last executing test programs: 1.406945827s ago: executing program 0 (id=1678): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xa}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r3, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[], 0x2000011a) 1.405595447s ago: executing program 0 (id=1681): syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r0) 838.978811ms ago: executing program 0 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000980)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r2 = open(&(0x7f0000000040)='./file1\x00', 0x181681, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 836.083011ms ago: executing program 0 (id=1724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 819.650482ms ago: executing program 0 (id=1726): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 789.598665ms ago: executing program 0 (id=1728): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read$msr(r0, &(0x7f0000000680)=""/141, 0x8d) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x803, 0x4) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendto$inet6(r1, &(0x7f0000001480)="7800000018002507b9199b02ffff48000203be0402d6d8935a06022509b15c6869a92393eb253016a4160d0a0000000d0085a268d0bf46d32345653600648d040012000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160015000a00000f872e6972d8a8729b2e", 0x78, 0x0, 0x0, 0x0) 788.273365ms ago: executing program 1 (id=1730): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) 765.307368ms ago: executing program 1 (id=1732): fremovexattr(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) msgget$private(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x1308802, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000}) msgsnd(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x47, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 711.033043ms ago: executing program 2 (id=1738): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) r3 = dup(r2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="021300000300000000000000c18388b801"], 0x18}}, 0x0) 654.991538ms ago: executing program 2 (id=1739): open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 654.630598ms ago: executing program 2 (id=1740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200810, &(0x7f0000000c00), 0x1, 0x4a6, &(0x7f0000000580)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) 654.339618ms ago: executing program 2 (id=1741): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0042, &(0x7f0000000040)={[{}, {@resgid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7e}}, {@noload}, {@inode_readahead_blks}, {@nombcache}]}, 0x1, 0x480, &(0x7f00000004c0)="$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") r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 635.01224ms ago: executing program 1 (id=1742): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x4, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 632.41856ms ago: executing program 2 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0xe, 0x6, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 601.354843ms ago: executing program 2 (id=1746): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) r3 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$UHID_DESTROY(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) 554.973367ms ago: executing program 1 (id=1747): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x400, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 553.971397ms ago: executing program 1 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 553.486328ms ago: executing program 1 (id=1749): bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 402.091162ms ago: executing program 3 (id=1754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS+hTa2qUtpvTH57OEe8+59+TyfQL/a/HwU7PZjIUQmom/f/r7s/xEsXdqbHomhFiYDyHkv/n610os6vjt1otoXYrWxUSmdnA7/nrWcdf3UE0dxaP6ZTyEH0IIS0/HyX/7Nr5857nr5MbmSmFrLbf4WFh/Hl4YyPds55d3Rw6z5dnu7Fz0YV3GWzM/VRs9uW+WXvbaB9uqtUbmJupLxz5nPv+tP+e/31WpVxqT/aerQ+nO+lV5J8r9Tf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnO89dJzc2Vwpba7nFx8L68/DCQL5nO7+8O3KYLc92Z+fi732X8dbMT9VGT+6bpZe99sG2aq2RuYn60rEPR7/78XP+Ei30bfhj/vtdlXqlMdl/ujqU7qxflXei3N8+5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JfyE8XeqbHpmRBiYT6EMB7vOP5lv5l4r8eivovotxTtFxOZ2sHt+OtZx13fQzV1NJUIIfG7e5eejpNftfIh/CM/BwAA//8514ZQ") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 389.728683ms ago: executing program 3 (id=1757): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0x1e8, 0x1e8, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff, 0xffffffff], 'veth0_to_team\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x8, 0x1, 0x0, 0x0, "e306d9b47d8f0c9a63df368495cc0aa9e0359b9651d2a7677686754dd7c80767b42b6f28911cf4cf87803dcfb2128d1141a48e0257801a3ed971613d4dcbd69a"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0x0, 0x0, 0x3}, {0x4, 0x2, 0x1}, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 373.340024ms ago: executing program 3 (id=1759): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x23, @vifc_lcl_addr=@private=0xa010100, @multicast1=0xe0000300}, 0x10) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 322.651589ms ago: executing program 3 (id=1761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x400000000}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 322.322319ms ago: executing program 3 (id=1762): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 309.794341ms ago: executing program 3 (id=1763): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 166.743804ms ago: executing program 4 (id=1768): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 57.257754ms ago: executing program 4 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa32"], 0xfdef) 3.022489ms ago: executing program 4 (id=1770): io_setup(0x7fffffff, &(0x7f00000000c0)) unshare(0x20020000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 2.557289ms ago: executing program 4 (id=1771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x43, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.255519ms ago: executing program 4 (id=1772): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000017c0)=""/258, 0x102, 0x20, 0x0, 0x0) 0s ago: executing program 4 (id=1773): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = dup3(r1, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) kernel console output (not intermixed with test programs): [ 42.283063][ T29] audit: type=1400 audit(1727418237.791:454): avc: denied { read write } for pid=3993 comm="syz.3.148" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.306441][ T29] audit: type=1400 audit(1727418237.791:455): avc: denied { open } for pid=3993 comm="syz.3.148" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.329776][ T29] audit: type=1400 audit(1727418237.791:456): avc: denied { ioctl } for pid=3993 comm="syz.3.148" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.356272][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.365613][ T999] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.414619][ T3992] syzkaller0: entered promiscuous mode [ 42.420233][ T3992] syzkaller0: entered allmulticast mode [ 42.456207][ T4002] erspan0: entered promiscuous mode [ 42.464480][ T4002] erspan0: left promiscuous mode [ 42.551418][ T29] audit: type=1400 audit(1727418238.091:457): avc: denied { read } for pid=4014 comm="syz.4.150" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.780105][ T4041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.974542][ T4071] loop0: detected capacity change from 0 to 128 [ 43.042664][ T4071] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.042833][ T4079] netlink: 'syz.4.167': attribute type 298 has an invalid length. [ 43.075448][ T4071] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.148312][ T3532] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.336095][ T4096] loop0: detected capacity change from 0 to 2048 [ 43.388726][ T4096] loop0: p3 < > p4 < > [ 43.393016][ T4096] loop0: partition table partially beyond EOD, truncated [ 43.405600][ T4096] loop0: p3 start 4284289 is beyond EOD, truncated [ 43.431966][ T2967] loop0: p3 < > p4 < > [ 43.436183][ T2967] loop0: partition table partially beyond EOD, truncated [ 43.445741][ T2967] loop0: p3 start 4284289 is beyond EOD, truncated [ 43.723179][ T4124] sd 0:0:1:0: device reset [ 43.823076][ T4130] netlink: 256 bytes leftover after parsing attributes in process `syz.3.188'. [ 44.255818][ T4189] loop1: detected capacity change from 0 to 2048 [ 44.302756][ T4189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.389086][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.401282][ T4213] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.487827][ T4222] loop0: detected capacity change from 0 to 512 [ 44.495090][ T4222] EXT4-fs: quotafile must be on filesystem root [ 44.611893][ T4231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'. [ 44.707492][ T4242] syz.0.223[4242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.707555][ T4242] syz.0.223[4242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.719030][ T4242] syz.0.223[4242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.748276][ T4238] loop4: detected capacity change from 0 to 512 [ 44.778879][ T4242] hub 6-0:1.0: USB hub found [ 44.785632][ T4242] hub 6-0:1.0: 8 ports detected [ 44.793815][ T4238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.806496][ T4238] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.881130][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.449423][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.456873][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.464300][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.471755][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.479257][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.486781][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.494312][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.501751][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.509268][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.516710][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.524136][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.531763][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.539250][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.546678][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.554239][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.561673][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.569237][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.576640][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.584232][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.591674][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.599084][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.606673][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.615884][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 45.658804][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.667759][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.676692][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.685550][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 45.710625][ T4306] loop1: detected capacity change from 0 to 512 [ 45.731735][ T4302] geneve2: entered promiscuous mode [ 45.737021][ T4302] geneve2: entered allmulticast mode [ 45.980269][ T4306] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.994488][ T4306] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.019826][ T3515] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 46.062576][ T4322] loop1: detected capacity change from 0 to 1024 [ 46.073188][ T4322] ======================================================= [ 46.073188][ T4322] WARNING: The mand mount option has been deprecated and [ 46.073188][ T4322] and is ignored by this kernel. Remove the mand [ 46.073188][ T4322] option from the mount to silence this warning. [ 46.073188][ T4322] ======================================================= [ 46.113231][ T4322] EXT4-fs: Ignoring removed nobh option [ 46.191508][ T4324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.259'. [ 46.237274][ T4322] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #2: comm syz.1.258: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 46.256251][ T4322] EXT4-fs (loop1): get root inode failed [ 46.262031][ T4322] EXT4-fs (loop1): mount failed [ 46.298467][ T4322] loop1: detected capacity change from 0 to 2048 [ 46.331506][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.357606][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.420415][ T4334] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 46.455850][ T4336] loop1: detected capacity change from 0 to 512 [ 46.464887][ T4336] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 46.497450][ T4336] serio: Serial port ptm0 [ 46.663667][ T4344] loop1: detected capacity change from 0 to 512 [ 46.676418][ T4344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.688145][ T4344] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.701845][ T4344] EXT4-fs (loop1): 1 truncate cleaned up [ 46.710626][ T4344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.746344][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.810821][ T4349] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.829135][ T4349] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.902304][ T4347] loop1: detected capacity change from 0 to 512 [ 46.913437][ T4347] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.945230][ T4347] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.267: invalid indirect mapped block 4294967295 (level 0) [ 46.999783][ T4347] EXT4-fs (loop1): Remounting filesystem read-only [ 47.006513][ T4347] EXT4-fs (loop1): 1 orphan inode deleted [ 47.012656][ T4347] EXT4-fs (loop1): 1 truncate cleaned up [ 47.038190][ T4347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.050989][ T4347] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 47.059977][ T4347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.095748][ T4362] loop4: detected capacity change from 0 to 2048 [ 47.126392][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 47.144310][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 47.193082][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 47.193100][ T29] audit: type=1400 audit(1727418242.641:614): avc: denied { map } for pid=4359 comm="syz.0.272" path="socket:[5924]" dev="sockfs" ino=5924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 47.226559][ T4366] hub 2-0:1.0: USB hub found [ 47.231312][ T4366] hub 2-0:1.0: 8 ports detected [ 47.307273][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.325628][ T29] audit: type=1400 audit(1727418242.861:615): avc: denied { getopt } for pid=4361 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.356524][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.406333][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.413657][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.431089][ T4376] bridge0: entered allmulticast mode [ 47.442274][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.449483][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.460343][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.467510][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.475059][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.482126][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.491531][ T4376] bridge0: entered promiscuous mode [ 47.591984][ T4384] tipc: Started in network mode [ 47.596981][ T4384] tipc: Node identity 1, cluster identity 4711 [ 47.603543][ T4384] tipc: Node number set to 1 [ 47.864215][ T4401] loop1: detected capacity change from 0 to 2048 [ 47.873584][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.923975][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.927516][ T29] audit: type=1400 audit(1727418243.461:616): avc: denied { nlmsg_write } for pid=4404 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 47.953987][ T29] audit: type=1326 audit(1727418243.461:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72f7bdf39 code=0x7ffc0000 [ 47.977345][ T29] audit: type=1326 audit(1727418243.461:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72f7bdf39 code=0x7ffc0000 [ 48.003012][ T29] audit: type=1326 audit(1727418243.541:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa72f7bdf39 code=0x7ffc0000 [ 48.026448][ T29] audit: type=1326 audit(1727418243.541:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72f7bdf39 code=0x7ffc0000 [ 48.050019][ T29] audit: type=1326 audit(1727418243.541:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72f7bdf39 code=0x7ffc0000 [ 48.074087][ T29] audit: type=1400 audit(1727418243.611:622): avc: denied { getopt } for pid=4409 comm="syz.4.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.095692][ T29] audit: type=1326 audit(1727418243.631:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fa72f7bdf39 code=0x7ffc0000 [ 48.145545][ T4414] syzkaller0: entered promiscuous mode [ 48.151214][ T4414] syzkaller0: entered allmulticast mode [ 48.368383][ T4425] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 48.400978][ T4416] loop0: detected capacity change from 0 to 512 [ 48.413244][ T4416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.437575][ T4416] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.297: invalid indirect mapped block 4294967295 (level 0) [ 48.455223][ T4416] EXT4-fs (loop0): Remounting filesystem read-only [ 48.462042][ T4416] EXT4-fs (loop0): 1 orphan inode deleted [ 48.467786][ T4416] EXT4-fs (loop0): 1 truncate cleaned up [ 48.474003][ T4416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.488117][ T4416] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 48.507653][ T4416] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.800609][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.807947][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.815816][ T4462] bridge0: entered allmulticast mode [ 48.826579][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.833690][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.844247][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.851339][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.858687][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.865907][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.875829][ T4462] bridge0: entered promiscuous mode [ 49.037559][ T4474] syzkaller0: entered promiscuous mode [ 49.043142][ T4474] syzkaller0: entered allmulticast mode [ 49.070144][ T4479] loop4: detected capacity change from 0 to 512 [ 49.076952][ T4479] EXT4-fs: Ignoring removed bh option [ 49.082475][ T4479] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.102563][ T4479] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.324: invalid block [ 49.116042][ T4479] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.324: couldn't read orphan inode 15 (err -117) [ 49.128573][ T4479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.167502][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.210477][ T4486] syz.3.327[4486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.210559][ T4486] syz.3.327[4486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.229897][ T4486] syz.3.327[4486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.248914][ T4486] syz.3.327[4486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.267731][ T4486] syz.3.327[4486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.279195][ T4486] syz.3.327[4486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.310264][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 49.329526][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 49.337256][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.345235][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.353048][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.360921][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.368737][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.376406][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.384124][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.391807][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.399641][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.407300][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.415182][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.422959][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.430636][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.438288][ T3341] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x0 [ 49.447805][ T3341] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 49.481855][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 49.623754][ T4512] loop0: detected capacity change from 0 to 512 [ 49.639597][ T4512] EXT4-fs: Ignoring removed i_version option [ 49.645746][ T4512] EXT4-fs: Ignoring removed nobh option [ 49.655532][ T4512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.667897][ T4512] EXT4-fs (loop0): 1 truncate cleaned up [ 49.676358][ T4512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.701125][ T4512] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 49.724750][ T3532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.839673][ T4523] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.896639][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 49.977558][ T4537] bond_slave_0: entered promiscuous mode [ 49.983372][ T4537] bond_slave_1: entered promiscuous mode [ 49.991248][ T4537] bond_slave_0: left promiscuous mode [ 49.996668][ T4537] bond_slave_1: left promiscuous mode [ 50.036995][ T4542] loop0: detected capacity change from 0 to 1024 [ 50.043890][ T4542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.070696][ T4542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.097037][ T3532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.649936][ T4591] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 50.709219][ T4593] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 50.732446][ T4597] loop4: detected capacity change from 0 to 164 [ 50.747701][ T4597] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 50.798765][ T4603] loop4: detected capacity change from 0 to 512 [ 50.808776][ T4603] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.852909][ T4603] EXT4-fs (loop4): 1 truncate cleaned up [ 50.859879][ T4603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.208376][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.413519][ T4632] netlink: 'syz.3.390': attribute type 2 has an invalid length. [ 51.824664][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 52.120185][ T4696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 52.163281][ T4701] loop0: detected capacity change from 0 to 764 [ 52.165666][ T4699] loop4: detected capacity change from 0 to 1024 [ 52.177276][ T3651] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.195967][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.207734][ T4699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.210137][ T4676] chnl_net:caif_netlink_parms(): no params data found [ 52.244985][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 52.244999][ T29] audit: type=1400 audit(1727418247.781:721): avc: denied { create } for pid=4698 comm="syz.4.417" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.254755][ T4707] loop1: detected capacity change from 0 to 512 [ 52.271611][ T29] audit: type=1400 audit(1727418247.781:722): avc: denied { create } for pid=4698 comm="syz.4.417" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 52.271647][ T29] audit: type=1400 audit(1727418247.781:723): avc: denied { rmdir } for pid=4698 comm="syz.4.417" name="control" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.285666][ T4707] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.333015][ T3273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.346846][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.376723][ T4707] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.418: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 52.394974][ T4707] EXT4-fs (loop1): Remounting filesystem read-only [ 52.401804][ T4707] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 52.416918][ T4707] EXT4-fs (loop1): mount failed [ 52.442129][ T4716] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 52.454078][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.466774][ T4722] loop0: detected capacity change from 0 to 512 [ 52.474472][ T4722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.484625][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.492312][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.492526][ T4722] EXT4-fs (loop0): 1 truncate cleaned up [ 52.499855][ T4676] bridge_slave_0: entered allmulticast mode [ 52.511728][ T4676] bridge_slave_0: entered promiscuous mode [ 52.518222][ T4722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.519108][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.537576][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.544959][ T4676] bridge_slave_1: entered allmulticast mode [ 52.552436][ T4676] bridge_slave_1: entered promiscuous mode [ 52.559863][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 52.578755][ T29] audit: type=1326 audit(1727418248.111:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4727 