][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.252777][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.260223][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.267775][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.275304][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.282820][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.290355][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.297897][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.305568][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.313111][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.320645][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.328295][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.335717][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.343160][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.350593][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.358078][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.365491][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.373127][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.380721][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.388219][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.395628][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.403108][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.410566][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.417995][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.425404][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.432835][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.440355][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.447789][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.455654][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.463100][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.471087][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.478512][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.485959][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.493411][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.501131][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.508603][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.516331][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.523859][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.531377][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.538866][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.546303][ T3340] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 68.555980][ T3340] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.813709][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 68.813727][ T29] audit: type=1326 audit(1727356351.046:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 68.846850][ T29] audit: type=1326 audit(1727356351.086:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 68.870457][ T29] audit: type=1326 audit(1727356351.086:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.2.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 68.952203][ T5632] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 68.984639][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 68.992247][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 68.999773][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.007175][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.014616][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.022080][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.029574][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.037032][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.044523][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.051946][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.059391][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.066831][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.074244][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.081656][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.089080][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.096485][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.103885][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.111308][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.118757][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.126196][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.133652][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.141236][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.148668][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.156128][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.163614][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.171092][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.178574][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.186058][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.193544][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.200997][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.208404][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.215826][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.223239][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.230662][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.238108][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.245563][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.253023][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.260503][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.268021][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.275430][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.282956][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.290382][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.297864][ T5275] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 69.307738][ T5275] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 69.328950][ T5640] syzkaller0: entered promiscuous mode [ 69.334504][ T5640] syzkaller0: entered allmulticast mode [ 69.437538][ T29] audit: type=1326 audit(1727356351.666:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 69.462255][ T29] audit: type=1326 audit(1727356351.666:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 69.485645][ T29] audit: type=1326 audit(1727356351.666:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 69.509023][ T29] audit: type=1326 audit(1727356351.666:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 69.532365][ T29] audit: type=1326 audit(1727356351.666:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 69.654932][ T5660] loop1: detected capacity change from 0 to 1024 [ 69.716666][ T5660] EXT4-fs mount: 74 callbacks suppressed [ 69.716687][ T5660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.845901][ T29] audit: type=1400 audit(1727356352.076:918): avc: denied { create } for pid=5675 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.868914][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.883394][ T5679] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 69.920306][ T29] audit: type=1326 audit(1727356352.156:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.1.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 69.948916][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.956487][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.958406][ T5688] netlink: 20 bytes leftover after parsing attributes in process `syz.4.838'. [ 69.973230][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.980366][ T5690] loop1: detected capacity change from 0 to 128 [ 69.980782][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.989044][ T5690] FAT-fs (loop1): bogus number of FAT sectors [ 70.000325][ T5690] FAT-fs (loop1): Can't find a valid FAT filesystem [ 70.212329][ T5709] loop1: detected capacity change from 0 to 2048 [ 70.229737][ T5709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.402688][ T5712] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.417712][ T5712] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 70.430187][ T5712] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.430187][ T5712] [ 70.439836][ T5712] EXT4-fs (loop1): Total free blocks count 0 [ 70.446029][ T5712] EXT4-fs (loop1): Free/Dirty block details [ 70.452033][ T5712] EXT4-fs (loop1): free_blocks=2415919104 [ 70.457799][ T5712] EXT4-fs (loop1): dirty_blocks=8192 [ 70.463192][ T5712] EXT4-fs (loop1): Block reservation details [ 70.469202][ T5712] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 70.489065][ T5712] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 70.672498][ T5724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 70.681584][ T5726] loop1: detected capacity change from 0 to 512 [ 70.689172][ T5726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.701808][ T5726] EXT4-fs (loop1): 1 truncate cleaned up [ 70.709160][ T5726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.731703][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.784491][ T5733] Cannot find add_set index 0 as target [ 71.045885][ T5760] loop4: detected capacity change from 0 to 1024 [ 71.060439][ T5760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.093293][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.117147][ T5766] loop4: detected capacity change from 0 to 512 [ 71.123862][ T5766] EXT4-fs: Ignoring removed orlov option [ 71.129942][ T5766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.159592][ T5766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.172362][ T5766] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.186202][ T5766] bpf_get_probe_write_proto: 11 callbacks suppressed [ 71.186217][ T5766] syz.4.869[5766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.193126][ T5766] syz.4.869[5766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.204601][ T5766] syz.4.869[5766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.219191][ T5766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.869: bg 0: block 255: padding at end of block bitmap is not set [ 71.254880][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.288272][ T5773] sd 0:0:1:0: device reset [ 71.630141][ T5794] loop1: detected capacity change from 0 to 2048 [ 71.650634][ T5794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.701351][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.731621][ T5807] loop1: detected capacity change from 0 to 128 [ 71.748898][ T5807] syz.1.881: attempt to access beyond end of device [ 71.748898][ T5807] loop1: rw=0, sector=121, nr_sectors = 112 limit=128 [ 72.180522][ T5846] loop1: detected capacity change from 0 to 1024 [ 72.219016][ T5856] syz.2.901[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.219146][ T5856] syz.2.901[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.230941][ T5856] syz.2.901[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.249956][ T5846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.339700][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.421841][ T5869] loop1: detected capacity change from 0 to 2048 [ 72.469544][ T5869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.562456][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.575666][ T5888] loop4: detected capacity change from 0 to 2048 [ 72.603978][ T5888] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 72.617739][ T5888] System zones: 0-7 [ 72.622169][ T5888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.666767][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.703441][ T5901] loop1: detected capacity change from 0 to 1024 [ 72.741572][ T5901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.774215][ T5903] syzkaller0: entered promiscuous mode [ 72.779871][ T5903] syzkaller0: entered allmulticast mode [ 72.796836][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.872498][ T5915] loop4: detected capacity change from 0 to 4096 [ 72.891157][ T5915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.968497][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.005241][ T5921] loop4: detected capacity change from 0 to 2048 [ 73.034864][ T5921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.086559][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.149977][ T5945] vhci_hcd: default hub control req: 2017 v0080 i0000 l0 [ 73.255053][ T5960] loop4: detected capacity change from 0 to 1764 [ 73.272193][ T5962] pim6reg1: entered promiscuous mode [ 73.277587][ T5962] pim6reg1: entered allmulticast mode [ 73.283577][ T5965] loop1: detected capacity change from 0 to 1024 [ 73.296840][ T5965] EXT4-fs: Ignoring removed bh option [ 73.332355][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.369725][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.461530][ T5973] loop1: detected capacity change from 0 to 1024 [ 73.489400][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.579537][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.716434][ T6001] loop4: detected capacity change from 0 to 1024 [ 73.718167][ T6002] pim6reg1: entered promiscuous mode [ 73.728407][ T6002] pim6reg1: entered allmulticast mode [ 73.728813][ T6001] EXT4-fs: Ignoring removed bh option [ 73.740630][ T5998] Cannot find set identified by id 0 to match [ 73.762122][ T6001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.834786][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.894771][ T6024] syz.0.969[6024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.894909][ T6024] syz.0.969[6024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.906397][ T6024] syz.0.969[6024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.918577][ T6024] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 73.940794][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 73.940813][ T29] audit: type=1400 audit(1727356356.186:973): avc: denied { relabelto } for pid=6023 comm="syz.0.969" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 73.982555][ T6033] loop1: detected capacity change from 0 to 512 [ 73.995201][ T6033] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.004396][ T6033] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 74.031689][ T29] audit: type=1400 audit(1727356356.186:974): avc: denied { associate } for pid=6023 comm="syz.0.969" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 74.059926][ T29] audit: type=1400 audit(1727356356.246:975): avc: denied { unmount } for pid=3270 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.100886][ T6033] vlan2: entered promiscuous mode [ 74.106042][ T6033] veth0_to_hsr: entered promiscuous mode [ 74.171710][ T6056] pim6reg1: entered promiscuous mode [ 74.177225][ T6056] pim6reg1: entered allmulticast mode [ 74.334432][ T6078] syz.3.987[6078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.757531][ T6100] pim6reg1: entered promiscuous mode [ 74.774363][ T6100] pim6reg1: entered allmulticast mode [ 74.797504][ T29] audit: type=1400 audit(1727356357.026:976): avc: denied { write } for pid=6095 comm="syz.4.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.836247][ T29] audit: type=1326 audit(1727356357.066:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 74.846392][ T6106] Process accounting resumed [ 74.859755][ T29] audit: type=1326 audit(1727356357.066:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 74.892761][ T29] audit: type=1326 audit(1727356357.066:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 74.916276][ T29] audit: type=1326 audit(1727356357.066:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 74.939653][ T29] audit: type=1326 audit(1727356357.066:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 74.963012][ T29] audit: type=1326 audit(1727356357.066:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 75.049761][ T6119] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 75.193779][ T6134] pim6reg1: entered promiscuous mode [ 75.199340][ T6134] pim6reg1: entered allmulticast mode [ 75.345463][ T6151] loop1: detected capacity change from 0 to 2048 [ 75.371949][ T6153] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1023'. [ 75.425241][ T6151] Alternate GPT is invalid, using primary GPT. [ 75.431808][ T6151] loop1: p2 p3 p7 [ 75.561764][ T6169] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.594450][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 75.602003][ T9] hid-generic 0000:0000:0000.0008: ignoring exceeding usage max [ 75.614059][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 75.623352][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x6 [ 75.630821][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 75.640829][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 75.699290][ T6179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'. [ 75.710335][ T6179] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 75.722428][ T6179] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.770916][ T6190] loop4: detected capacity change from 0 to 512 [ 75.778165][ T6190] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 75.792123][ T6190] serio: Serial port ptm0 [ 75.922999][ T6203] loop1: detected capacity change from 0 to 512 [ 75.952610][ T6203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.970643][ T6203] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.004717][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 76.023195][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.036562][ T6218] serio: Serial port ptm0 [ 76.036835][ T6217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1049'. [ 76.052788][ T6217] netlink: 'syz.0.1049': attribute type 10 has an invalid length. [ 76.079769][ T6217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.155109][ T6236] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 76.357028][ T6265] bpf_get_probe_write_proto: 8 callbacks suppressed [ 76.357043][ T6265] syz.2.1070[6265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.364224][ T6265] syz.2.1070[6265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.377364][ T6265] syz.2.1070[6265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.592869][ T6297] x_tables: duplicate underflow at hook 4 [ 76.800039][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'. [ 77.083121][ T6328] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.104187][ T6330] loop4: detected capacity change from 0 to 1024 [ 77.140627][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.160355][ T6338] loop1: detected capacity change from 0 to 128 [ 77.171892][ T6338] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.184417][ T6338] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.185179][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.234829][ T5372] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.357572][ T6353] syzkaller1: entered promiscuous mode [ 77.363298][ T6353] syzkaller1: entered allmulticast mode [ 77.472387][ T6363] loop4: detected capacity change from 0 to 1024 [ 77.501846][ T6363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.554530][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.601647][ T6375] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 77.639351][ T6379] vlan2: entered allmulticast mode [ 77.649888][ T6383] loop1: detected capacity change from 0 to 512 [ 77.678804][ T6383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.695303][ T6383] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.735886][ T6394] syz.4.1125[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.735992][ T6394] syz.4.1125[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.758082][ T6383] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.1120: corrupted inode contents [ 77.763146][ T6394] syz.4.1125[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.792467][ T6394] syz.4.1125[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.806054][ T6394] syz.4.1125[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.819782][ T6394] syz.4.1125[6394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.832248][ T6383] EXT4-fs error (device loop1): ext4_dirty_inode:5984: inode #19: comm syz.1.1120: mark_inode_dirty error [ 77.857904][ T6383] EXT4-fs error (device loop1): ext4_do_update_inode:5121: inode #19: comm syz.1.1120: corrupted inode contents [ 77.871532][ T6383] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3005: inode #19: comm syz.1.1120: mark_inode_dirty error [ 77.884786][ T6383] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3008: inode #19: comm syz.1.1120: mark inode dirty (error -117) [ 77.899005][ T6383] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 77.943349][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.963227][ T6404] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.065848][ C0] hrtimer: interrupt took 38180 ns [ 78.589113][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.597816][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.872903][ T6450] loop1: detected capacity change from 0 to 512 [ 78.890954][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.903849][ T6450] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.932385][ T6450] EXT4-fs (loop1): shut down requested (2) [ 78.950432][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.977315][ T6460] loop1: detected capacity change from 0 to 512 [ 78.988576][ T6460] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.996561][ T6460] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 79.006459][ T6460] System zones: 0-1, 15-15, 18-18, 34-34 [ 79.014791][ T6460] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.023544][ T6460] __quota_error: 122 callbacks suppressed [ 79.023566][ T6460] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 79.041620][ T6460] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.056394][ T6460] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 79.064846][ T6460] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1151: bad orphan inode 16 [ 79.075305][ T6460] ext4_test_bit(bit=15, block=18) = 1 [ 79.080777][ T6460] is_bad_inode(inode)=0 [ 79.084951][ T6460] NEXT_ORPHAN(inode)=0 [ 79.089187][ T6460] max_ino=32 [ 79.092406][ T6460] i_nlink=2 [ 79.096090][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.145550][ T6460] syzkaller0: entered promiscuous mode [ 79.151130][ T6460] syzkaller0: entered allmulticast mode [ 79.156876][ T29] audit: type=1400 audit(1727356361.376:1105): avc: denied { sqpoll } for pid=6470 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.204873][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1157'. [ 79.236207][ T6479] loop4: detected capacity change from 0 to 512 [ 79.263338][ T6479] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.263429][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.273660][ T6479] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.287562][ T6479] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 79.300558][ T6479] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.316455][ T6479] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 79.324146][ T6479] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1160: bg 0: block 40: padding at end of block bitmap is not set [ 79.342517][ T6479] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 79.351753][ T6479] EXT4-fs (loop4): 1 truncate cleaned up [ 79.360132][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.393755][ T6496] loop1: detected capacity change from 0 to 512 [ 79.403380][ T6479] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.1160: corrupted xattr block 31: invalid header [ 79.407032][ T6498] syz.0.1168[6498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.419060][ T6479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 79.440279][ T6479] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.1160: corrupted xattr block 31: invalid header [ 79.440465][ T6501] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.1160: corrupted xattr block 31: invalid header [ 79.460668][ T6496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.480550][ T6496] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.491040][ T6479] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 79.500252][ T29] audit: type=1400 audit(1727356361.736:1106): avc: denied { read } for pid=6478 comm="syz.4.1160" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.500301][ T6479] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1160: bad symlink. [ 79.549839][ T6501] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 79.559053][ T6501] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1160: bad symlink. [ 79.586859][ T5353] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.597973][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.605618][ T29] audit: type=1326 audit(1727356361.836:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00989df39 code=0x7ffc0000 [ 79.636205][ T29] audit: type=1326 audit(1727356361.876:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00989df39 code=0x7ffc0000 [ 79.661612][ T29] audit: type=1326 audit(1727356361.876:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00989df39 code=0x7ffc0000 [ 79.685508][ T29] audit: type=1326 audit(1727356361.876:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00989df39 code=0x7ffc0000 [ 79.709012][ T29] audit: type=1326 audit(1727356361.876:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb00989df39 code=0x7ffc0000 [ 79.732472][ T29] audit: type=1326 audit(1727356361.876:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00989df39 code=0x7ffc0000 [ 80.052289][ T6556] loop4: detected capacity change from 0 to 2048 [ 80.060989][ T11] nci: nci_rx_work: unknown MT 0x4 [ 80.108219][ T6556] loop4: p1 < > p4 [ 80.112658][ T6556] loop4: p4 size 8388608 extends beyond EOD, truncated [ 80.127452][ T6564] loop1: detected capacity change from 0 to 1024 [ 80.151250][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.187872][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.236665][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 80.246325][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 80.281525][ T6585] pim6reg1: entered promiscuous mode [ 80.286995][ T6585] pim6reg1: entered allmulticast mode [ 80.344297][ T6589] syz.1.1206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.663785][ T6596] loop4: detected capacity change from 0 to 256 [ 80.694460][ T6596] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1208'. [ 80.775030][ T6598] loop1: detected capacity change from 0 to 1024 [ 80.841355][ T6606] loop4: detected capacity change from 0 to 512 [ 80.843227][ T6598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.847942][ T6606] EXT4-fs: dax option not supported [ 80.915785][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.999039][ T6612] loop1: detected capacity change from 0 to 1024 [ 81.005824][ T6612] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.012740][ T6612] ext4: Unknown parameter 'subj_type' [ 81.137859][ T6634] vlan2: entered allmulticast mode [ 81.185530][ T6639] loop4: detected capacity change from 0 to 256 [ 81.247848][ T6639] loop4: detected capacity change from 256 to 11 [ 81.256947][ T6639] FAT-fs (loop4): unable to read inode block for updating (i_pos 202) [ 81.273671][ T6638] FAT-fs (loop4): unable to read inode block for updating (i_pos 202) [ 81.587289][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888113ad0c00: rx timeout, send abort [ 81.604367][ T6679] loop1: detected capacity change from 0 to 2048 [ 81.619322][ T6679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.635257][ T6679] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.659188][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.725611][ T5353] FAT-fs (loop4): Directory bread(block 3) failed [ 81.810319][ T6703] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.839915][ T6705] loop1: detected capacity change from 0 to 512 [ 81.849328][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.862035][ T6705] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.882966][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.921988][ T86] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.951993][ T86] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.011677][ T86] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.061407][ T86] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.095618][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888113ad0c00: abort rx timeout. Force session deactivation [ 82.140167][ T6712] chnl_net:caif_netlink_parms(): no params data found [ 82.152634][ T86] bridge_slave_1: left allmulticast mode [ 82.158520][ T86] bridge_slave_1: left promiscuous mode [ 82.164440][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.172337][ T86] bridge_slave_0: left allmulticast mode [ 82.178085][ T86] bridge_slave_0: left promiscuous mode [ 82.183766][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.280726][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.292019][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.304554][ T86] bond0 (unregistering): Released all slaves [ 82.380507][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.387707][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.395361][ T6712] bridge_slave_0: entered allmulticast mode [ 82.403347][ T6712] bridge_slave_0: entered promiscuous mode [ 82.414929][ T86] hsr_slave_0: left promiscuous mode [ 82.421550][ T86] hsr_slave_1: left promiscuous mode [ 82.431288][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.438765][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.447003][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.454626][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.460615][ T6741] bpf_get_probe_write_proto: 5 callbacks suppressed [ 82.460636][ T6741] syz.0.1259[6741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.468791][ T6741] syz.0.1259[6741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.481986][ T6741] syz.0.1259[6741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.493764][ T86] veth1_macvtap: left promiscuous mode [ 82.510717][ T86] veth0_macvtap: left promiscuous mode [ 82.516293][ T86] veth1_vlan: left promiscuous mode [ 82.521659][ T86] veth0_vlan: left promiscuous mode [ 82.626356][ T86] team0 (unregistering): Port device team_slave_1 removed [ 82.639240][ T86] team0 (unregistering): Port device team_slave_0 removed [ 82.677993][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.685113][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.692508][ T6712] bridge_slave_1: entered allmulticast mode [ 82.699420][ T6712] bridge_slave_1: entered promiscuous mode [ 82.706063][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1259'. [ 82.717512][ T6741] vlan2: entered promiscuous mode [ 82.736956][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.747957][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.769161][ T6712] team0: Port device team_slave_0 added [ 82.776274][ T6712] team0: Port device team_slave_1 added [ 82.795743][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.802792][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.828892][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.840515][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.847505][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.873643][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.904176][ T6712] hsr_slave_0: entered promiscuous mode [ 82.910615][ T6712] hsr_slave_1: entered promiscuous mode [ 82.916549][ T6712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.924238][ T6712] Cannot create hsr debugfs directory [ 82.936147][ T6754] netlink: 'syz.1.1265': attribute type 39 has an invalid length. [ 83.087944][ T6767] syz.1.1271[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.088027][ T6767] syz.1.1271[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.101717][ T6767] syz.1.1271[6767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.184639][ T6778] raw_sendmsg: syz.1.1273 forgot to set AF_INET. Fix it! [ 83.307199][ T6712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.327872][ T6712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.338254][ T6712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.346920][ T6712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.358818][ T6793] all: renamed from bridge_slave_0 (while UP) [ 83.429406][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 83.470218][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.489074][ T6712] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.512068][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.519198][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.548955][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.556228][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.657824][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.679506][ T6838] bridge0: port 3(vlan3) entered blocking state [ 83.685821][ T6838] bridge0: port 3(vlan3) entered disabled state [ 83.718603][ T6838] vlan3: entered allmulticast mode [ 83.732394][ T6838] vlan3: left allmulticast mode [ 83.834317][ T6869] netlink: 94 bytes leftover after parsing attributes in process `syz.2.1311'. [ 83.865638][ T6876] rdma_op ffff888115548180 conn xmit_rdma 0000000000000000 [ 83.896576][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'. [ 83.913526][ T6879] loop1: detected capacity change from 0 to 2048 [ 83.924412][ T6712] veth0_vlan: entered promiscuous mode [ 83.943386][ T6712] veth1_vlan: entered promiscuous mode [ 83.952817][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.002824][ T6712] veth0_macvtap: entered promiscuous mode [ 84.009619][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.026168][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 84.038617][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 84.038617][ T50] [ 84.048340][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 84.054433][ T50] EXT4-fs (loop1): Free/Dirty block details [ 84.060387][ T50] EXT4-fs (loop1): free_blocks=2415919104 [ 84.066204][ T50] EXT4-fs (loop1): dirty_blocks=16 [ 84.071400][ T50] EXT4-fs (loop1): Block reservation details [ 84.077425][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 84.092979][ T6712] veth1_macvtap: entered promiscuous mode [ 84.103638][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.114147][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.123971][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.134605][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.144506][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.145123][ T5372] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.154931][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.154945][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.154963][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.155905][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.193359][ T6901] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1325'. [ 84.195418][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.201733][ T6901] unsupported nlmsg_type 40 [ 84.210458][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.210476][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.245853][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.255723][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.266267][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.276145][ T6712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.286604][ T6712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.297338][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.359288][ T6712] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368220][ T6712] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377089][ T6712] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.385907][ T6712] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.552103][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 84.668819][ T6923] openvswitch: netlink: ct_state flags 00001eac unsupported [ 84.713509][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 84.713527][ T29] audit: type=1400 audit(1727356366.946:1316): avc: denied { read } for pid=6929 comm="syz.3.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.756269][ T29] audit: type=1326 audit(1727356366.986:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.779811][ T29] audit: type=1326 audit(1727356366.986:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.814406][ T29] audit: type=1326 audit(1727356366.986:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.837928][ T29] audit: type=1326 audit(1727356366.986:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.861377][ T29] audit: type=1326 audit(1727356366.986:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.884769][ T29] audit: type=1326 audit(1727356366.986:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.908317][ T29] audit: type=1326 audit(1727356366.986:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.931704][ T29] audit: type=1326 audit(1727356366.986:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 84.955188][ T29] audit: type=1326 audit(1727356366.986:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.1.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f66246ddf39 code=0x7ffc0000 [ 85.058447][ T6957] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1348'. [ 85.093491][ T6961] loop4: detected capacity change from 0 to 512 [ 85.110574][ T6961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.123424][ T6961] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.123481][ T6968] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1348'. [ 85.194636][ T6961] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.1349: corrupted inode contents [ 85.207723][ T6961] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.1349: mark_inode_dirty error [ 85.219567][ T6961] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.1349: corrupted inode contents [ 85.232121][ T6961] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3005: inode #19: comm syz.4.1349: mark_inode_dirty error [ 85.244522][ T6961] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3008: inode #19: comm syz.4.1349: mark inode dirty (error -117) [ 85.257559][ T6961] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 85.282397][ T6712] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.359246][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 85.368410][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.376117][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.386399][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.393970][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.414562][ T7000] vlan2: entered allmulticast mode [ 85.457438][ T7003] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 86.409336][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.529943][ T7064] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1395'. [ 87.577066][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 87.634527][ T7134] netlink: 'syz.2.1422': attribute type 4 has an invalid length. [ 87.697493][ T7143] netlink: 'syz.0.1427': attribute type 5 has an invalid length. [ 88.582232][ T7175] netlink: 'syz.4.1440': attribute type 5 has an invalid length. [ 88.596103][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 88.605141][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.612918][ T7177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.620862][ T7177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.628473][ T7177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.650245][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 88.651051][ T7181] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 88.835465][ T7207] ip6tnl1: entered promiscuous mode [ 88.840878][ T7207] ip6tnl1: entered allmulticast mode [ 88.854994][ T7212] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 88.904427][ T7219] netlink: 'syz.1.1459': attribute type 4 has an invalid length. [ 89.409311][ T7240] netlink: 'syz.1.1466': attribute type 5 has an invalid length. [ 89.826454][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 90.107498][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.115001][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.122813][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.130459][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.910838][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.918697][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.926642][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.934335][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.023745][ T7353] ip6tnl1: entered promiscuous mode [ 92.029043][ T7353] ip6tnl1: entered allmulticast mode [ 92.634275][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 92.634292][ T29] audit: type=1400 audit(1727356374.866:1357): avc: denied { ioctl } for pid=7426 comm="syz.4.1542" path="socket:[20972]" dev="sockfs" ino=20972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.663297][ T7436] tipc: Started in network mode [ 92.670150][ T7436] tipc: Node identity f2c501c2b4e, cluster identity 4711 [ 92.677260][ T7436] tipc: Enabled bearer , priority 0 [ 92.700334][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 92.717944][ T7444] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1547'. [ 92.720591][ T7436] tipc: Resetting bearer [ 92.736944][ T7435] tipc: Resetting bearer [ 92.752204][ T7435] tipc: Disabling bearer [ 92.989385][ T7478] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1562'. [ 92.989689][ T7455] chnl_net:caif_netlink_parms(): no params data found [ 93.035007][ T7484] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.066067][ T7493] serio: Serial port ptm0 [ 93.076853][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.084104][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.091506][ T7455] bridge_slave_0: entered allmulticast mode [ 93.098823][ T7455] bridge_slave_0: entered promiscuous mode [ 93.105672][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.112871][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.120311][ T7455] bridge_slave_1: entered allmulticast mode [ 93.126759][ T7455] bridge_slave_1: entered promiscuous mode [ 93.160852][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.171648][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.191460][ T7504] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 93.199172][ T7455] team0: Port device team_slave_0 added [ 93.206005][ T7455] team0: Port device team_slave_1 added [ 93.243511][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.250652][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.276794][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.288129][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.295121][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.321151][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.337862][ T7510] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1576'. [ 93.366175][ T7455] hsr_slave_0: entered promiscuous mode [ 93.372413][ T7455] hsr_slave_1: entered promiscuous mode [ 93.392981][ T7455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.400651][ T7455] Cannot create hsr debugfs directory [ 93.491947][ T7455] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.501941][ T7455] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.549563][ T7455] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.559521][ T7455] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.579040][ T29] audit: type=1326 audit(1727356375.816:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 93.602562][ T29] audit: type=1326 audit(1727356375.816:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 93.626205][ T29] audit: type=1326 audit(1727356375.816:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 93.627264][ T7539] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 93.649752][ T29] audit: type=1326 audit(1727356375.816:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 93.680230][ T29] audit: type=1326 audit(1727356375.816:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.3.