comm="syz.1.425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x0 [ 52.612308][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.625325][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 52.689618][ T4676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.718040][ T4676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.745755][ T3532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.756631][ T56] bridge_slave_1: left allmulticast mode [ 52.762419][ T56] bridge_slave_1: left promiscuous mode [ 52.768118][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.778251][ T56] bridge_slave_0: left allmulticast mode [ 52.784049][ T56] bridge_slave_0: left promiscuous mode [ 52.789940][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.821717][ T4737] loop0: detected capacity change from 0 to 1024 [ 52.847334][ T4742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 52.860957][ T4742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 52.861546][ T4737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.893351][ T4742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 52.902783][ T4742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 52.904059][ T3532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.923536][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.933768][ T4747] loop0: detected capacity change from 0 to 128 [ 52.942110][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.953302][ T56] bond0 (unregistering): Released all slaves [ 52.961132][ T4742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 52.974807][ T4676] team0: Port device team_slave_0 added [ 52.981297][ T4747] syz.0.432: attempt to access beyond end of device [ 52.981297][ T4747] loop0: rw=0, sector=121, nr_sectors = 120 limit=128 [ 53.001818][ T4676] team0: Port device team_slave_1 added [ 53.009606][ T56] hsr_slave_0: left promiscuous mode [ 53.016293][ T56] hsr_slave_1: left promiscuous mode [ 53.028650][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.036205][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.044202][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.044971][ T50] kworker/u8:3: attempt to access beyond end of device [ 53.044971][ T50] loop0: rw=1, sector=241, nr_sectors = 800 limit=128 [ 53.051696][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.075609][ T56] veth1_macvtap: left promiscuous mode [ 53.081216][ T56] veth0_macvtap: left promiscuous mode [ 53.086744][ T56] veth1_vlan: left promiscuous mode [ 53.092062][ T56] veth0_vlan: left promiscuous mode [ 53.130482][ T29] audit: type=1326 audit(1727418248.671:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7fbbdf39 code=0x7ffc0000 [ 53.153802][ T29] audit: type=1326 audit(1727418248.671:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7fbbdf39 code=0x7ffc0000 [ 53.186711][ T29] audit: type=1326 audit(1727418248.671:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0a7fbbdf39 code=0x7ffc0000 [ 53.210280][ T29] audit: type=1326 audit(1727418248.671:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7fbbdf39 code=0x7ffc0000 [ 53.225953][ T4761] loop0: detected capacity change from 0 to 1024 [ 53.233548][ T29] audit: type=1326 audit(1727418248.671:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4757 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a7fbbdf39 code=0x7ffc0000 [ 53.242461][ T4761] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 53.274482][ T4761] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 53.285382][ T4761] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.295623][ T4761] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 53.338688][ T56] team0 (unregistering): Port device team_slave_1 removed [ 53.350837][ T56] team0 (unregistering): Port device team_slave_0 removed [ 53.402642][ T4763] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 53.433832][ T4769] loop1: detected capacity change from 0 to 512 [ 53.441148][ T4769] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.453891][ T4769] EXT4-fs (loop1): 1 truncate cleaned up [ 53.462089][ T4769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.577348][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.584456][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.610762][ T4676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.637651][ T4775] loop0: detected capacity change from 0 to 1024 [ 53.650388][ T4775] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.674742][ T4775] JBD2: no valid journal superblock found [ 53.680681][ T4775] EXT4-fs (loop0): Could not load journal inode [ 53.687634][ T4676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.694646][ T4676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.720722][ T4676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.785186][ T4676] hsr_slave_0: entered promiscuous mode [ 53.792700][ T4676] hsr_slave_1: entered promiscuous mode [ 53.864635][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.051812][ T29] audit: type=1400 audit(1727418249.591:730): avc: denied { map } for pid=4806 comm="syz.4.455" path="socket:[8763]" dev="sockfs" ino=8763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.142584][ T4676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.151591][ T4676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.160974][ T4676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.170606][ T4676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.205514][ T4676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.217772][ T4676] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.227775][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.234885][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.246361][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.253722][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.316998][ T4676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.384483][ T4676] veth0_vlan: entered promiscuous mode [ 54.392992][ T4676] veth1_vlan: entered promiscuous mode [ 54.409061][ T4676] veth0_macvtap: entered promiscuous mode [ 54.416542][ T4676] veth1_macvtap: entered promiscuous mode [ 54.427197][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.437707][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.447627][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.458112][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.468042][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.478699][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.488588][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.499070][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.510405][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.522035][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.532817][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.542737][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.553274][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.563228][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.574046][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.583890][ T4676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.594361][ T4676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.605485][ T4676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.615698][ T4676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.624555][ T4676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.633391][ T4676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.642196][ T4676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.681703][ T4821] unsupported nlmsg_type 40 [ 54.736130][ T4829] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 54.750628][ T4829] team0: Port device netdevsim1 added [ 54.766900][ T4829] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 54.946107][ T4851] loop2: detected capacity change from 0 to 128 [ 54.959300][ T4850] __nla_validate_parse: 4 callbacks suppressed [ 54.959314][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 55.067102][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'. [ 55.309637][ T4886] syz.2.483[4886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.309772][ T4886] syz.2.483[4886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.321455][ T4886] syz.2.483[4886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.399648][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 56.150005][ T4946] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 56.360989][ T4960] loop4: detected capacity change from 0 to 128 [ 56.367465][ T4962] loop2: detected capacity change from 0 to 1024 [ 56.374710][ T4962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.397144][ T4960] syz.4.516: attempt to access beyond end of device [ 56.397144][ T4960] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 56.422084][ T56] kworker/u8:4: attempt to access beyond end of device [ 56.422084][ T56] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 56.437140][ T4962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.474900][ T4676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.495120][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.503880][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.588250][ T8] kernel write not supported for file /vcsa1 (pid: 8 comm: kworker/0:0) [ 56.613280][ T4987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.622038][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.629991][ T4987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.637495][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.862054][ T4989] chnl_net:caif_netlink_parms(): no params data found [ 56.917093][ T5013] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.925966][ T4989] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.933274][ T4989] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.941406][ T4989] bridge_slave_0: entered allmulticast mode [ 56.948105][ T4989] bridge_slave_0: entered promiscuous mode [ 56.955025][ T4989] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.962154][ T4989] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.969685][ T4989] bridge_slave_1: entered allmulticast mode [ 56.976283][ T4989] bridge_slave_1: entered promiscuous mode [ 56.994070][ T4989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.005256][ T4989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.028605][ T4989] team0: Port device team_slave_0 added [ 57.035868][ T4989] team0: Port device team_slave_1 added [ 57.063095][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.070329][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.096341][ T4989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.108253][ T4989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.115317][ T4989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.141560][ T4989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.187799][ T5022] netlink: 140 bytes leftover after parsing attributes in process `syz.2.540'. [ 57.211753][ T4989] hsr_slave_0: entered promiscuous mode [ 57.218004][ T4989] hsr_slave_1: entered promiscuous mode [ 57.224300][ T4989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.237603][ T4989] Cannot create hsr debugfs directory [ 57.267009][ T5038] syz.2.546[5038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.267102][ T5038] syz.2.546[5038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.283871][ T5038] syz.2.546[5038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.371540][ T4989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.396069][ T5056] syz.2.556[5056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.396172][ T5056] syz.2.556[5056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.407757][ T5056] syz.2.556[5056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.445266][ T5059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.558'. [ 57.478369][ T4989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.518541][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 57.518560][ T29] audit: type=1326 audit(1727418253.051:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5064 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711707df39 code=0x7ffc0000 [ 57.548154][ T29] audit: type=1326 audit(1727418253.051:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5064 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711707df39 code=0x7ffc0000 [ 57.571625][ T29] audit: type=1326 audit(1727418253.051:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5064 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f711707df39 code=0x7ffc0000 [ 57.595143][ T29] audit: type=1326 audit(1727418253.051:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5064 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711707df39 code=0x7ffc0000 [ 57.621999][ T4989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.650252][ T29] audit: type=1400 audit(1727418253.191:776): avc: denied { write } for pid=5075 comm="syz.0.564" laddr=::1 lport=52958 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.678532][ T29] audit: type=1400 audit(1727418253.211:777): avc: denied { read } for pid=5075 comm="syz.0.564" laddr=::1 lport=20000 faddr=::1 fport=52958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 57.712307][ T4989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.760659][ T24] IPVS: starting estimator thread 0... [ 57.771235][ T4989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.792432][ T4989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.802776][ T4989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.811981][ T4989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.812450][ T5092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.827596][ T5092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.855963][ T29] audit: type=1400 audit(1727418253.391:778): avc: denied { mount } for pid=5097 comm="syz.0.582" name="/" dev="ramfs" ino=10642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.879617][ T5087] IPVS: using max 2448 ests per chain, 122400 per kthread [ 57.890740][ T4989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.899606][ T29] audit: type=1400 audit(1727418253.431:779): avc: denied { unmount } for pid=3532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.912863][ T4989] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.929050][ T29] audit: type=1400 audit(1727418253.461:780): avc: denied { bind } for pid=5101 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.942389][ T4989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.959723][ T4989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.972852][ T29] audit: type=1400 audit(1727418253.501:781): avc: denied { setopt } for pid=5101 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.004034][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.011345][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.021632][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.028837][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.115844][ T4989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.232117][ T4989] veth0_vlan: entered promiscuous mode [ 58.239865][ T11] bridge_slave_1: left allmulticast mode [ 58.245571][ T11] bridge_slave_1: left promiscuous mode [ 58.251479][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.259276][ T11] bridge_slave_0: left allmulticast mode [ 58.265303][ T11] bridge_slave_0: left promiscuous mode [ 58.271186][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.380983][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.410026][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.420975][ T11] bond0 (unregistering): Released all slaves [ 58.431945][ T4989] veth1_vlan: entered promiscuous mode [ 58.444782][ T4989] veth0_macvtap: entered promiscuous mode [ 58.461765][ T4989] veth1_macvtap: entered promiscuous mode [ 58.482248][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.492847][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.502803][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.513458][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.523382][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.533940][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.543820][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.554514][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.565509][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.573900][ T11] hsr_slave_0: left promiscuous mode [ 58.584121][ T11] hsr_slave_1: left promiscuous mode [ 58.591030][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.598521][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.621598][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.629160][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.640059][ T11] veth1_vlan: left promiscuous mode [ 58.645345][ T11] veth0_vlan: left promiscuous mode [ 58.798121][ T11] team0 (unregistering): Port device team_slave_1 removed [ 58.810956][ T11] team0 (unregistering): Port device team_slave_0 removed [ 58.876315][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.886926][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.897452][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.907983][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.918096][ T4989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.928752][ T4989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.944889][ T4989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.961709][ T4989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.970517][ T4989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.979410][ T4989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.988247][ T4989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.998453][ T5173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.006010][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.014312][ T5173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.021849][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.035596][ T3341] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 59.043425][ T3341] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 59.052562][ T3341] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 59.060755][ T3341] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 59.099303][ T5182] atomic_op ffff888102153128 conn xmit_atomic 0000000000000000 [ 59.182523][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 59.191621][ T5191] netlink: 'syz.4.604': attribute type 15 has an invalid length. [ 59.199746][ T5191] netlink: 'syz.4.604': attribute type 18 has an invalid length. [ 59.234361][ T5191] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 59.237136][ T999] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.243339][ T5191] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 59.243378][ T5191] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 59.250997][ T999] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.260295][ T5191] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 59.269527][ T999] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.293504][ T999] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.300996][ T999] rtc rtc0: __rtc_set_alarm: err=-22 [ 59.314321][ T5191] vxlan0: entered promiscuous mode [ 59.434406][ T5209] tipc: Started in network mode [ 59.439497][ T5209] tipc: Node identity 101, cluster identity 4711 [ 59.446009][ T5209] tipc: Node number set to 257 [ 59.470976][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.478659][ T5211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.486642][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.494492][ T5211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.650041][ T5235] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 59.806412][ T5274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.816302][ T5274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.826741][ T5274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.834746][ T5274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.070077][ T5323] loop4: detected capacity change from 0 to 512 [ 60.076683][ T5323] EXT4-fs: Ignoring removed bh option [ 60.106680][ T5323] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.643: invalid block [ 60.124801][ T5323] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.643: couldn't read orphan inode 15 (err -117) [ 60.141745][ T5323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.178157][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.227261][ T5347] rdma_op ffff88810d372580 conn xmit_rdma 0000000000000000 [ 61.169261][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.177025][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.204975][ T5371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.212441][ T5371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.290128][ T5394] netlink: 6 bytes leftover after parsing attributes in process `syz.1.668'. [ 61.341680][ T5402] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 61.919612][ T5426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.681'. [ 62.025248][ T5433] bond_slave_0: entered promiscuous mode [ 62.030967][ T5433] bond_slave_1: entered promiscuous mode [ 62.037591][ T5433] bond_slave_0: left promiscuous mode [ 62.043059][ T5433] bond_slave_1: left promiscuous mode [ 62.130279][ T5437] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 62.139475][ T5437] bond0: (slave bond_slave_0): Releasing backup interface [ 62.155480][ T999] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 62.167381][ T999] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.225304][ T5444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.234014][ T5444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.292266][ T5453] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 62.689756][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 62.689773][ T29] audit: type=1400 audit(1727418258.231:836): avc: denied { create } for pid=5494 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.795118][ T5502] Zero length message leads to an empty skb [ 62.872146][ T5507] loop4: detected capacity change from 0 to 512 [ 62.878621][ T29] audit: type=1326 audit(1727418258.411:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 62.902035][ T29] audit: type=1326 audit(1727418258.411:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 62.926099][ T5507] EXT4-fs: Ignoring removed i_version option [ 62.932592][ T5507] EXT4-fs: Ignoring removed nobh option [ 62.948035][ T5507] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.953551][ T5513] rdma_op ffff888118eb6980 conn xmit_rdma 0000000000000000 [ 62.961213][ T29] audit: type=1326 audit(1727418258.421:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 62.988919][ T29] audit: type=1326 audit(1727418258.421:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 63.012358][ T29] audit: type=1326 audit(1727418258.421:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 63.035892][ T29] audit: type=1326 audit(1727418258.421:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 63.036921][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 63.059667][ T29] audit: type=1326 audit(1727418258.421:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 63.068120][ T5518] netlink: 'syz.3.717': attribute type 15 has an invalid length. [ 63.068135][ T5518] netlink: 'syz.3.717': attribute type 18 has an invalid length. [ 63.071518][ T5518] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 63.091534][ T29] audit: type=1326 audit(1727418258.421:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 63.091567][ T29] audit: type=1326 audit(1727418258.421:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5508 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 63.094543][ T5507] EXT4-fs (loop4): 1 truncate cleaned up [ 63.099605][ T5518] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 63.107650][ T5507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.116077][ T5518] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 63.198453][ T5518] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 63.208047][ T5507] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 63.208870][ T5518] vxlan1: entered promiscuous mode [ 63.234289][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.352312][ T5540] loop4: detected capacity change from 0 to 1024 [ 63.359057][ T5540] EXT4-fs: Ignoring removed orlov option [ 63.364889][ T5540] EXT4-fs: Ignoring removed nobh option [ 63.380151][ T5540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.411900][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.453523][ T5530] chnl_net:caif_netlink_parms(): no params data found [ 63.488003][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 63.497498][ T5557] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 63.510052][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.517202][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.524546][ T5530] bridge_slave_0: entered allmulticast mode [ 63.531692][ T5530] bridge_slave_0: entered promiscuous mode [ 63.538907][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.546040][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.553413][ T5530] bridge_slave_1: entered allmulticast mode [ 63.559927][ T5530] bridge_slave_1: entered promiscuous mode [ 63.576884][ T5530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.587967][ T5530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.607069][ T5530] team0: Port device team_slave_0 added [ 63.613933][ T5530] team0: Port device team_slave_1 added [ 63.629257][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.636315][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.662537][ T5530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.673981][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.680991][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.707195][ T5530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.737023][ T5530] hsr_slave_0: entered promiscuous mode [ 63.743376][ T5530] hsr_slave_1: entered promiscuous mode [ 63.749613][ T5530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.757417][ T5530] Cannot create hsr debugfs directory [ 63.815513][ T5530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.826066][ T5530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 63.871597][ T5530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.882167][ T5530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 63.932108][ T5530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.942886][ T5530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 64.002428][ T5530] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.012925][ T5530] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 64.102719][ T5530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.129586][ T5530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.142136][ T5530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.152698][ T5530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.169890][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.177038][ T5530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.184466][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.191938][ T5530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.249568][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.280209][ T5586] sd 0:0:1:0: device reset [ 64.291053][ T5286] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.300314][ T5286] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.318584][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 64.327534][ T5588] netlink: 'syz.2.744': attribute type 15 has an invalid length. [ 64.335319][ T5588] netlink: 'syz.2.744': attribute type 18 has an invalid length. [ 64.346018][ T5588] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 64.349102][ T5592] sd 0:0:1:0: device reset [ 64.354865][ T5588] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 64.368152][ T5588] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 64.377148][ T5588] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 64.388856][ T5588] vxlan0: entered promiscuous mode [ 64.407128][ T5530] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.418273][ T5256] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.425449][ T5256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.438791][ T5256] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445928][ T5256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.483174][ T5601] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.553790][ T5530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.570802][ T5608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.582504][ T5608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.650771][ T5530] veth0_vlan: entered promiscuous mode [ 64.659536][ T5530] veth1_vlan: entered promiscuous mode [ 64.676312][ T5530] veth0_macvtap: entered promiscuous mode [ 64.684006][ T5530] veth1_macvtap: entered promiscuous mode [ 64.695374][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.707010][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.717055][ T5530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.726006][ T5530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.734809][ T5530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.743546][ T5530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.929939][ T5296] bridge_slave_1: left allmulticast mode [ 64.935661][ T5296] bridge_slave_1: left promiscuous mode [ 64.941655][ T5296] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.965458][ T5296] bridge_slave_0: left allmulticast mode [ 64.971267][ T5296] bridge_slave_0: left promiscuous mode [ 64.976939][ T5296] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.082513][ T5296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.093622][ T5296] bond0 (unregistering): Released all slaves [ 65.136668][ T5650] syzkaller0: entered promiscuous mode [ 65.142327][ T5650] syzkaller0: entered allmulticast mode [ 65.167935][ T5296] tipc: Left network mode [ 65.180989][ T5296] hsr_slave_0: left promiscuous mode [ 65.186891][ T5296] hsr_slave_1: left promiscuous mode [ 65.194657][ T5296] veth1_macvtap: left promiscuous mode [ 65.200366][ T5296] veth0_macvtap: left promiscuous mode [ 65.206348][ T5296] veth1_vlan: left promiscuous mode [ 65.211919][ T5296] veth0_vlan: left promiscuous mode [ 65.360855][ T5296] team0 (unregistering): Port device team_slave_1 removed [ 65.376730][ T5296] team0 (unregistering): Port device team_slave_0 removed [ 65.573504][ T5681] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 65.894381][ T5708] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5708 comm=syz.3.795 [ 66.141763][ T5730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.804'. [ 66.150897][ T5730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.804'. [ 66.501066][ T5766] loop4: detected capacity change from 0 to 1024 [ 66.507938][ T5766] EXT4-fs: Ignoring removed orlov option [ 66.513710][ T5766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.541945][ T5766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.557958][ T5766] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 66.577416][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.809647][ T5796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.816936][ T5796] IPv6: NLM_F_CREATE should be set when creating new route [ 66.934155][ T5811] process 'syz.2.837' launched './file1' with NULL argv: empty string added [ 67.028717][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 67.119428][ T5831] loop4: detected capacity change from 0 to 512 [ 67.126440][ T5831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.163015][ T5831] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c019, mo2=0002] [ 67.171266][ T5831] System zones: 0-2, 18-18, 34-35 [ 67.176896][ T5831] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 67.191696][ T5831] EXT4-fs (loop4): mount failed [ 67.224792][ T5848] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.847'. [ 68.022963][ T5870] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262207 (only 8 groups) [ 68.086563][ T5877] sd 0:0:1:0: device reset [ 68.181880][ T5890] loop0: detected capacity change from 0 to 256 [ 68.183658][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 68.183675][ T29] audit: type=1400 audit(1727418263.721:1035): avc: denied { read } for pid=5891 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.232491][ T5895] loop4: detected capacity change from 0 to 4096 [ 68.253913][ T5895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.274511][ T5900] loop0: detected capacity change from 0 to 4096 [ 68.296812][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.340763][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.428109][ T5913] sd 0:0:1:0: device reset [ 68.455734][ T5530] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.543487][ T5926] loop4: detected capacity change from 0 to 512 [ 68.558993][ T5926] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.882: corrupted in-inode xattr: invalid ea_ino [ 68.573211][ T5926] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.882: couldn't read orphan inode 12 (err -117) [ 68.637580][ T5926] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.671379][ T5926] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.882: Directory hole found for htree leaf block 0 [ 68.679818][ T5944] syzkaller0: entered promiscuous mode [ 68.689928][ T5944] syzkaller0: entered allmulticast mode [ 68.736464][ T4989] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 68.787894][ T29] audit: type=1326 audit(1727418264.321:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88c3cb4ee7 code=0x7ffc0000 [ 68.789047][ T5950] batadv0: entered promiscuous mode [ 68.811352][ T29] audit: type=1326 audit(1727418264.321:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88c3c598a9 code=0x7ffc0000 [ 68.839954][ T29] audit: type=1326 audit(1727418264.321:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f88c3cb4ee7 code=0x7ffc0000 [ 68.844493][ T5950] macsec1: entered promiscuous mode [ 68.863550][ T29] audit: type=1326 audit(1727418264.321:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88c3c598a9 code=0x7ffc0000 [ 68.892087][ T29] audit: type=1326 audit(1727418264.321:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 68.915815][ T29] audit: type=1326 audit(1727418264.321:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 68.941308][ T29] audit: type=1326 audit(1727418264.411:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 68.964579][ T29] audit: type=1326 audit(1727418264.411:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 68.988009][ T29] audit: type=1326 audit(1727418264.411:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5955 comm="syz.1.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c3cbdf39 code=0x7ffc0000 [ 69.014856][ T5950] batadv0: left promiscuous mode [ 69.200548][ T5979] loop0: detected capacity change from 0 to 512 [ 69.215775][ T5979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.234547][ T5979] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.256666][ T5983] loop4: detected capacity change from 0 to 2048 [ 69.271325][ T5983] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.287682][ T5530] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.300322][ T5983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.564533][ T5992] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.908: bg 0: block 234: padding at end of block bitmap is not set [ 69.579780][ T5992] EXT4-fs (loop4): Remounting filesystem read-only [ 69.600284][ T5983] EXT4-fs (loop4): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 69.676438][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 69.695638][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.752715][ T6012] sd 0:0:1:0: device reset [ 69.932836][ T6034] syz.1.930[6034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.933032][ T6034] syz.1.930[6034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.944674][ T6034] syz.1.930[6034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.034643][ T5292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.144759][ T5292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.192719][ T5292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.270419][ T5292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.313406][ T6067] tipc: Started in network mode [ 70.318463][ T6067] tipc: Node identity ac1414aa, cluster identity 4711 [ 70.325927][ T6067] tipc: Enabled bearer , priority 10 [ 70.335490][ T6067] tipc: Disabling bearer [ 70.370033][ T6052] chnl_net:caif_netlink_parms(): no params data found [ 70.408860][ T5292] bridge_slave_1: left allmulticast mode [ 70.415155][ T5292] bridge_slave_1: left promiscuous mode [ 70.420904][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.432745][ T5292] bridge_slave_0: left allmulticast mode [ 70.438523][ T5292] bridge_slave_0: left promiscuous mode [ 70.444290][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.483047][ T999] hid-generic 0000:0000:0000.0006: unknown main item tag 0x7 [ 70.490596][ T999] hid-generic 0000:0000:0000.0006: ignoring exceeding usage max [ 70.502271][ T999] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 70.510096][ T999] hid-generic 0000:0000:0000.0006: unknown main item tag 0x6 [ 70.517584][ T999] hid-generic 0000:0000:0000.0006: unknown main item tag 0xd [ 70.526699][ T999] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 70.571204][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.582092][ T5292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.593168][ T5292] bond0 (unregistering): Released all slaves [ 70.619488][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.626612][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.634652][ T6052] bridge_slave_0: entered allmulticast mode [ 70.641247][ T6052] bridge_slave_0: entered promiscuous mode [ 