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 93.709810][ T7455] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.719644][ T7455] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.733046][ T7542] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1586'. [ 93.781098][ T7455] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.790991][ T7455] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.875415][ T7455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.886675][ T7455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.895885][ T7455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.920774][ T7455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.976737][ T29] audit: type=1326 audit(1727356376.206:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 94.021671][ T29] audit: type=1326 audit(1727356376.246:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 94.029498][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.045125][ T29] audit: type=1326 audit(1727356376.246:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 94.075164][ T29] audit: type=1326 audit(1727356376.246:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f29910bdf39 code=0x7ffc0000 [ 94.088739][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.122018][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.129290][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.140993][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.148100][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.212350][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.285797][ T7455] veth0_vlan: entered promiscuous mode [ 94.308923][ T7455] veth1_vlan: entered promiscuous mode [ 94.336038][ T7455] veth0_macvtap: entered promiscuous mode [ 94.347440][ T7583] syzkaller1: entered promiscuous mode [ 94.353026][ T7583] syzkaller1: entered allmulticast mode [ 94.394946][ T7455] veth1_macvtap: entered promiscuous mode [ 94.410429][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.421213][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.433294][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.458581][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.469114][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.498932][ T7597] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1602'. [ 94.504602][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.525422][ T7455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534354][ T7455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.543201][ T7455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.552023][ T7455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.715350][ T7618] syz.0.1623[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.715465][ T7618] syz.0.1623[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.728694][ T7618] syz.0.1623[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.741502][ T7618] syz.0.1623[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.752969][ T7618] syz.0.1623[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.764656][ T7618] syz.0.1623[7618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.892841][ T7639] bond_slave_1: mtu less than device minimum [ 95.142798][ T7668] bridge: RTM_NEWNEIGH with invalid ether address [ 95.151525][ T7670] bond_slave_1: mtu less than device minimum [ 95.824473][ T7726] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1668'. [ 96.173742][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.182748][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.669781][ T7746] syzkaller0: entered promiscuous mode [ 96.675395][ T7746] syzkaller0: entered allmulticast mode [ 96.796207][ T7761] syzkaller0: entered promiscuous mode [ 96.801802][ T7761] syzkaller0: entered allmulticast mode [ 96.842609][ T7766] vlan2: entered allmulticast mode [ 96.967179][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.986189][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.128813][ T7783] syz.3.1679[7783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.128908][ T7783] syz.3.1679[7783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.159587][ T7783] syz.3.1679[7783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.584010][ T7798] syzkaller0: entered promiscuous mode [ 97.601105][ T7798] syzkaller0: entered allmulticast mode [ 97.686312][ T56] nci: nci_rx_work: unknown MT 0x4 [ 97.694761][ T7821] pim6reg1: entered promiscuous mode [ 97.700122][ T7821] pim6reg1: entered allmulticast mode [ 97.843633][ T7841] vlan2: entered allmulticast mode [ 98.467486][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 98.467505][ T29] audit: type=1326 audit(1727356380.696:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 98.503849][ T29] audit: type=1326 audit(1727356380.696:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 98.527496][ T29] audit: type=1326 audit(1727356380.706:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff77e8bc8d0 code=0x7ffc0000 [ 98.550953][ T29] audit: type=1326 audit(1727356380.706:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff77e8bc8d0 code=0x7ffc0000 [ 98.574371][ T29] audit: type=1326 audit(1727356380.706:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 98.597815][ T29] audit: type=1326 audit(1727356380.706:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 98.621286][ T29] audit: type=1326 audit(1727356380.706:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 98.644784][ T29] audit: type=1326 audit(1727356380.706:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.3.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff77e8bdf39 code=0x7ffc0000 [ 98.745898][ T29] audit: type=1326 audit(1727356380.966:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 98.769491][ T29] audit: type=1326 audit(1727356380.966:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7869 comm="syz.0.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 99.080768][ T7911] vlan3: entered allmulticast mode [ 99.102866][ T7918] all: renamed from bridge_slave_0 (while UP) [ 99.295266][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 99.555689][ T7957] vlan2: entered allmulticast mode [ 100.333197][ T8018] bridge0: port 3(vlan2) entered blocking state [ 100.339602][ T8018] bridge0: port 3(vlan2) entered disabled state [ 100.347111][ T8018] vlan2: entered allmulticast mode [ 100.363726][ T8018] vlan2: left allmulticast mode [ 100.443875][ T8027] netlink: 94 bytes leftover after parsing attributes in process `syz.0.1791'. [ 100.949022][ T8066] netlink: 'syz.2.1807': attribute type 39 has an invalid length. [ 101.000637][ T8072] all: renamed from bridge_slave_0 (while UP) [ 101.030436][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1811'. [ 101.464818][ T8109] all: renamed from bridge_slave_0 (while UP) [ 101.571224][ T8127] vlan2: entered allmulticast mode [ 101.583684][ T8130] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 102.604037][ T8201] tipc: Enabling of bearer rejected, failed to enable media [ 102.712071][ T8207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1869'. [ 103.165763][ T8236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1884'. [ 103.778409][ T8287] tipc: Enabling of bearer rejected, failed to enable media [ 104.273102][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 104.273121][ T29] audit: type=1400 audit(1727356386.506:1738): avc: denied { watch } for pid=8306 comm="syz.0.1924" path="/73/control" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.719036][ T8333] bridge: RTM_NEWNEIGH with invalid ether address [ 104.998730][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1936'. [ 105.232762][ T29] audit: type=1400 audit(1727356387.466:1739): avc: denied { setopt } for pid=8396 comm="syz.1.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 105.436040][ T29] audit: type=1326 audit(1727356387.666:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 105.460295][ T29] audit: type=1326 audit(1727356387.666:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 105.483908][ T29] audit: type=1326 audit(1727356387.666:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 105.507520][ T29] audit: type=1326 audit(1727356387.666:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 105.531419][ T29] audit: type=1326 audit(1727356387.706:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8426 comm="syz.0.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885e25df39 code=0x7ffc0000 [ 105.641558][ T29] audit: type=1400 audit(1727356387.866:1745): avc: denied { bind } for pid=8444 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.660973][ T29] audit: type=1400 audit(1727356387.866:1746): avc: denied { write } for pid=8444 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 105.708767][ T8451] vlan2: entered promiscuous mode [ 105.750934][ T8464] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1978'. [ 105.868333][ T29] audit: type=1400 audit(1727356388.106:1747): avc: denied { map_create } for pid=8484 comm="syz.3.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.943175][ T8497] tipc: Started in network mode [ 105.948151][ T8497] tipc: Node identity , cluster identity 4711 [ 105.954252][ T8497] tipc: Failed to set node id, please configure manually [ 105.961324][ T8497] tipc: Enabling of bearer rejected, failed to enable media [ 106.910271][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2013'. [ 107.207431][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.217309][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.310173][ T8601] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 107.316820][ T8601] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.324431][ T8601] vhci_hcd vhci_hcd.0: Device attached [ 107.357966][ T8602] vhci_hcd: connection closed [ 107.358160][ T1681] vhci_hcd: stop threads [ 107.367190][ T1681] vhci_hcd: release socket [ 107.371619][ T1681] vhci_hcd: disconnect device [ 108.075250][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2058'. [ 108.084393][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2058'. [ 108.236031][ T8691] tipc: Started in network mode [ 108.241173][ T8691] tipc: Node identity , cluster identity 4711 [ 108.247259][ T8691] tipc: Failed to set node id, please configure manually [ 108.254332][ T8691] tipc: Enabling of bearer rejected, failed to enable media [ 108.273127][ T8692] netlink: 'syz.2.2070': attribute type 6 has an invalid length. [ 108.280967][ T8692] netlink: 14557 bytes leftover after parsing attributes in process `syz.2.2070'. [ 108.410205][ T8697] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2072'. [ 108.420269][ T8697] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2072'. [ 108.483575][ T8703] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 108.490152][ T8703] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.497774][ T8703] vhci_hcd vhci_hcd.0: Device attached [ 108.543323][ T8704] vhci_hcd: connection closed [ 108.543440][ T86] vhci_hcd: stop threads [ 108.552501][ T86] vhci_hcd: release socket [ 108.556974][ T86] vhci_hcd: disconnect device [ 109.009358][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 109.085277][ T8742] vlan2: entered allmulticast mode [ 109.121954][ T8748] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 109.128534][ T8748] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 109.136045][ T8748] vhci_hcd vhci_hcd.0: Device attached [ 109.210242][ T8750] vhci_hcd: connection closed [ 109.210461][ T36] vhci_hcd: stop threads [ 109.219590][ T36] vhci_hcd: release socket [ 109.224018][ T36] vhci_hcd: disconnect device [ 109.390030][ T8771] tipc: Started in network mode [ 109.391914][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 109.391931][ T29] audit: type=1400 audit(1727356391.626:1930): avc: denied { read } for pid=8765 comm="syz.4.2101" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.394985][ T8771] tipc: Node identity , cluster identity 4711 [ 109.395000][ T8771] tipc: Failed to set node id, please configure manually [ 109.395011][ T8771] tipc: Enabling of bearer rejected, failed to enable media [ 109.401215][ T29] audit: type=1400 audit(1727356391.626:1931): avc: denied { open } for pid=8765 comm="syz.4.2101" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.401828][ T29] audit: type=1400 audit(1727356391.646:1932): avc: denied { ioctl } for pid=8765 comm="syz.4.2101" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 109.768816][ T8795] do_coredump: 7 callbacks suppressed [ 109.768830][ T8795] coredump: 8795(syz-executor): over coredump resource limit, skipping core dump [ 109.783558][ T8795] get_signal: 7 callbacks suppressed [ 109.783575][ T8795] coredump: 8795(syz-executor): coredump has not been created, error -7 [ 109.801377][ T8796] coredump: 8796(syz-executor): over coredump resource limit, skipping core dump [ 109.810740][ T8796] coredump: 8796(syz-executor): coredump has not been created, error -7 [ 109.823362][ T8797] coredump: 8797(syz-executor): over coredump resource limit, skipping core dump [ 109.832692][ T8797] coredump: 8797(syz-executor): coredump has not been created, error -7 [ 109.846673][ T8800] coredump: 8800(syz-executor): over coredump resource limit, skipping core dump [ 109.855935][ T8800] coredump: 8800(syz-executor): coredump has not been created, error -7 [ 109.869154][ T8801] coredump: 8801(syz-executor): over coredump resource limit, skipping core dump [ 109.878432][ T8801] coredump: 8801(syz-executor): coredump has not been created, error -7 [ 109.890287][ T8802] coredump: 8802(syz-executor): over coredump resource limit, skipping core dump [ 109.899599][ T8802] coredump: 8802(syz-executor): coredump has not been created, error -7 [ 110.075166][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.090755][ T8803] coredump: 8803(syz-executor): over coredump resource limit, skipping core dump [ 110.094145][ T8804] coredump: 8804(syz-executor): over coredump resource limit, skipping core dump [ 110.099987][ T8803] coredump: 8803(syz-executor): coredump has not been created, error -7 [ 110.109133][ T8804] coredump: 8804(syz-executor): coredump has not been created, error -7 [ 110.129553][ T8805] coredump: 8805(syz-executor): over coredump resource limit, skipping core dump [ 110.131948][ T8806] coredump: 8806(syz-executor): over coredump resource limit, skipping core dump [ 110.138851][ T8805] coredump: 8805(syz-executor): coredump has not been created, error -7 [ 110.148192][ T8806] coredump: 8806(syz-executor): coredump has not been created, error -7 [ 110.168757][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.221918][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.271178][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.340218][ T11] bridge_slave_1: left allmulticast mode [ 110.345922][ T11] bridge_slave_1: left promiscuous mode [ 110.351734][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.359772][ T11] bridge_slave_0: left allmulticast mode [ 110.365453][ T11] bridge_slave_0: left promiscuous mode [ 110.371449][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.461466][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.471819][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.482601][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 110.492687][ T11] bond0 (unregistering): Released all slaves [ 110.553569][ T11] hsr_slave_0: left promiscuous mode [ 110.561558][ T11] hsr_slave_1: left promiscuous mode [ 110.569632][ T11] veth0_to_hsr: left promiscuous mode [ 110.575175][ T11] veth1_macvtap: left promiscuous mode [ 110.580691][ T11] veth0_macvtap: left promiscuous mode [ 110.586216][ T11] veth1_vlan: left promiscuous mode [ 110.591545][ T11] veth0_vlan: left promiscuous mode [ 110.671177][ T11] team0 (unregistering): Port device team_slave_1 removed [ 110.681610][ T11] team0 (unregistering): Port device team_slave_0 removed [ 111.036227][ T29] audit: type=1400 audit(1727356393.266:1933): avc: denied { mounton } for pid=8818 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 111.066568][ T29] audit: type=1400 audit(1727356393.296:1934): avc: denied { sys_module } for pid=8818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 111.422476][ T1681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.462011][ T1681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.510858][ T1681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.560494][ T1681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.641050][ T1681] bridge_slave_1: left allmulticast mode [ 111.646732][ T1681] bridge_slave_1: left promiscuous mode [ 111.652431][ T1681] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.660324][ T1681] bridge_slave_0: left allmulticast mode [ 111.665959][ T1681] bridge_slave_0: left promiscuous mode [ 111.671720][ T1681] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.800870][ T1681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.811157][ T1681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.821430][ T1681] bond0 (unregistering): Released all slaves [ 111.882724][ T1681] hsr_slave_0: left promiscuous mode [ 111.888752][ T1681] hsr_slave_1: left promiscuous mode [ 111.895823][ T1681] veth1_macvtap: left promiscuous mode [ 111.901351][ T1681] veth0_macvtap: left promiscuous mode [ 111.906936][ T1681] veth1_vlan: left promiscuous mode [ 111.912259][ T1681] veth0_vlan: left promiscuous mode [ 111.990535][ T1681] team0 (unregistering): Port device team_slave_1 removed [ 112.000352][ T1681] team0 (unregistering): Port device team_slave_0 removed [ 113.402847][ T8886] chnl_net:caif_netlink_parms(): no params data found [ 113.435830][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.443000][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.450164][ T8886] bridge_slave_0: entered allmulticast mode [ 113.456634][ T8886] bridge_slave_0: entered promiscuous mode [ 113.463683][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.470785][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.478062][ T8886] bridge_slave_1: entered allmulticast mode [ 113.484390][ T8886] bridge_slave_1: entered promiscuous mode [ 113.501116][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.512427][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.531347][ T8886] team0: Port device team_slave_0 added [ 113.538030][ T8886] team0: Port device team_slave_1 added [ 113.553018][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.560143][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.586220][ T8886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.597542][ T8886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.604573][ T8886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.630517][ T8886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.656222][ T8886] hsr_slave_0: entered promiscuous mode [ 113.662440][ T8886] hsr_slave_1: entered promiscuous mode [ 113.668354][ T8886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.675896][ T8886] Cannot create hsr debugfs directory [ 113.729297][ T8886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.739853][ T8886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.790683][ T8886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.800986][ T8886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.880937][ T8886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.891286][ T8886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.940680][ T8886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.951035][ T8886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.021577][ T8886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.030306][ T8886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.038765][ T8886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.047321][ T8886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.061343][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.068425][ T8886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.075724][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.082804][ T8886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.111013][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.122519][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.130618][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.144115][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.154696][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.161914][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.172369][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.179454][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.243332][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.310265][ T8886] veth0_vlan: entered promiscuous mode [ 114.318486][ T8886] veth1_vlan: entered promiscuous mode [ 114.333902][ T8886] veth0_macvtap: entered promiscuous mode [ 114.341811][ T8886] veth1_macvtap: entered promiscuous mode [ 114.352774][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.363259][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.373127][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.383718][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.394889][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.406224][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.416801][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.426790][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.437236][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.448996][ T8886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.460489][ T8886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.469268][ T8886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.478042][ T8886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.486792][ T8886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.506557][ T29] audit: type=1400 audit(1727356396.736:1935): avc: denied { mounton } for pid=8886 comm="syz-executor" path="/root/syzkaller.nhyUIS/syz-tmp" dev="sda1" ino=1974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 114.531743][ T29] audit: type=1400 audit(1727356396.736:1936): avc: denied { mount } for pid=8886 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.554046][ T29] audit: type=1400 audit(1727356396.736:1937): avc: denied { mounton } for pid=8886 comm="syz-executor" path="/root/syzkaller.nhyUIS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.579440][ T29] audit: type=1400 audit(1727356396.736:1938): avc: denied { mount } for pid=8886 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 114.601524][ T29] audit: type=1400 audit(1727356396.736:1939): avc: denied { unmount } for pid=8886 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.622062][ T29] audit: type=1400 audit(1727356396.776:1940): avc: denied { mounton } for pid=8886 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 115.401510][ T8913] chnl_net:caif_netlink_parms(): no params data found [ 115.435254][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.442484][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.449689][ T8913] bridge_slave_0: entered allmulticast mode [ 115.456106][ T8913] bridge_slave_0: entered promiscuous mode [ 115.463134][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.470356][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.477580][ T8913] bridge_slave_1: entered allmulticast mode [ 115.484199][ T8913] bridge_slave_1: entered promiscuous mode [ 115.502646][ T8913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.514086][ T8913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.534098][ T8913] team0: Port device team_slave_0 added [ 115.540806][ T8913] team0: Port device team_slave_1 added [ 115.555900][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.562929][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.588913][ T8913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.600697][ T8913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.607711][ T8913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.633641][ T8913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.661006][ T8913] hsr_slave_0: entered promiscuous mode [ 115.667191][ T8913] hsr_slave_1: entered promiscuous mode [ 115.674775][ T8913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.682496][ T8913] Cannot create hsr debugfs directory [ 115.697756][ T29] audit: type=1400 audit(1727356397.926:1941): avc: denied { getopt } for pid=8929 comm="syz.3.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.852105][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 115.887902][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.894977][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.902389][ T8931] bridge_slave_0: entered allmulticast mode [ 115.908891][ T8931] bridge_slave_0: entered promiscuous mode [ 115.915946][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.923305][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.930559][ T8931] bridge_slave_1: entered allmulticast mode [ 115.937001][ T8931] bridge_slave_1: entered promiscuous mode [ 115.958195][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.969819][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.991999][ T8931] team0: Port device team_slave_0 added [ 115.998881][ T8931] team0: Port device team_slave_1 added [ 116.015609][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.022634][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.048627][ T8931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.060969][ T8931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.068017][ T8931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.094037][ T8931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.131641][ T8931] hsr_slave_0: entered promiscuous mode [ 116.137858][ T8931] hsr_slave_1: entered promiscuous mode [ 116.143849][ T8931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.151430][ T8931] Cannot create hsr debugfs directory [ 116.163053][ T8913] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.172112][ T8913] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.181443][ T8913] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.198622][ T8913] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.243287][ T8931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.255589][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.262755][ T8913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.270162][ T8913] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.277279][ T8913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.309644][ T8913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.319996][ T8931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.335773][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.343991][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.363556][ T8931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.376165][ T8913] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.387579][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.394758][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.406043][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.413178][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.432550][ T8931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.497869][ T8931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.506687][ T8931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.516240][ T8931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.525524][ T8931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.546351][ T8913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.595220][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.611691][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.622930][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.630130][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.643166][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.650283][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.680483][ T8913] veth0_vlan: entered promiscuous mode [ 116.693093][ T8913] veth1_vlan: entered promiscuous mode [ 116.723313][ T8913] veth0_macvtap: entered promiscuous mode [ 116.733799][ T8913] veth1_macvtap: entered promiscuous mode [ 116.746734][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.757275][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.767260][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.777879][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.788021][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.798931][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.810304][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.822787][ T11] bridge_slave_1: left allmulticast mode [ 116.828600][ T11] bridge_slave_1: left promiscuous mode [ 116.834399][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.842526][ T11] bridge_slave_0: left allmulticast mode [ 116.848387][ T11] bridge_slave_0: left promiscuous mode [ 116.854005][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.950763][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.961764][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.972444][ T11] bond0 (unregistering): Released all slaves [ 116.980764][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.991332][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.001180][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.011686][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.021509][ T8913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.031952][ T8913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.044811][ T8913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.057515][ T8913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.066341][ T8913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.075073][ T8913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.083918][ T8913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.098820][ T11] hsr_slave_0: left promiscuous mode [ 117.104752][ T11] hsr_slave_1: left promiscuous mode [ 117.110674][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.118177][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.125716][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.133205][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.142378][ T11] veth1_macvtap: left promiscuous mode [ 117.147949][ T11] veth0_macvtap: left promiscuous mode [ 117.153476][ T11] veth1_vlan: left promiscuous mode [ 117.158750][ T11] veth0_vlan: left promiscuous mode [ 117.248943][ T11] team0 (unregistering): Port device team_slave_1 removed [ 117.259729][ T11] team0 (unregistering): Port device team_slave_0 removed [ 117.304797][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.421506][ T8931] veth0_vlan: entered promiscuous mode [ 117.433045][ T8931] veth1_vlan: entered promiscuous mode [ 117.459617][ T29] audit: type=1400 audit(1727356399.696:1942): avc: denied { ioctl } for pid=8981 comm="syz.3.2140" path="socket:[27797]" dev="sockfs" ino=27797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.470159][ T8931] veth0_macvtap: entered promiscuous mode [ 117.494059][ T29] audit: type=1326 audit(1727356399.736:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02d7cdf39 code=0x7ffc0000 [ 117.497506][ T8931] veth1_macvtap: entered promiscuous mode [ 117.517732][ T29] audit: type=1326 audit(1727356399.736:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8982 comm="syz.4.2126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb02d7cdf39 code=0x7ffc0000 [ 117.531361][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.557401][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.567289][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.577818][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.587811][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.588185][ T8986] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 117.598299][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.604719][ T8986] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.622000][ T8986] vhci_hcd vhci_hcd.0: Device attached [ 117.638885][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.648750][ T8983] netlink: 'syz.3.2140': attribute type 10 has an invalid length. [ 117.656804][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.664065][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.673307][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 117.684010][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.691145][ T8983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.698559][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.705638][ T8983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.715524][ T8983] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.742844][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.753424][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.763376][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.773833][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.783698][ T8931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.794145][ T8931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.805140][ T8931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.807985][ T3572] vhci_hcd: vhci_device speed not set [ 117.813109][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 117.826891][ T8993] bridge_slave_1: left allmulticast mode [ 117.832602][ T8993] bridge_slave_1: left promiscuous mode [ 117.838403][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.846402][ T8993] bridge_slave_0: left allmulticast mode [ 117.852278][ T8993] bridge_slave_0: left promiscuous mode [ 117.858082][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.869983][ T8993] bond0: (slave bridge0): Releasing backup interface [ 117.878249][ T3572] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 117.936901][ T8931] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.945650][ T8931] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.954395][ T8931] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.963092][ T8931] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.008178][ T8989] vhci_hcd: connection reset by peer [ 118.014584][ T1681] vhci_hcd: stop threads [ 118.018939][ T1681] vhci_hcd: release socket [ 118.023376][ T1681] vhci_hcd: disconnect device [ 118.055349][ T8969] chnl_net:caif_netlink_parms(): no params data found [ 118.116869][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.124099][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.131514][ T8969] bridge_slave_0: entered allmulticast mode [ 118.138428][ T8969] bridge_slave_0: entered promiscuous mode [ 118.145479][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.152622][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.159930][ T8969] bridge_slave_1: entered allmulticast mode [ 118.166365][ T8969] bridge_slave_1: entered promiscuous mode [ 118.185525][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.197012][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.218209][ T8969] team0: Port device team_slave_0 added [ 118.225080][ T8969] team0: Port device team_slave_1 added [ 118.241699][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.248778][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.274774][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.286235][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.293468][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.319474][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.348323][ T8969] hsr_slave_0: entered promiscuous mode [ 118.354477][ T8969] hsr_slave_1: entered promiscuous mode [ 118.360436][ T8969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.368321][ T8969] Cannot create hsr debugfs directory [ 118.581289][ T9015] vlan2: entered allmulticast mode [ 118.603978][ T9018] tipc: Started in network mode [ 118.608948][ T9018] tipc: Node identity , cluster identity 4711 [ 118.615045][ T9018] tipc: Failed to set node id, please configure manually [ 118.622182][ T9018] tipc: Enabling of bearer rejected, failed to enable media [ 118.706222][ T9026] netlink: 332 bytes leftover after parsing attributes in process `+}[@'. [ 118.715794][ T9026] netlink: '+}[@': attribute type 9 has an invalid length. [ 118.723080][ T9026] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 118.731775][ T9026] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 118.740955][ T8969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.753419][ T9028] netlink: 'syz.0.2142': attribute type 3 has an invalid length. [ 118.763850][ T8969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.788150][ T8969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.798831][ T8969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.820316][ T9032] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.829252][ T9032] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.838151][ T9032] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.847022][ T9032] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.856198][ T9032] geneve2: entered promiscuous mode [ 118.861466][ T9032] geneve2: entered allmulticast mode [ 118.869106][ T9032] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.878234][ T9032] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.887238][ T9032] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.896325][ T9032] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 118.946837][ T8969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.962904][ T8969] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.974938][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.982091][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.006325][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.013526][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.083133][ T8969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.174038][ T8969] veth0_vlan: entered promiscuous mode [ 119.190300][ T8969] veth1_vlan: entered promiscuous mode [ 119.209818][ T8969] veth0_macvtap: entered promiscuous mode [ 119.219887][ T8969] veth1_macvtap: entered promiscuous mode [ 119.223495][ T5275] hid-generic 0000:0000:0000.0009: unknown main item tag 0x7 [ 119.232664][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.233260][ T5275] hid-generic 0000:0000:0000.0009: ignoring exceeding usage max [ 119.243571][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.255556][ T5275] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 119.261344][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.279344][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.284344][ T5275] hid-generic 0000:0000:0000.0009: unknown main item tag 0x6 [ 119.289245][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.289264][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.289278][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.289291][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.296692][ T5275] hid-generic 0000:0000:0000.0009: unknown main item tag 0xd [ 119.311698][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.317899][ T5275] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 119.330184][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.372565][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.382877][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.393427][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.394915][ T9073] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2162'. [ 119.403345][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.412540][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 119.422876][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.442106][ T8969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.452725][ T8969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.465034][ T8969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.479290][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2162'. [ 119.490148][ T9073] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 119.506237][ T9076] IPVS: Error joining to the multicast group [ 119.514910][ T8969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.523768][ T8969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.532535][ T8969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.541356][ T8969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.600927][ T9083] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2174'. [ 119.610175][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2174'. [ 119.633674][ T9083] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 119.666431][ T36] ================================================================== [ 119.674694][ T36] BUG: KCSAN: data-race in ppp_asynctty_receive / tty_set_termios [ 119.678452][ T9085] vlan2: entered allmulticast mode [ 119.682527][ T36] [ 119.682537][ T36] write to 0xffff88811246e521 of 1 bytes by task 9087 on cpu 0: [ 119.682555][ T36] tty_set_termios+0x480/0x8b0 [ 119.682584][ T36] set_termios+0x497/0x4e0 [ 119.706846][ T36] tty_mode_ioctl+0x391/0x5d0 [ 119.711551][ T36] ppp_asynctty_ioctl+0x21f/0x2e0 [ 119.716587][ T36] tty_ioctl+0x87a/0xbe0 [ 119.720860][ T36] __se_sys_ioctl+0xcd/0x140 [ 119.725470][ T36] __x64_sys_ioctl+0x43/0x50 [ 119.730087][ T36] x64_sys_call+0x15cc/0x2d60 [ 119.734778][ T36] do_syscall_64+0xc9/0x1c0 [ 119.739384][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.745293][ T36] [ 119.747628][ T36] read to 0xffff88811246e521 of 1 bytes by task 36 on cpu 1: [ 119.755008][ T36] ppp_asynctty_receive+0x785/0x1050 [ 119.760303][ T36] tty_ldisc_receive_buf+0xd9/0x100 [ 119.765508][ T36] tty_port_default_receive_buf+0x59/0x90 [ 119.771255][ T36] flush_to_ldisc+0x1ce/0x410 [ 119.775936][ T36] process_scheduled_works+0x483/0x9a0 [ 119.781417][ T36] worker_thread+0x51d/0x6f0 [ 119.786013][ T36] kthread+0x1d1/0x210 [ 119.790091][ T36] ret_from_fork+0x4b/0x60 [ 119.794521][ T36] ret_from_fork_asm+0x1a/0x30 [ 119.799299][ T36] [ 119.801619][ T36] value changed: 0x11 -> 0x00 [ 119.806378][ T36] [ 119.808700][ T36] Reported by Kernel Concurrency Sanitizer on: [ 119.814855][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 119.826674][ T36] Tainted: [W]=WARN [ 119.830475][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.840546][ T36] Workqueue: events_unbound flush_to_ldisc [ 119.846369][ T36] ================================================================== [ 120.023809][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 122.937759][ T3572] usb 3-1: enqueue for inactive port 0 [ 122.943274][ T3572] usb 3-1: enqueue for inactive port 0 [ 123.017747][ T3572] vhci_hcd: vhci_device speed not set