70.648224][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.655453][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.663003][ T6052] bridge_slave_1: entered allmulticast mode [ 70.669806][ T6052] bridge_slave_1: entered promiscuous mode [ 70.683104][ T5292] hsr_slave_0: left promiscuous mode [ 70.689801][ T5292] hsr_slave_1: left promiscuous mode [ 70.696812][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.704402][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.712430][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.719999][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.731029][ T5292] veth1_macvtap: left promiscuous mode [ 70.736575][ T5292] veth0_macvtap: left promiscuous mode [ 70.742129][ T5292] veth1_vlan: left promiscuous mode [ 70.747363][ T5292] veth0_vlan: left promiscuous mode [ 70.841783][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 70.852384][ T5292] team0 (unregistering): Port device team_slave_0 removed [ 70.896431][ T6052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.907292][ T6052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.928815][ T6052] team0: Port device team_slave_0 added [ 70.935620][ T6052] team0: Port device team_slave_1 added [ 70.956873][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.963916][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.990130][ T6052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.002052][ T6052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.009184][ T6052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.035326][ T6052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.061765][ T6052] hsr_slave_0: entered promiscuous mode [ 71.067821][ T6052] hsr_slave_1: entered promiscuous mode [ 71.076767][ T6052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.086163][ T6052] Cannot create hsr debugfs directory [ 71.141419][ T6107] veth0_vlan: entered allmulticast mode [ 71.202984][ T6111] hub 2-0:1.0: USB hub found [ 71.207869][ T6111] hub 2-0:1.0: 8 ports detected [ 71.237546][ T6107] veth0_vlan: left promiscuous mode [ 71.243632][ T6107] veth0_vlan: entered promiscuous mode [ 71.288873][ T6118] syz.3.963[6118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.288994][ T6118] syz.3.963[6118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.300612][ T6118] syz.3.963[6118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.478179][ T6052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.499013][ T6129] syz.1.967[6129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.499221][ T6129] syz.1.967[6129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.512576][ T6052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.518770][ T6129] syz.1.967[6129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.532704][ T6052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.560872][ T6052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.599494][ T6144] smc: net device lo applied user defined pnetid SYZ1 [ 71.606753][ T6144] smc: net device lo erased user defined pnetid SYZ1 [ 71.611345][ T6052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.626874][ T6052] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.659694][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.666894][ T5292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.687374][ T5306] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.694481][ T5306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.782645][ T6052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.872781][ T6052] veth0_vlan: entered promiscuous mode [ 71.888008][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.987'. [ 71.900447][ T6052] veth1_vlan: entered promiscuous mode [ 71.919471][ T6052] veth0_macvtap: entered promiscuous mode [ 71.927031][ T6052] veth1_macvtap: entered promiscuous mode [ 71.945195][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.964826][ T6052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.975742][ T6052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.984698][ T6052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.993571][ T6052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.002388][ T6052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.017305][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 72.091899][ T6210] loop0: detected capacity change from 0 to 512 [ 72.162425][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.175868][ T6201] syz.3.993[6201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.178702][ T6210] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.232043][ T6219] ALSA: seq fatal error: cannot create timer (-19) [ 72.278947][ T6052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.406842][ T6239] netlink: 'syz.1.1006': attribute type 3 has an invalid length. [ 72.557856][ T6256] syz.3.1013: attempt to access beyond end of device [ 72.557856][ T6256] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 72.696467][ T6275] ALSA: seq fatal error: cannot create timer (-22) [ 73.024011][ T6293] vlan2: entered allmulticast mode [ 73.105510][ T6301] loop4: detected capacity change from 0 to 256 [ 73.113392][ T6301] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.278605][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 73.278624][ T29] audit: type=1326 audit(1727418268.811:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f711707df39 code=0x7ffc0000 [ 73.310257][ T29] audit: type=1326 audit(1727418268.811:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.333607][ T29] audit: type=1326 audit(1727418268.811:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.356986][ T29] audit: type=1326 audit(1727418268.811:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.380481][ T29] audit: type=1326 audit(1727418268.811:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.404029][ T29] audit: type=1326 audit(1727418268.811:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.427443][ T29] audit: type=1326 audit(1727418268.811:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.451071][ T29] audit: type=1326 audit(1727418268.811:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.474578][ T29] audit: type=1326 audit(1727418268.811:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 73.499453][ T29] audit: type=1326 audit(1727418268.811:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71170198a9 code=0x7ffc0000 [ 74.510586][ T6323] netlink: 'syz.4.1045': attribute type 10 has an invalid length. [ 74.518515][ T6323] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1045'. [ 74.773738][ T6352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.782849][ T6352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.891884][ T6358] ip_vti0: entered promiscuous mode [ 74.897636][ T6358] vlan2: entered promiscuous mode [ 74.903470][ T6358] vlan2: entered allmulticast mode [ 74.908709][ T6358] ip_vti0: entered allmulticast mode [ 74.915567][ T6358] ip_vti0: left allmulticast mode [ 74.920806][ T6358] ip_vti0: left promiscuous mode [ 74.983158][ T6364] netlink: 'syz.1.1063': attribute type 7 has an invalid length. [ 74.991601][ T6364] netlink: 'syz.1.1063': attribute type 39 has an invalid length. [ 75.010405][ T6364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6364 comm=syz.1.1063 [ 75.023573][ T6364] netlink: 'syz.1.1063': attribute type 7 has an invalid length. [ 75.031601][ T6364] netlink: 'syz.1.1063': attribute type 39 has an invalid length. [ 75.155179][ T6370] bpf_get_probe_write_proto: 5 callbacks suppressed [ 75.155193][ T6370] syz.1.1066[6370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.161984][ T6370] syz.1.1066[6370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.173540][ T6370] syz.1.1066[6370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.379032][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'. [ 75.399403][ T6397] netlink: 'syz.4.1084': attribute type 7 has an invalid length. [ 75.420562][ T6397] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.429446][ T6397] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.438176][ T6397] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.446932][ T6397] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.477732][ T6397] vxlan1: entered promiscuous mode [ 75.561787][ T5292] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 76.166906][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1097'. [ 76.284328][ T6442] loop4: detected capacity change from 0 to 256 [ 76.326572][ T6447] netlink: 'syz.4.1095': attribute type 29 has an invalid length. [ 76.337691][ T6447] netlink: 'syz.4.1095': attribute type 29 has an invalid length. [ 76.346443][ T6447] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1095'. [ 76.355777][ T6447] unsupported nla_type 40 [ 76.490821][ T6469] syz.1.1105[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.490954][ T6469] syz.1.1105[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.502797][ T6469] syz.1.1105[6469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.649156][ T6485] veth0_vlan: entered allmulticast mode [ 76.690461][ T6485] veth0_vlan: left promiscuous mode [ 76.697545][ T6485] veth0_vlan: entered promiscuous mode [ 76.787468][ T6496] tipc: Started in network mode [ 76.792420][ T6496] tipc: Node identity ac1414aa, cluster identity 4711 [ 76.799536][ T6496] tipc: Enabled bearer , priority 10 [ 76.806962][ T6496] tipc: Disabling bearer [ 76.826773][ T6500] team0: Port device team_slave_0 removed [ 76.833842][ T6500] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 76.876302][ T6506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6506 comm=syz.1.1122 [ 76.958572][ T3328] kernel write not supported for file /input/event0 (pid: 3328 comm: kworker/1:2) [ 77.259870][ T6540] loop4: detected capacity change from 0 to 512 [ 77.286705][ T6540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.302506][ T6540] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.331155][ T4989] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.457423][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.464762][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.472567][ T6559] bridge0: entered allmulticast mode [ 77.482260][ T6559] bridge0: port 2(bridge_slave_1) entered listening state [ 77.494484][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.501623][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.510871][ T6559] bridge0: entered promiscuous mode [ 77.544917][ T6563] loop4: detected capacity change from 0 to 128 [ 77.553742][ T6563] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.566377][ T6563] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.614819][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 77.629482][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 77.644317][ T4989] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 77.658065][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 77.673943][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 77.693198][ T4989] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 77.706745][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 77.721293][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 77.735670][ T4989] EXT4-fs error (device loop4): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 77.749286][ T4989] EXT4-fs error (device loop4): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 77.927317][ T6576] syz.2.1151[6576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.927475][ T6576] syz.2.1151[6576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.939126][ T6576] syz.2.1151[6576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.992412][ T6566] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.014572][ T331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 78.025227][ T331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 78.035718][ T331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.103579][ T331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 78.114121][ T331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 78.124499][ T331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.174541][ T331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 78.185114][ T331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 78.195414][ T331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.252175][ T331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 78.262969][ T331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 78.273286][ T331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.287370][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 78.350082][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.357304][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.364892][ T6592] bridge_slave_0: entered allmulticast mode [ 78.371570][ T6592] bridge_slave_0: entered promiscuous mode [ 78.379062][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.386244][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.393650][ T6592] bridge_slave_1: entered allmulticast mode [ 78.400464][ T6592] bridge_slave_1: entered promiscuous mode [ 78.420596][ T6592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.431488][ T6592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.458851][ T6592] team0: Port device team_slave_0 added [ 78.465687][ T6592] team0: Port device team_slave_1 added [ 78.489567][ T331] bridge_slave_1: left promiscuous mode [ 78.495405][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.503644][ T331] bridge_slave_0: left allmulticast mode [ 78.509430][ T331] bridge_slave_0: left promiscuous mode [ 78.515291][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.622650][ T331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.634769][ T331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.647339][ T331] bond0 (unregistering): Released all slaves [ 78.657319][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.664445][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.690651][ T6592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.702720][ T6592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.709791][ T6592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.735942][ T6592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.773387][ T331] hsr_slave_0: left promiscuous mode [ 78.779322][ T331] hsr_slave_1: left promiscuous mode [ 78.786840][ T331] veth1_macvtap: left promiscuous mode [ 78.792585][ T331] veth0_macvtap: left promiscuous mode [ 78.798119][ T331] veth1_vlan: left promiscuous mode [ 78.803398][ T331] veth0_vlan: left promiscuous mode [ 78.891135][ T331] team0 (unregistering): Port device team_slave_1 removed [ 78.901910][ T331] team0 (unregistering): Port device team_slave_0 removed [ 78.928582][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 78.928598][ T29] audit: type=1326 audit(1727418274.461:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 78.958323][ T29] audit: type=1326 audit(1727418274.461:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 78.981919][ T29] audit: type=1326 audit(1727418274.461:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.005563][ T29] audit: type=1326 audit(1727418274.461:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.029237][ T29] audit: type=1326 audit(1727418274.471:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6623 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.064366][ T6592] hsr_slave_0: entered promiscuous mode [ 79.072328][ T6592] hsr_slave_1: entered promiscuous mode [ 79.078576][ T6592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.086212][ T6592] Cannot create hsr debugfs directory [ 79.272395][ T6642] syzkaller0: entered promiscuous mode [ 79.278160][ T6642] syzkaller0: entered allmulticast mode [ 79.281900][ T6643] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.323046][ T6645] ip_vti0: entered promiscuous mode [ 79.328376][ T6645] vlan2: entered promiscuous mode [ 79.335111][ T6645] ip_vti0: left promiscuous mode [ 79.393303][ T6649] loop0: detected capacity change from 0 to 128 [ 79.419763][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.428312][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.463522][ T6592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.472992][ T6592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.482234][ T6592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.491452][ T6592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.529331][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.541083][ T6592] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.553069][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.560255][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.571876][ T5306] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.578992][ T5306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.646422][ T6592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.764985][ T6592] veth0_vlan: entered promiscuous mode [ 79.773877][ T6592] veth1_vlan: entered promiscuous mode [ 79.780972][ T29] audit: type=1326 audit(1727418275.321:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.789171][ T6592] veth0_macvtap: entered promiscuous mode [ 79.816325][ T6592] veth1_macvtap: entered promiscuous mode [ 79.825559][ T29] audit: type=1326 audit(1727418275.351:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.849050][ T29] audit: type=1326 audit(1727418275.351:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.852470][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 79.872611][ T29] audit: type=1326 audit(1727418275.351:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.872647][ T29] audit: type=1326 audit(1727418275.351:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6672 comm="syz.2.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0b91df39 code=0x7ffc0000 [ 79.885598][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.941316][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.952001][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 79.954043][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.972755][ T6592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.983938][ T6592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.995122][ T6592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.007916][ T6592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.016758][ T6592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.025606][ T6592] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.034607][ T6592] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.059610][ T6679] team0: Device ipvlan1 failed to register rx_handler [ 80.162839][ T6695] netlink: 2024 bytes leftover after parsing attributes in process `syz.1.1183'. [ 80.172104][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1183'. [ 80.326092][ T6709] syz.2.1192[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.326154][ T6709] syz.2.1192[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.338077][ T6709] syz.2.1192[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.388897][ T6718] syz.3.1197[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.401002][ T6718] syz.3.1197[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.413473][ T6718] syz.3.1197[6718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.579490][ T6731] syzkaller0: entered promiscuous mode [ 80.596392][ T6731] syzkaller0: entered allmulticast mode [ 81.452678][ T6757] loop4: detected capacity change from 0 to 1024 [ 81.459982][ T6757] EXT4-fs: Ignoring removed orlov option [ 81.465683][ T6757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.483182][ T6757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.511227][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.644714][ T6764] vlan2: entered allmulticast mode [ 81.712623][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'. [ 81.738388][ T6769] dccp_close: ABORT with 4 bytes unread [ 81.785122][ T6745] syz.1.1206 (6745) used greatest stack depth: 9712 bytes left [ 82.043045][ T6787] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 82.233717][ T6803] loop4: detected capacity change from 0 to 1024 [ 82.255044][ T6803] EXT4-fs: Ignoring removed orlov option [ 82.260986][ T6803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.282836][ T6803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.313320][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.851591][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.859963][ T6823] loop0: detected capacity change from 0 to 2048 [ 82.860282][ T6823] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.874619][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.884560][ T6823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.069075][ T6823] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1234: bg 0: block 234: padding at end of block bitmap is not set [ 83.083787][ T6823] EXT4-fs (loop0): Remounting filesystem read-only [ 83.098400][ T6830] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 83.231135][ T6052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.232861][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 83.249667][ T6843] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 83.371581][ T6857] ip_vti0: entered promiscuous mode [ 83.376954][ T6857] vlan2: entered promiscuous mode [ 83.383924][ T6857] ip_vti0: left promiscuous mode [ 83.461944][ T3328] kernel write not supported for file /input/event0 (pid: 3328 comm: kworker/1:2) [ 83.493680][ T6869] dccp_close: ABORT with 4 bytes unread [ 83.561819][ T6881] hub 2-0:1.0: USB hub found [ 83.566715][ T6881] hub 2-0:1.0: 8 ports detected [ 83.592701][ T6884] SELinux: security_context_str_to_sid () failed with errno=-22 [ 83.617689][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.626504][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.213860][ T24] kernel write not supported for file /input/event0 (pid: 24 comm: kworker/1:0) [ 84.247107][ T6903] ip_vti0: entered promiscuous mode [ 84.252896][ T6903] vlan2: entered promiscuous mode [ 84.266219][ T6903] ip_vti0: left promiscuous mode [ 84.307322][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 84.307340][ T29] audit: type=1326 audit(1727418279.841:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.346738][ T6914] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 84.350696][ T29] audit: type=1326 audit(1727418279.871:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.378692][ T29] audit: type=1326 audit(1727418279.871:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.402875][ T29] audit: type=1326 audit(1727418279.871:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.426505][ T29] audit: type=1326 audit(1727418279.871:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.450171][ T29] audit: type=1326 audit(1727418279.881:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.473649][ T29] audit: type=1326 audit(1727418279.881:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.497557][ T29] audit: type=1326 audit(1727418279.881:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.521100][ T29] audit: type=1326 audit(1727418279.881:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.544792][ T29] audit: type=1326 audit(1727418279.881:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.4.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3d2efbdf39 code=0x7ffc0000 [ 84.608116][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.619811][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.738460][ T6948] ip_vti0: entered promiscuous mode [ 84.743738][ T6948] vlan2: entered promiscuous mode [ 84.750048][ T6948] ip_vti0: left promiscuous mode [ 84.912801][ T5292] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 85.258367][ T3328] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 85.266115][ T3328] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 85.266867][ T6980] sd 0:0:1:0: device reset [ 85.279273][ T3328] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 85.366958][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1303'. [ 85.408579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.418903][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.467861][ T7000] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 85.501068][ T7000] netlink: 'syz.2.1307': attribute type 17 has an invalid length. [ 85.583604][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 85.604777][ T7017] loop4: detected capacity change from 0 to 512 [ 85.634571][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.647374][ T7017] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.658498][ T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.668255][ T7017] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.1314: corrupted inode contents [ 85.680372][ T7017] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #19: comm syz.4.1314: mark_inode_dirty error [ 85.692115][ T7017] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #19: comm syz.4.1314: corrupted inode contents [ 85.704299][ T7017] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3005: inode #19: comm syz.4.1314: mark_inode_dirty error [ 85.716585][ T7017] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3008: inode #19: comm syz.4.1314: mark inode dirty (error -117) [ 85.729429][ T7017] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 85.747070][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.780832][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.814305][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.839057][ T3328] kernel write not supported for file /input/event0 (pid: 3328 comm: kworker/1:2) [ 85.846755][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.863255][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.872362][ T7034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.882619][ T7035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.026774][ T7056] loop0: detected capacity change from 0 to 2048 [ 86.052334][ T7056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.081263][ T7056] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.097092][ T7056] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 86.109557][ T7056] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.109557][ T7056] [ 86.119256][ T7056] EXT4-fs (loop0): Total free blocks count 0 [ 86.125280][ T7056] EXT4-fs (loop0): Free/Dirty block details [ 86.131257][ T7056] EXT4-fs (loop0): free_blocks=2415919104 [ 86.136991][ T7056] EXT4-fs (loop0): dirty_blocks=16 [ 86.142167][ T7056] EXT4-fs (loop0): Block reservation details [ 86.148148][ T7056] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 86.187054][ T7056] syz.0.1332 (7056) used greatest stack depth: 9552 bytes left [ 86.195948][ T6052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.230809][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 86.271211][ T7080] loop0: detected capacity change from 0 to 512 [ 86.279574][ T7080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.292514][ T7080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 86.308479][ T7080] System zones: 1-12 [ 86.316389][ T7080] EXT4-fs (loop0): 1 truncate cleaned up [ 86.328791][ T7080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.373621][ T6052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.990782][ T7120] syz.4.1358[7120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.990877][ T7120] syz.4.1358[7120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.003115][ T7120] syz.4.1358[7120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.226700][ T7152] 9pnet_fd: Insufficient options for proto=fd [ 87.443511][ T7176] syz.3.1392[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.443579][ T7176] syz.3.1392[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.455160][ T7176] syz.3.1392[7176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.575555][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.602341][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.907673][ T7234] loop1: detected capacity change from 0 to 512 [ 87.914807][ T7234] EXT4-fs: Ignoring removed oldalloc option [ 87.922792][ T7234] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1409: Parent and EA inode have the same ino 15 [ 87.935599][ T7234] EXT4-fs (loop1): Remounting filesystem read-only [ 87.942217][ T7234] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 87.953080][ T7234] EXT4-fs (loop1): 1 orphan inode deleted [ 87.959305][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.973464][ T7234] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 87.980872][ T7234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.010226][ T7239] syz.4.1410[7239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.010316][ T7239] syz.4.1410[7239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.025190][ T7239] syz.4.1410[7239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.032742][ T7243] loop1: detected capacity change from 0 to 512 [ 88.099546][ T7243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.112531][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1414'. [ 88.125781][ T7243] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.212250][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 88.223104][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 88.247211][ T7264] loop4: detected capacity change from 0 to 1024 [ 88.268673][ T7264] EXT4-fs: Ignoring removed orlov option [ 88.282097][ T7264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.315757][ T7243] Process accounting resumed [ 88.340609][ T7264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.349168][ T7272] team0: Port device macvlan1 added [ 88.385327][ T7243] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 88.403697][ T6592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.430178][ T7272] team0: Port device macvlan1 removed [ 88.454810][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.498792][ T3328] net_ratelimit: 26 callbacks suppressed [ 88.498807][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.558674][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.614768][ T7293] loop1: detected capacity change from 0 to 512 [ 88.638635][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.646988][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.655377][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.681444][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.690672][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.698874][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.707134][ T7296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.752380][ T7304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.316075][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 89.316093][ T29] audit: type=1400 audit(1727418284.851:2374): avc: denied { module_request } for pid=7366 comm="syz.3.1464" kmod="crypto-ccm(sm4)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 89.344588][ T29] audit: type=1400 audit(1727418284.851:2375): avc: denied { module_request } for pid=7366 comm="syz.3.1464" kmod="crypto-ccm(sm4)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 89.449980][ T29] audit: type=1400 audit(1727418284.911:2376): avc: denied { read write } for pid=7362 comm="syz.4.1462" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.474457][ T29] audit: type=1400 audit(1727418284.911:2377): avc: denied { prog_load } for pid=7362 comm="syz.4.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.493900][ T29] audit: type=1400 audit(1727418284.961:2378): avc: denied { prog_load } for pid=7366 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.558878][ T29] audit: type=1400 audit(1727418285.091:2379): avc: denied { map_create } for pid=7372 comm="syz.0.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.580076][ T29] audit: type=1400 audit(1727418285.091:2380): avc: denied { prog_load } for pid=7372 comm="syz.0.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.599405][ T29] audit: type=1400 audit(1727418285.091:2381): avc: denied { prog_load } for pid=7372 comm="syz.0.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 89.633263][ T29] audit: type=1400 audit(1727418285.161:2382): avc: denied { read } for pid=7374 comm="syz.0.1466" dev="nsfs" ino=4026532522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 89.654496][ T29] audit: type=1400 audit(1727418285.171:2383): avc: denied { read } for pid=7374 comm="syz.0.1466" dev="nsfs" ino=4026532522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 89.945881][ T7404] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 89.954289][ T7404] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 90.264127][ T7455] option changes via remount are deprecated (pid=7453 comm=syz.3.1503) [ 91.392275][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 92.066064][ T7689] pim6reg1: entered promiscuous mode [ 92.071559][ T7689] pim6reg1: entered allmulticast mode [ 92.237951][ T7705] syzkaller0: entered promiscuous mode [ 92.243663][ T7705] syzkaller0: entered allmulticast mode [ 92.452423][ T7727] mmap: syz.1.1623 (7727) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.473603][ T7728] syzkaller0: entered promiscuous mode [ 92.479193][ T7728] syzkaller0: entered allmulticast mode [ 92.977990][ T7798] syzkaller0: entered promiscuous mode [ 92.978007][ T7798] syzkaller0: entered allmulticast mode [ 92.979590][ T7798] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 93.036390][ T7802] pim6reg1: entered promiscuous mode [ 93.041843][ T7802] pim6reg1: entered allmulticast mode [ 93.589432][ T7917] serio: Serial port ptm0 [ 93.632351][ T7923] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 93.640717][ T7923] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 93.671344][ T7927] pim6reg1: entered allmulticast mode [ 93.968637][ T8] net_ratelimit: 104 callbacks suppressed [ 93.968651][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.318745][ T29] kauditd_printk_skb: 1158 callbacks suppressed [ 94.318763][ T29] audit: type=1400 audit(2000000001.910:3542): avc: denied { map_create } for pid=8024 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.345261][ T29] audit: type=1400 audit(2000000001.910:3543): avc: denied { prog_load } for pid=8024 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.364405][ T29] audit: type=1400 audit(2000000001.910:3544): avc: denied { create } for pid=8024 comm="syz.3.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 94.423998][ T29] audit: type=1400 audit(2000000002.010:3545): avc: denied { read write } for pid=6592 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.448998][ T29] audit: type=1400 audit(2000000002.020:3546): avc: denied { create } for pid=8031 comm="syz.4.1764" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 94.470348][ T29] audit: type=1400 audit(2000000002.020:3547): avc: denied { execute } for pid=8031 comm="syz.4.1764" path="/97/cpu.stat" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 94.493389][ T29] audit: type=1400 audit(2000000002.030:3548): avc: denied { read write } for pid=6592 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.507106][ T8040] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 94.517754][ T29] audit: type=1400 audit(2000000002.030:3549): avc: denied { prog_load } for pid=8033 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.545556][ T29] audit: type=1400 audit(2000000002.030:3550): avc: denied { map_create } for pid=8033 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.564849][ T29] audit: type=1400 audit(2000000002.030:3551): avc: denied { prog_load } for pid=8033 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.672409][ T7991] ================================================================== [ 94.680511][ T7991] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 94.687744][ T7991] [ 94.690084][ T7991] race at unknown origin, with assert no writes to 0xffff888113bf4268 of 4 bytes by task 7991 on cpu 0: [ 94.701220][ T7991] dequeue_entities+0x6df/0x760 [ 94.706097][ T7991] pick_next_task_fair+0x7d/0x410 [ 94.711166][ T7991] __schedule+0x284/0x940 [ 94.715519][ T7991] schedule+0x55/0xc0 [ 94.719540][ T7991] do_nanosleep+0xa3/0x300 [ 94.723977][ T7991] hrtimer_nanosleep+0xc4/0x1c0 [ 94.728850][ T7991] common_nsleep+0x68/0x90 [ 94.733294][ T7991] __se_sys_clock_nanosleep+0x20a/0x240 [ 94.738938][ T7991] __x64_sys_clock_nanosleep+0x55/0x70 [ 94.744426][ T7991] x64_sys_call+0x253f/0x2d60 [ 94.749161][ T7991] do_syscall_64+0xc9/0x1c0 [ 94.753674][ T7991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.759587][ T7991] [ 94.761903][ T7991] value changed: 0x00000000 -> 0x00000001 [ 94.767620][ T7991] [ 94.769932][ T7991] Reported by Kernel Concurrency Sanitizer on: [ 94.776083][ T7991] CPU: 0 UID: 0 PID: 7991 Comm: syz.1.1749 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 94.786491][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.796556][ T7991] ================================================================== [ 95.009076][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.017253][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.808529][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.048962][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.098544][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.128597][ T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.849340][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.857571][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.168627][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.208734][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.770177][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.249248][ T3342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.408659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.298855][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.329025][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.337265][ T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.809957][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.369056][ T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog