last executing test programs: 3.028554625s ago: executing program 1 (id=440): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) 3.005120687s ago: executing program 1 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r2) 2.932896712s ago: executing program 1 (id=516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000700000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c"], 0x44}}, 0x0) 2.736274187s ago: executing program 1 (id=534): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x45, 0xd1, &(0x7f00000004c0)=""/209, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x97}, 0x90) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x20040000) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x4}, 0x0) 2.69351794s ago: executing program 1 (id=538): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x14) 2.477393206s ago: executing program 1 (id=552): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaabb0000080004"], 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.47782319s ago: executing program 2 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000002c0)=0xfffffffffffffdfd, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1.458758542s ago: executing program 2 (id=596): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8a, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 1.312904553s ago: executing program 2 (id=600): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 1.279550445s ago: executing program 2 (id=601): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)='X', 0x1, 0x20000080, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x2, 0x9, 0xf, 0x0, 0x3, 0x6, 0x3, 0x35a, 0x38, 0x1bb, 0x9, 0x1b, 0x20, 0x1, 0xbfaf, 0x3fc0, 0xfff5}, [{0x70000000, 0x6, 0x6, 0x5, 0x10003, 0x100, 0x1, 0x3}]}, 0x58) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 1.036647833s ago: executing program 3 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x103, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x25) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) 1.015896354s ago: executing program 3 (id=617): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96c, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f01726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) 926.615861ms ago: executing program 3 (id=619): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a331286dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 908.598802ms ago: executing program 3 (id=620): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x30, 0x0, @fd_index=0x8, 0x1, 0x0, 0xffffffff, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 892.314404ms ago: executing program 3 (id=621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}}, 0x20}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x101, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe38, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r9 = dup2(r8, r7) sendmsg$netlink(r9, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca000000010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x1}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x89a}, 0x100, '.\x00'}) bind$inet6(r12, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_usb_control_io$printer(r10, 0x0, 0x0) 637.992692ms ago: executing program 0 (id=632): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = dup2(r0, r0) faccessat2(r2, &(0x7f0000000880)='\x00', 0x1, 0x1100) 625.798593ms ago: executing program 0 (id=633): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x10) 614.021314ms ago: executing program 0 (id=634): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x20}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) 603.038455ms ago: executing program 0 (id=635): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0xd0, 0x2c, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xa4, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_U32_SEL={0x94, 0x5, {0x7, 0x8, 0x8, 0x9, 0x4, 0xd5ca, 0x7, 0x9, [{0x2, 0x9f8, 0x6, 0x8}, {0x7, 0xffffff8e, 0x4, 0x31b8}, {0x2, 0x1, 0x81080000, 0x9}, {0x2, 0x5, 0xffff8001, 0xcdc}, {0x67, 0x8, 0xfffffffb, 0x9}, {0x4013, 0xdd91, 0x6, 0x40}, {0x800, 0x838, 0x9, 0xffffffff}, {0xfffffff9, 0x9, 0x9, 0xfffffffe}]}}]}}]}, 0xd0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 592.492046ms ago: executing program 0 (id=636): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000001e40)='syz0\x00', 0x1ff) 542.6776ms ago: executing program 0 (id=637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f40f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b74039fffd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41b92fe3caef70845cde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f3920001ddd312969ecc08a99f5a3be58de34149af8360a7db3f301e656c5485d5de03be99b04e3593e8e18d7b635ca24a915c82122ac7a5bf6d011ee91573d66fc9522a76fa00211d62dc123fd51d1cb2ce1d4f3a62f99e2d93b2d34324a962a3762b6e8d7d3a7f73af6eb264b44822d8847442c3df4771df9a5d79443174b191878fe586facc18035f09fd70a137809ce970e31c4e6a8e48ce2fc30316087caaa2ed0bda52e969fda35236ac9aedb241a114a8cf1c49b8bd3f73c1c67d7968db4f71202d63bb0963cf128d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 435.754907ms ago: executing program 2 (id=638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 420.776079ms ago: executing program 2 (id=639): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 368.072182ms ago: executing program 4 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 299.763838ms ago: executing program 3 (id=642): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b150000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800a000100767863616e00000018000280140001000000", @ANYRES32=r1], 0x48}}, 0x0) 267.88662ms ago: executing program 4 (id=643): r0 = socket(0x10, 0x803, 0x0) write(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000006b790095"], 0x0}, 0x90) 165.462618ms ago: executing program 4 (id=644): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) open(&(0x7f0000000040)='.\x00', 0x204200, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd0, 0x0, &(0x7f0000000040)) 150.930509ms ago: executing program 4 (id=645): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 657.89µs ago: executing program 4 (id=646): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850008000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'}) 0s ago: executing program 4 (id=647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}}, 0x20}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x101, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe38, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r9 = dup2(r8, r7) sendmsg$netlink(r9, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca0000000109021200"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x1}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x89a}, 0x100, '.\x00'}) bind$inet6(r12, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_usb_control_io$printer(r10, 0x0, 0x0) kernel console output (not intermixed with test programs): e=1 [ 14.114235][ T29] audit: type=1400 audit(1725533240.137:80): avc: denied { siginh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.526848][ T3141] sshd (3141) used greatest stack depth: 11624 bytes left [ 19.053585][ T29] audit: type=1400 audit(1725533245.087:81): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. [ 21.217574][ T29] audit: type=1400 audit(1725533247.257:82): avc: denied { mounton } for pid=3247 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.218623][ T3247] cgroup: Unknown subsys name 'net' [ 21.240274][ T29] audit: type=1400 audit(1725533247.257:83): avc: denied { mount } for pid=3247 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.267634][ T29] audit: type=1400 audit(1725533247.287:84): avc: denied { unmount } for pid=3247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.466867][ T3247] cgroup: Unknown subsys name 'rlimit' [ 21.558861][ T29] audit: type=1400 audit(1725533247.597:85): avc: denied { setattr } for pid=3247 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.582097][ T29] audit: type=1400 audit(1725533247.597:86): avc: denied { create } for pid=3247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.602573][ T29] audit: type=1400 audit(1725533247.597:87): avc: denied { write } for pid=3247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.609757][ T3252] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.622895][ T29] audit: type=1400 audit(1725533247.597:88): avc: denied { read } for pid=3247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.651878][ T29] audit: type=1400 audit(1725533247.597:89): avc: denied { mounton } for pid=3247 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.676734][ T29] audit: type=1400 audit(1725533247.597:90): avc: denied { mount } for pid=3247 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.700068][ T29] audit: type=1400 audit(1725533247.667:91): avc: denied { relabelto } for pid=3252 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.729284][ T3247] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.493203][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 23.536133][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 23.561323][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.568462][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.575694][ T3260] bridge_slave_0: entered allmulticast mode [ 23.582028][ T3260] bridge_slave_0: entered promiscuous mode [ 23.588367][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 23.608840][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.616082][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.623262][ T3260] bridge_slave_1: entered allmulticast mode [ 23.629658][ T3260] bridge_slave_1: entered promiscuous mode [ 23.662801][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.690250][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.705500][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 23.737579][ T3260] team0: Port device team_slave_0 added [ 23.750027][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.757179][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.764255][ T3259] bridge_slave_0: entered allmulticast mode [ 23.770568][ T3259] bridge_slave_0: entered promiscuous mode [ 23.777544][ T3260] team0: Port device team_slave_1 added [ 23.783313][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.790414][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.797564][ T3259] bridge_slave_1: entered allmulticast mode [ 23.803911][ T3259] bridge_slave_1: entered promiscuous mode [ 23.816783][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.823982][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.831467][ T3261] bridge_slave_0: entered allmulticast mode [ 23.837723][ T3261] bridge_slave_0: entered promiscuous mode [ 23.856624][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.863652][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.870771][ T3261] bridge_slave_1: entered allmulticast mode [ 23.876999][ T3261] bridge_slave_1: entered promiscuous mode [ 23.897973][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.907121][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 23.928738][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.935717][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.961768][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.976251][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.992234][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.999299][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.006504][ T3265] bridge_slave_0: entered allmulticast mode [ 24.012773][ T3265] bridge_slave_0: entered promiscuous mode [ 24.019889][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.029091][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.036144][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.043268][ T3265] bridge_slave_1: entered allmulticast mode [ 24.049635][ T3265] bridge_slave_1: entered promiscuous mode [ 24.056128][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.063127][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.089109][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.110360][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.119882][ T3259] team0: Port device team_slave_0 added [ 24.141751][ T3259] team0: Port device team_slave_1 added [ 24.158403][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.167675][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.174661][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.200642][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.217903][ T3261] team0: Port device team_slave_0 added [ 24.229417][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.238854][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.245858][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.271796][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.287446][ T3261] team0: Port device team_slave_1 added [ 24.312451][ T3265] team0: Port device team_slave_0 added [ 24.321972][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.329079][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.336220][ T3266] bridge_slave_0: entered allmulticast mode [ 24.342389][ T3266] bridge_slave_0: entered promiscuous mode [ 24.350648][ T3260] hsr_slave_0: entered promiscuous mode [ 24.356754][ T3260] hsr_slave_1: entered promiscuous mode [ 24.369010][ T3265] team0: Port device team_slave_1 added [ 24.382540][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.389699][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.396874][ T3266] bridge_slave_1: entered allmulticast mode [ 24.403342][ T3266] bridge_slave_1: entered promiscuous mode [ 24.419533][ T3259] hsr_slave_0: entered promiscuous mode [ 24.425628][ T3259] hsr_slave_1: entered promiscuous mode [ 24.431472][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.439081][ T3259] Cannot create hsr debugfs directory [ 24.444769][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.451764][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.477689][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.502289][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.509255][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.535191][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.547389][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.557791][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.567135][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.574100][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.600065][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.632246][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.639234][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.665250][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.713767][ T3266] team0: Port device team_slave_0 added [ 24.727781][ T3261] hsr_slave_0: entered promiscuous mode [ 24.733719][ T3261] hsr_slave_1: entered promiscuous mode [ 24.739859][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.747488][ T3261] Cannot create hsr debugfs directory [ 24.754839][ T3265] hsr_slave_0: entered promiscuous mode [ 24.760988][ T3265] hsr_slave_1: entered promiscuous mode [ 24.766872][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.774398][ T3265] Cannot create hsr debugfs directory [ 24.780370][ T3266] team0: Port device team_slave_1 added [ 24.814713][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.821739][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.847738][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.873926][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.880890][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.906809][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.978143][ T3266] hsr_slave_0: entered promiscuous mode [ 24.984161][ T3266] hsr_slave_1: entered promiscuous mode [ 24.989992][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.997578][ T3266] Cannot create hsr debugfs directory [ 25.046907][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.055276][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.063858][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.087161][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.121325][ T3265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.130025][ T3265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.140786][ T3265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.150099][ T3265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.178139][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.190878][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.199409][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.207845][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.228945][ T3261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.237313][ T3261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.247002][ T3261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.255816][ T3261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.299895][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.308257][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.324917][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.333813][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.348200][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.372908][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.385784][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.400858][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.410519][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.417653][ T3290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.427381][ T3290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.434528][ T3290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.444726][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.451809][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.473644][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.484146][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.526069][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.536577][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.554870][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.561954][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.579994][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.592468][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.603677][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.628046][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.644767][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.651851][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.666606][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.680705][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.689256][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.696341][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.708087][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.725887][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.733111][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.742696][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.749768][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.776459][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.807378][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.814440][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.830196][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.840624][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.859953][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.867044][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.886323][ T3265] veth0_vlan: entered promiscuous mode [ 25.902704][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.936712][ T3265] veth1_vlan: entered promiscuous mode [ 25.961443][ T3260] veth0_vlan: entered promiscuous mode [ 25.971118][ T3260] veth1_vlan: entered promiscuous mode [ 25.981816][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.002547][ T3265] veth0_macvtap: entered promiscuous mode [ 26.010835][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.023905][ T3265] veth1_macvtap: entered promiscuous mode [ 26.042883][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.055738][ T3260] veth0_macvtap: entered promiscuous mode [ 26.070548][ T3259] veth0_vlan: entered promiscuous mode [ 26.077302][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.085160][ T3260] veth1_macvtap: entered promiscuous mode [ 26.094780][ T3259] veth1_vlan: entered promiscuous mode [ 26.106232][ T3265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.114967][ T3265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.123785][ T3265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.132565][ T3265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.153572][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.164084][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.174837][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.184314][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.194820][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.205636][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.214177][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.222967][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.231875][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.240637][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.261902][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.272452][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 26.272465][ T29] audit: type=1400 audit(1725533252.307:110): avc: denied { mounton } for pid=3265 comm="syz-executor" path="/root/syzkaller.FObLv2/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.302945][ T29] audit: type=1400 audit(1725533252.307:111): avc: denied { mount } for pid=3265 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.325047][ T29] audit: type=1400 audit(1725533252.307:112): avc: denied { mounton } for pid=3265 comm="syz-executor" path="/root/syzkaller.FObLv2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.350382][ T29] audit: type=1400 audit(1725533252.307:113): avc: denied { mount } for pid=3265 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.372807][ T29] audit: type=1400 audit(1725533252.327:114): avc: denied { unmount } for pid=3265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.392484][ T29] audit: type=1400 audit(1725533252.407:115): avc: denied { mounton } for pid=3265 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.424623][ T29] audit: type=1400 audit(1725533252.457:116): avc: denied { read write } for pid=3265 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.430475][ T3261] veth0_vlan: entered promiscuous mode [ 26.448945][ T29] audit: type=1400 audit(1725533252.457:117): avc: denied { open } for pid=3265 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.478245][ T29] audit: type=1400 audit(1725533252.457:118): avc: denied { ioctl } for pid=3265 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.490469][ T3261] veth1_vlan: entered promiscuous mode [ 26.512418][ T29] audit: type=1400 audit(1725533252.547:119): avc: denied { map_create } for pid=3387 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.922113][ T3259] veth0_macvtap: entered promiscuous mode [ 28.944758][ T3261] veth0_macvtap: entered promiscuous mode [ 28.955418][ T3259] veth1_macvtap: entered promiscuous mode [ 28.962999][ T3261] veth1_macvtap: entered promiscuous mode [ 28.974697][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.985249][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.995056][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.005580][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.020175][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.029539][ T3396] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6'. [ 29.038357][ T3396] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6'. [ 29.055889][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.066398][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.076220][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.086727][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.096557][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.107054][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.128290][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.144937][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.155714][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.165624][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.176199][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.198259][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.217494][ T3410] loop1: detected capacity change from 0 to 512 [ 29.217494][ T3408] loop0: detected capacity change from 0 to 512 [ 29.228606][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.240493][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.250405][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.260823][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.270038][ T3408] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.270694][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.283635][ T3408] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.294058][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.315178][ T3410] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.10: corrupted in-inode xattr: invalid ea_ino [ 29.317277][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.336253][ T3408] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.337141][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.349466][ T3410] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.10: couldn't read orphan inode 15 (err -117) [ 29.357945][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.378265][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.385463][ T3408] EXT4-fs (loop0): 1 truncate cleaned up [ 29.386955][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.392961][ T3408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.410268][ T3266] veth0_vlan: entered promiscuous mode [ 29.419245][ T3410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.423742][ T3261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.440156][ T3261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.448942][ T3261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.457717][ T3261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.471277][ T3266] veth1_vlan: entered promiscuous mode [ 29.485702][ T3408] syz.0.8 (3408) used greatest stack depth: 11368 bytes left [ 29.495653][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.497400][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.538745][ C0] hrtimer: interrupt took 23392 ns [ 29.563068][ T3266] veth0_macvtap: entered promiscuous mode [ 29.571743][ T3266] veth1_macvtap: entered promiscuous mode [ 29.582087][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.592597][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.602504][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.613035][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.622856][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.624280][ T3425] loop1: detected capacity change from 0 to 2048 [ 29.633274][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.633314][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.659945][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.672110][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.685017][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.695541][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.705476][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.716012][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.725858][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.736333][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.746185][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.756751][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.810090][ T3425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.810535][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.840584][ T3429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.852453][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.861349][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.870111][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.878913][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.921834][ T3437] loop2: detected capacity change from 0 to 1024 [ 29.936192][ T3437] EXT4-fs: Ignoring removed orlov option [ 29.941928][ T3437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 29.977172][ T3437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.030071][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.099410][ T3449] syz.3.20 (3449) used greatest stack depth: 11232 bytes left [ 30.248133][ T3450] syz.2.18 (3450) used greatest stack depth: 10024 bytes left [ 30.248488][ T3460] loop3: detected capacity change from 0 to 128 [ 31.376941][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.417833][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.518982][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.658419][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.776605][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.936392][ T40] bridge_slave_1: left allmulticast mode [ 31.942138][ T40] bridge_slave_1: left promiscuous mode [ 31.947773][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.065458][ T40] bridge_slave_0: left allmulticast mode [ 32.071118][ T40] bridge_slave_0: left promiscuous mode [ 32.076870][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.697333][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.785978][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.906435][ T40] bond0 (unregistering): Released all slaves [ 32.954212][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 32.954226][ T29] audit: type=1400 audit(1725533258.987:197): avc: denied { read } for pid=3000 comm="dhcpcd" name="n27" dev="tmpfs" ino=548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.981954][ T29] audit: type=1400 audit(1725533258.987:198): avc: denied { open } for pid=3000 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.004825][ T29] audit: type=1400 audit(1725533258.987:199): avc: denied { getattr } for pid=3000 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.057760][ T29] audit: type=1400 audit(1725533259.097:200): avc: denied { setopt } for pid=3479 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.124093][ T3489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.135195][ T29] audit: type=1326 audit(1725533259.147:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e32ecef9 code=0x7ffc0000 [ 33.158991][ T29] audit: type=1326 audit(1725533259.147:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f44e32ecef9 code=0x7ffc0000 [ 33.182248][ T29] audit: type=1326 audit(1725533259.147:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e32ecef9 code=0x7ffc0000 [ 33.205374][ T29] audit: type=1326 audit(1725533259.147:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e32ecef9 code=0x7ffc0000 [ 33.212222][ T3483] loop3: detected capacity change from 0 to 1024 [ 33.228551][ T29] audit: type=1326 audit(1725533259.147:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3484 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f44e32ecef9 code=0x7ffc0000 [ 33.228582][ T29] audit: type=1400 audit(1725533259.157:206): avc: denied { read } for pid=3492 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.281760][ T3483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 33.292205][ T3483] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.32: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 33.316942][ T3483] EXT4-fs (loop3): no journal found [ 33.322245][ T3483] EXT4-fs (loop3): can't get journal size [ 33.334757][ T40] hsr_slave_0: left promiscuous mode [ 33.335314][ T3483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 33.350853][ T40] hsr_slave_1: left promiscuous mode [ 33.358199][ T3483] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.32: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 33.377397][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.383451][ T3511] loop2: detected capacity change from 0 to 512 [ 33.384892][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.402586][ T3507] loop0: detected capacity change from 0 to 1024 [ 33.409446][ T3507] EXT4-fs: Ignoring removed oldalloc option [ 33.419531][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.427032][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.434401][ T3511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.444544][ T3483] EXT4-fs (loop3): failed to initialize system zone (-117) [ 33.452674][ T3509] program syz.4.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.452981][ T3507] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 33.465423][ T3483] EXT4-fs (loop3): mount failed [ 33.473142][ T3511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 33.487174][ T40] veth1_macvtap: left promiscuous mode [ 33.492649][ T40] veth0_macvtap: left promiscuous mode [ 33.495216][ T3511] System zones: 1-12 [ 33.498397][ T40] veth1_vlan: left promiscuous mode [ 33.507498][ T40] veth0_vlan: left promiscuous mode [ 33.513706][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.536371][ T3511] EXT4-fs (loop2): 1 truncate cleaned up [ 33.542402][ T3511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.580433][ T3521] loop3: detected capacity change from 0 to 512 [ 33.595438][ T3521] ======================================================= [ 33.595438][ T3521] WARNING: The mand mount option has been deprecated and [ 33.595438][ T3521] and is ignored by this kernel. Remove the mand [ 33.595438][ T3521] option from the mount to silence this warning. [ 33.595438][ T3521] ======================================================= [ 33.633035][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.636732][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.652740][ T3521] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2812: inode #11: comm syz.3.41: corrupted xattr block 95: invalid header [ 33.666890][ T3521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.41: bg 0: block 7: invalid block bitmap [ 33.679104][ T3521] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 33.688185][ T3521] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2978: inode #11: comm syz.3.41: corrupted xattr block 95: invalid header [ 33.744927][ T3531] loop0: detected capacity change from 0 to 128 [ 33.760155][ T3521] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 33.777024][ T3521] EXT4-fs (loop3): 1 orphan inode deleted [ 33.783278][ T3521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.788272][ T3531] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.809007][ T3531] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.821375][ T40] team0 (unregistering): Port device team_slave_1 removed [ 33.833734][ T40] team0 (unregistering): Port device team_slave_0 removed [ 33.863163][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.864881][ T3541] loop4: detected capacity change from 0 to 1024 [ 33.903698][ T3265] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.914110][ T3541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.990934][ T1042] IPVS: starting estimator thread 0... [ 33.997027][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.013516][ T3550] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 34.100101][ T3571] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 34.107579][ T3554] IPVS: using max 3216 ests per chain, 160800 per kthread [ 34.177097][ T3577] loop4: detected capacity change from 0 to 512 [ 34.215302][ T3492] chnl_net:caif_netlink_parms(): no params data found [ 34.215809][ T3577] EXT4-fs: Ignoring removed i_version option [ 34.228226][ T3577] EXT4-fs: inline encryption not supported [ 34.250028][ T3577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.289721][ T3587] loop3: detected capacity change from 0 to 164 [ 34.301264][ T3589] ip6gre0: entered promiscuous mode [ 34.322606][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.331103][ T3587] syz.3.59: attempt to access beyond end of device [ 34.331103][ T3587] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 34.335223][ T3577] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.349995][ T3587] syz.3.59: attempt to access beyond end of device [ 34.349995][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.377720][ T3587] syz.3.59: attempt to access beyond end of device [ 34.377720][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.391938][ T3589] ip6gre0: left promiscuous mode [ 34.392066][ T3587] syz.3.59: attempt to access beyond end of device [ 34.392066][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.400427][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.412578][ T3587] syz.3.59: attempt to access beyond end of device [ 34.412578][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.420625][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.435957][ T3587] syz.3.59: attempt to access beyond end of device [ 34.435957][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.439490][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.453259][ T3587] syz.3.59: attempt to access beyond end of device [ 34.453259][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.473756][ T3492] bridge_slave_0: entered allmulticast mode [ 34.494374][ T3587] syz.3.59: attempt to access beyond end of device [ 34.494374][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.510007][ T3587] syz.3.59: attempt to access beyond end of device [ 34.510007][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.538694][ T3607] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 34.541704][ T3603] loop2: detected capacity change from 0 to 2048 [ 34.556040][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 34.565711][ T3492] bridge_slave_0: entered promiscuous mode [ 34.568697][ T3587] syz.3.59: attempt to access beyond end of device [ 34.568697][ T3587] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 34.581930][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.591963][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.621479][ T3603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.672948][ T3492] bridge_slave_1: entered allmulticast mode [ 34.693144][ T3492] bridge_slave_1: entered promiscuous mode [ 34.711645][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.773808][ T3631] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 34.787931][ T3492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.810330][ T3492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.867936][ T3492] team0: Port device team_slave_0 added [ 34.874603][ T3492] team0: Port device team_slave_1 added [ 34.935724][ T3492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.942714][ T3492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.968711][ T3492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.015629][ T3492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.022594][ T3492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.048813][ T3492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.072734][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 35.080292][ T940] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 35.091702][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.120171][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x6 [ 35.127622][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0xd [ 35.142506][ T940] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 35.157947][ T3492] hsr_slave_0: entered promiscuous mode [ 35.175273][ T3492] hsr_slave_1: entered promiscuous mode [ 35.315937][ T3698] loop2: detected capacity change from 0 to 1764 [ 35.326037][ T3699] loop4: detected capacity change from 0 to 128 [ 35.451901][ T3714] loop0: detected capacity change from 0 to 764 [ 35.623466][ T3492] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.643817][ T3734] loop4: detected capacity change from 0 to 128 [ 35.643924][ T3492] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.678787][ T3492] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.699503][ T3492] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.747784][ T3743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.100'. [ 35.788967][ T3492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.820521][ T3743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3743 comm=syz.3.100 [ 35.838053][ T3757] loop0: detected capacity change from 0 to 128 [ 35.850531][ T3492] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.880804][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.887937][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.918647][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.925882][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.938206][ T3762] loop3: detected capacity change from 0 to 8192 [ 35.951230][ T3765] netlink: 'syz.4.105': attribute type 10 has an invalid length. [ 35.980003][ T3765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.989680][ T3765] team0: Port device batadv0 added [ 36.014011][ T3492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.024535][ T3492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.040558][ T3770] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.150828][ T3492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.193037][ T3798] loop3: detected capacity change from 0 to 128 [ 36.209199][ T3786] loop0: detected capacity change from 0 to 8192 [ 36.234605][ T3798] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.337505][ T3492] veth0_vlan: entered promiscuous mode [ 36.347382][ T3492] veth1_vlan: entered promiscuous mode [ 36.353208][ T3798] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.371964][ T3492] veth0_macvtap: entered promiscuous mode [ 36.414190][ T3492] veth1_macvtap: entered promiscuous mode [ 36.443321][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.453885][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.463861][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.474388][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.484225][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.494674][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.504548][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.515055][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.526250][ T3259] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.537938][ T3492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.546377][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.556872][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.566688][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.577126][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.587001][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.597451][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.607272][ T3492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.617714][ T3492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.628931][ T3492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.648070][ T3492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.652152][ T3828] loop3: detected capacity change from 0 to 128 [ 36.656893][ T3492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.671924][ T3492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.680677][ T3492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.806250][ T3841] capability: warning: `syz.4.120' uses 32-bit capabilities (legacy support in use) [ 36.884675][ T3847] loop3: detected capacity change from 0 to 8192 [ 36.910238][ T3866] loop0: detected capacity change from 0 to 512 [ 36.937107][ T3866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.972907][ T3866] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.008701][ T3881] loop3: detected capacity change from 0 to 128 [ 37.029799][ T3866] Process accounting resumed [ 37.040460][ T3866] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 37.067713][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.075241][ T3881] loop3: detected capacity change from 128 to 0 [ 37.097963][ T3894] FAT-fs (loop3): Directory bread(block 33) failed [ 37.100313][ T3891] loop4: detected capacity change from 0 to 256 [ 37.111385][ T3894] FAT-fs (loop3): Directory bread(block 34) failed [ 37.122604][ T3894] FAT-fs (loop3): Directory bread(block 35) failed [ 37.133651][ T3894] FAT-fs (loop3): Directory bread(block 36) failed [ 37.143520][ T3894] FAT-fs (loop3): Directory bread(block 37) failed [ 37.151054][ T3891] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.159718][ T3894] FAT-fs (loop3): Directory bread(block 38) failed [ 37.181159][ T3894] FAT-fs (loop3): Directory bread(block 39) failed [ 37.196234][ T3894] FAT-fs (loop3): Directory bread(block 40) failed [ 37.245001][ T3259] FAT-fs (loop3): Directory bread(block 33) failed [ 37.261567][ T3259] FAT-fs (loop3): Directory bread(block 34) failed [ 37.285250][ T3906] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 37.291651][ T3906] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 37.323465][ T3259] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 37.338107][ T3912] syz.0.136[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.338177][ T3912] syz.0.136[3912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.462769][ T3929] dvmrp0: entered allmulticast mode [ 37.507853][ T3929] dvmrp0: left allmulticast mode [ 37.508154][ T3934] loop2: detected capacity change from 0 to 512 [ 37.516346][ T3935] syz.4.143[3935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.519238][ T3935] syz.4.143[3935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.547844][ T3934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.605414][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.606689][ T3934] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.638000][ T3941] syz.0.145[3941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.638073][ T3941] syz.0.145[3941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.654254][ T3934] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.144: corrupted inode contents [ 37.687533][ T3934] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.144: mark_inode_dirty error [ 37.705506][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.730238][ T3934] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.144: corrupted inode contents [ 37.750316][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.781369][ T3934] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.144: Directory hole found for htree leaf block 0 [ 37.829012][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.844514][ T3961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3961 comm=syz.0.154 [ 37.859866][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.948646][ T50] bridge_slave_1: left allmulticast mode [ 37.954334][ T50] bridge_slave_1: left promiscuous mode [ 37.960063][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.969650][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 37.969663][ T29] audit: type=1400 audit(1725533264.007:413): avc: denied { read } for pid=3974 comm="syz.1.158" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.002431][ T50] bridge_slave_0: left allmulticast mode [ 38.008261][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.015156][ T29] audit: type=1400 audit(1725533264.007:414): avc: denied { ioctl } for pid=3974 comm="syz.1.158" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.115036][ T29] audit: type=1400 audit(1725533264.147:415): avc: denied { create } for pid=3987 comm="syz.1.162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.135641][ T29] audit: type=1400 audit(1725533264.147:416): avc: denied { read } for pid=3987 comm="syz.1.162" name="file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.157666][ T29] audit: type=1400 audit(1725533264.147:417): avc: denied { open } for pid=3987 comm="syz.1.162" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.181729][ T3994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.164'. [ 38.298862][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.312194][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.322723][ T50] bond0 (unregistering): Released all slaves [ 38.354664][ T4007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.166'. [ 38.375489][ T29] audit: type=1326 audit(1725533264.417:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4008 comm="syz.2.167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae796cef9 code=0x0 [ 38.380221][ T4002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 38.454332][ T50] hsr_slave_0: left promiscuous mode [ 38.468149][ T50] hsr_slave_1: left promiscuous mode [ 38.473788][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.481362][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.510803][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.518302][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.546368][ T50] veth1_macvtap: left promiscuous mode [ 38.551912][ T50] veth0_macvtap: left promiscuous mode [ 38.557538][ T50] veth1_vlan: left promiscuous mode [ 38.562840][ T50] veth0_vlan: left promiscuous mode [ 38.635896][ T29] audit: type=1400 audit(1725533264.607:419): avc: denied { create } for pid=4001 comm="syz.0.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.760135][ T50] team0 (unregistering): Port device team_slave_1 removed [ 38.773185][ T50] team0 (unregistering): Port device team_slave_0 removed [ 38.814678][ T3948] chnl_net:caif_netlink_parms(): no params data found [ 38.849378][ T3948] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.856494][ T3948] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.863800][ T3948] bridge_slave_0: entered allmulticast mode [ 38.872201][ T3948] bridge_slave_0: entered promiscuous mode [ 38.879545][ T3948] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.886634][ T3948] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.894166][ T3948] bridge_slave_1: entered allmulticast mode [ 38.900766][ T3948] bridge_slave_1: entered promiscuous mode [ 38.918888][ T3948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.929948][ T3948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.951604][ T3948] team0: Port device team_slave_0 added [ 38.959367][ T3948] team0: Port device team_slave_1 added [ 38.974571][ T3948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.981582][ T3948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.007659][ T3948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.018900][ T3948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.025876][ T3948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.051784][ T3948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.081941][ T3948] hsr_slave_0: entered promiscuous mode [ 39.088008][ T3948] hsr_slave_1: entered promiscuous mode [ 39.093824][ T3948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.101598][ T3948] Cannot create hsr debugfs directory [ 39.223748][ T29] audit: type=1326 audit(1725533265.257:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae796cef9 code=0x7ffc0000 [ 39.285834][ T29] audit: type=1326 audit(1725533265.287:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae796cef9 code=0x7ffc0000 [ 39.291917][ T4083] syz.0.170[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.309085][ T29] audit: type=1326 audit(1725533265.287:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4075 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ae796cef9 code=0x7ffc0000 [ 39.346295][ T4083] syz.0.170[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.362822][ T4083] syz.0.170[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.376639][ T4083] syz.0.170[4083] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.426223][ T4094] macsec1: entered promiscuous mode [ 39.442663][ T4094] vlan0: entered promiscuous mode [ 39.448038][ T4094] macsec1: entered allmulticast mode [ 39.453417][ T4094] vlan0: entered allmulticast mode [ 39.458586][ T4094] veth0_vlan: entered allmulticast mode [ 39.470921][ T4094] vlan0: left allmulticast mode [ 39.475852][ T4094] veth0_vlan: left allmulticast mode [ 39.481332][ T4094] vlan0: left promiscuous mode [ 39.625906][ T4122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 39.650151][ T3948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.675801][ T3948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.682947][ T4132] loop4: detected capacity change from 0 to 256 [ 39.694161][ T3948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.717208][ T3948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.802597][ T3948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.832017][ T3948] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.866146][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.873216][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.963684][ T3948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.974213][ T3948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.013051][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.020254][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.120194][ T3948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.237664][ T3948] veth0_vlan: entered promiscuous mode [ 40.253862][ T3948] veth1_vlan: entered promiscuous mode [ 40.281223][ T3948] veth0_macvtap: entered promiscuous mode [ 40.298859][ T3948] veth1_macvtap: entered promiscuous mode [ 40.311671][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.322194][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.332061][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.342490][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.352511][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.362979][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.372886][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.383312][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.397384][ T3948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.408772][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.419278][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.429113][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.439702][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.449589][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.460121][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.469974][ T3948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.480412][ T3948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.491932][ T3948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.504250][ T3948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.513099][ T3948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.521940][ T3948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.530733][ T3948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.544570][ T4244] netlink: 92 bytes leftover after parsing attributes in process `syz.4.205'. [ 40.573338][ T4244] Zero length message leads to an empty skb [ 40.655511][ T4260] loop4: detected capacity change from 0 to 512 [ 40.666926][ T4266] loop3: detected capacity change from 0 to 256 [ 40.694014][ T4266] FAT-fs (loop3): Directory bread(block 64) failed [ 40.700870][ T4266] FAT-fs (loop3): Directory bread(block 65) failed [ 40.709770][ T4266] FAT-fs (loop3): Directory bread(block 66) failed [ 40.720604][ T4266] FAT-fs (loop3): Directory bread(block 67) failed [ 40.727337][ T4266] FAT-fs (loop3): Directory bread(block 68) failed [ 40.733907][ T4266] FAT-fs (loop3): Directory bread(block 69) failed [ 40.734223][ T4260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.740581][ T4266] FAT-fs (loop3): Directory bread(block 70) failed [ 40.760068][ T4266] FAT-fs (loop3): Directory bread(block 71) failed [ 40.766677][ T4260] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.766748][ T4266] FAT-fs (loop3): Directory bread(block 72) failed [ 40.783707][ T4266] FAT-fs (loop3): Directory bread(block 73) failed [ 40.817588][ T4260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.848927][ T4266] 9pnet: Could not find request transport: æ»­P [ 40.865933][ T4260] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 40.878372][ T4260] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.878372][ T4260] [ 40.888037][ T4260] EXT4-fs (loop4): Total free blocks count 0 [ 40.894018][ T4260] EXT4-fs (loop4): Free/Dirty block details [ 40.899952][ T4260] EXT4-fs (loop4): free_blocks=65281 [ 40.905270][ T4260] EXT4-fs (loop4): dirty_blocks=23 [ 40.910379][ T4260] EXT4-fs (loop4): Block reservation details [ 40.916548][ T4260] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 40.928757][ T4260] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 41.199935][ T4327] SELinux: failed to load policy [ 41.229295][ T4329] loop2: detected capacity change from 0 to 512 [ 41.271886][ T4329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.287843][ T4333] loop4: detected capacity change from 0 to 2048 [ 41.289159][ T4329] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.316626][ T4333] loop4: p1 < > p3 [ 41.322075][ T4333] loop4: p3 size 134217728 extends beyond EOD, truncated [ 41.330689][ T4329] Process accounting resumed [ 41.339117][ T4340] loop3: detected capacity change from 0 to 2048 [ 41.352989][ T4329] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.383079][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.412615][ T4340] Alternate GPT is invalid, using primary GPT. [ 41.419004][ T4340] loop3: p2 p3 p7 [ 41.428854][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.450196][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.508270][ T3471] udevd[3471]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 41.519354][ T3473] udevd[3473]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 41.523105][ T3474] udevd[3474]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 41.578447][ T4356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.587084][ T4356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.797618][ T4376] process 'syz.4.252' launched './file0' with NULL argv: empty string added [ 41.821383][ T4378] netlink: 35732 bytes leftover after parsing attributes in process `syz.4.253'. [ 41.830604][ T4378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 41.863294][ T4382] loop4: detected capacity change from 0 to 128 [ 41.871634][ T4382] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.884023][ T4382] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.910548][ T3266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.957665][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 41.972403][ T4389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4389 comm=syz.4.258 [ 42.059791][ T4401] loop4: detected capacity change from 0 to 128 [ 42.069260][ T4401] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.088679][ T4401] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.131091][ T4404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 42.142635][ T3266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.168814][ T4410] loop0: detected capacity change from 0 to 512 [ 42.226116][ T4410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.247024][ T4410] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.286066][ T4424] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 42.320895][ T3265] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.481679][ T4449] mmap: syz.4.287 (4449): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 42.489025][ T4444] loop0: detected capacity change from 0 to 2048 [ 42.527979][ T4453] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 42.535680][ T4444] loop0: p1 < > p3 [ 42.540351][ T4444] loop0: p3 size 134217728 extends beyond EOD, truncated [ 42.543452][ T4455] netlink: 36 bytes leftover after parsing attributes in process `syz.2.290'. [ 42.562201][ T2962] loop0: p1 < > p3 [ 42.569151][ T2962] loop0: p3 size 134217728 extends beyond EOD, truncated [ 42.718978][ T4472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 42.734851][ T4472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4472 comm=syz.4.298 [ 42.770679][ T4478] loop4: detected capacity change from 0 to 512 [ 42.881024][ T4492] loop2: detected capacity change from 0 to 2048 [ 42.925644][ T4492] loop2: p1 < > p3 [ 42.930040][ T4492] loop2: p3 size 134217728 extends beyond EOD, truncated [ 43.018244][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 43.018256][ T29] audit: type=1326 audit(1725533269.057:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7ae796cef9 code=0x7ffc0000 [ 43.048796][ T29] audit: type=1326 audit(1725533269.057:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7ae7908859 code=0x7ffc0000 [ 43.071981][ T29] audit: type=1326 audit(1725533269.057:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae796cef9 code=0x7ffc0000 [ 43.095226][ T29] audit: type=1326 audit(1725533269.057:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4491 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae796cef9 code=0x7ffc0000 [ 43.118444][ T29] audit: type=1400 audit(1725533269.087:834): avc: denied { read } for pid=2944 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.140433][ T29] audit: type=1400 audit(1725533269.087:835): avc: denied { search } for pid=2944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.162423][ T29] audit: type=1400 audit(1725533269.087:836): avc: denied { open } for pid=2944 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.185120][ T29] audit: type=1400 audit(1725533269.087:837): avc: denied { getattr } for pid=2944 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.209173][ T29] audit: type=1107 audit(1725533269.247:838): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 43.246362][ T29] audit: type=1400 audit(1725533269.287:839): avc: denied { read write } for pid=4499 comm="syz.2.310" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.298435][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 43.313160][ T4504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4504 comm=syz.2.312 [ 43.539587][ T4508] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 43.547951][ T4508] bond0: (slave bond_slave_0): Releasing backup interface [ 43.630072][ T4514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.317'. [ 43.639954][ T4514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 43.839299][ T4531] program syz.4.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.988017][ T4549] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.032387][ T4553] loop4: detected capacity change from 0 to 1024 [ 44.039492][ T4553] EXT4-fs: Ignoring removed i_version option [ 44.060706][ T4553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.083828][ T4561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=4561 comm=syz.2.339 [ 44.109691][ T4553] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 44.125126][ T4553] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 44.137658][ T4553] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.137658][ T4553] [ 44.147573][ T4553] EXT4-fs (loop4): Total free blocks count 0 [ 44.153594][ T4553] EXT4-fs (loop4): Free/Dirty block details [ 44.159528][ T4553] EXT4-fs (loop4): free_blocks=68451041280 [ 44.165364][ T4553] EXT4-fs (loop4): dirty_blocks=16 [ 44.170448][ T4553] EXT4-fs (loop4): Block reservation details [ 44.176486][ T4553] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 44.198045][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.207115][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.230130][ T4553] syz.4.336 (4553) used greatest stack depth: 9352 bytes left [ 44.238308][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.296769][ T4567] loop4: detected capacity change from 0 to 2048 [ 44.335686][ T4567] loop4: p1 < > p3 [ 44.340186][ T4567] loop4: p3 size 134217728 extends beyond EOD, truncated [ 44.462070][ T4571] syz.4.343[4571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.462128][ T4571] syz.4.343[4571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.583568][ T4582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 44.614356][ T4582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4582 comm=syz.0.348 [ 44.679111][ T4588] Illegal XDP return value 4294967274 on prog (id 227) dev syz_tun, expect packet loss! [ 44.988649][ T4604] netlink: 'syz.0.358': attribute type 11 has an invalid length. [ 45.125246][ T4615] capability: warning: `syz.0.363' uses deprecated v2 capabilities in a way that may be insecure [ 45.183588][ T4623] loop0: detected capacity change from 0 to 256 [ 45.447611][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811393d000: rx timeout, send abort [ 45.455884][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811393d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.589586][ T4635] loop4: detected capacity change from 0 to 512 [ 45.596906][ T4635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.616606][ T4635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.629114][ T4635] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.643681][ T4635] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.373: Failed to acquire dquot type 0 [ 45.662463][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.707930][ T4641] loop4: detected capacity change from 0 to 2048 [ 45.723597][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.746439][ T4641] loop4: p1 < > p3 [ 45.750661][ T4641] loop4: p3 size 134217728 extends beyond EOD, truncated [ 45.869097][ T4644] chnl_net:caif_netlink_parms(): no params data found [ 45.899188][ T4644] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.906350][ T4644] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.913451][ T4644] bridge_slave_0: entered allmulticast mode [ 45.919908][ T4644] bridge_slave_0: entered promiscuous mode [ 45.929161][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.940242][ T4644] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.947362][ T4644] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.954528][ T4644] bridge_slave_1: entered allmulticast mode [ 45.960961][ T4644] bridge_slave_1: entered promiscuous mode [ 45.977329][ T4644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.996413][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.010801][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.018417][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.027399][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.034921][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.057148][ T4660] team0: Port device batadv0 removed [ 46.065858][ T4644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.076688][ T4663] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.089536][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.107533][ T4670] netlink: 'syz.2.383': attribute type 4 has an invalid length. [ 46.113221][ T4672] syz.0.384[4672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.115789][ T4672] syz.0.384[4672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.117501][ T4670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 46.161903][ T4644] team0: Port device team_slave_0 added [ 46.162012][ T4672] syz.0.384 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 46.168428][ T4644] team0: Port device team_slave_1 added [ 46.209450][ T4644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.216446][ T4644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.242370][ T4644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.256231][ T4644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.263289][ T4644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.289667][ T4644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.337408][ T4644] hsr_slave_0: entered promiscuous mode [ 46.343944][ T4644] hsr_slave_1: entered promiscuous mode [ 46.350051][ T4644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.357651][ T4644] Cannot create hsr debugfs directory [ 46.389320][ T28] bridge_slave_1: left allmulticast mode [ 46.395004][ T28] bridge_slave_1: left promiscuous mode [ 46.400727][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.411797][ T28] bridge_slave_0: left allmulticast mode [ 46.417544][ T28] bridge_slave_0: left promiscuous mode [ 46.423411][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.441427][ T4687] xt_CT: No such helper "netbios-ns" [ 46.537840][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.548089][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.558090][ T28] bond0 (unregistering): Released all slaves [ 46.599401][ T4693] syz.4.393[4693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.599439][ T4693] syz.4.393[4693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.673023][ T28] hsr_slave_0: left promiscuous mode [ 46.689918][ T28] hsr_slave_1: left promiscuous mode [ 46.696395][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.703861][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.711604][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.719031][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.729162][ T28] veth1_macvtap: left promiscuous mode [ 46.734666][ T28] veth0_macvtap: left promiscuous mode [ 46.740262][ T28] veth1_vlan: left promiscuous mode [ 46.745578][ T28] veth0_vlan: left promiscuous mode [ 46.818371][ T28] team0 (unregistering): Port device team_slave_1 removed [ 46.828405][ T28] team0 (unregistering): Port device team_slave_0 removed [ 47.026777][ T4644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.035231][ T4644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.045010][ T4644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.053736][ T4644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.106392][ T4644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.126857][ T4644] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.128060][ T4721] loop2: detected capacity change from 0 to 764 [ 47.141710][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.148801][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.157577][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.164668][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.188371][ T4644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.198751][ T4644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.254183][ T4728] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 47.262495][ T4728] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 47.268473][ T4644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.370299][ T4644] veth0_vlan: entered promiscuous mode [ 47.383544][ T4644] veth1_vlan: entered promiscuous mode [ 47.402659][ T4644] veth0_macvtap: entered promiscuous mode [ 47.412179][ T4644] veth1_macvtap: entered promiscuous mode [ 47.423744][ T4644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.434222][ T4644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.436713][ T4747] syz.0.412[4747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.444066][ T4644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.444106][ T4747] syz.0.412[4747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.465876][ T4644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.487016][ T4644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.497575][ T4644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.508194][ T4644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.517247][ T4644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.527840][ T4644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.537887][ T4644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.548416][ T4644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.558509][ T4644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.569013][ T4644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.579965][ T4644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.599970][ T4644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.608777][ T4644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.617603][ T4644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.626374][ T4644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.679985][ T4757] netlink: 'syz.3.377': attribute type 5 has an invalid length. [ 47.810394][ T4787] loop3: detected capacity change from 0 to 512 [ 47.831841][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.844769][ T4787] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.873051][ T4644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.931179][ T4806] loop4: detected capacity change from 0 to 512 [ 47.947041][ T4806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.960436][ T4806] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.061996][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.242172][ T4822] chnl_net:caif_netlink_parms(): no params data found [ 48.274115][ T4822] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.281405][ T4822] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.288704][ T4822] bridge_slave_0: entered allmulticast mode [ 48.295084][ T4822] bridge_slave_0: entered promiscuous mode [ 48.303351][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.310432][ T4822] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.317691][ T4822] bridge_slave_1: entered allmulticast mode [ 48.324080][ T4822] bridge_slave_1: entered promiscuous mode [ 48.340307][ T4822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.350746][ T4822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.370406][ T4822] team0: Port device team_slave_0 added [ 48.380182][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.391955][ T4822] team0: Port device team_slave_1 added [ 48.407348][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.414320][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.440309][ T4822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.451609][ T4822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.458625][ T4822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.484632][ T4822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.501892][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.524639][ T4822] hsr_slave_0: entered promiscuous mode [ 48.530679][ T4822] hsr_slave_1: entered promiscuous mode [ 48.536901][ T4822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.544455][ T4822] Cannot create hsr debugfs directory [ 48.559548][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.628436][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.689734][ T28] bridge_slave_1: left allmulticast mode [ 48.695431][ T28] bridge_slave_1: left promiscuous mode [ 48.701063][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.708934][ T28] bridge_slave_0: left allmulticast mode [ 48.714583][ T28] bridge_slave_0: left promiscuous mode [ 48.720269][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.766347][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 48.766362][ T29] audit: type=1400 audit(1725533274.807:1295): avc: denied { mounton } for pid=4846 comm="syz.2.445" path="/114/file0" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.810722][ T29] audit: type=1400 audit(1725533274.807:1296): avc: denied { mount } for pid=4850 comm="syz.3.446" name="/" dev="ramfs" ino=9380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.832940][ T29] audit: type=1400 audit(1725533274.807:1297): avc: denied { unmount } for pid=4644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.852941][ T29] audit: type=1326 audit(1725533274.807:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 48.876246][ T29] audit: type=1326 audit(1725533274.807:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 48.899563][ T29] audit: type=1326 audit(1725533274.807:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 48.923036][ T29] audit: type=1326 audit(1725533274.807:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 48.946472][ T29] audit: type=1326 audit(1725533274.807:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 48.969782][ T29] audit: type=1326 audit(1725533274.807:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 48.993156][ T29] audit: type=1326 audit(1725533274.807:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470b49cef9 code=0x7ffc0000 [ 49.048641][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.060118][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.069990][ T28] bond0 (unregistering): Released all slaves [ 49.207229][ T28] hsr_slave_0: left promiscuous mode [ 49.217554][ T28] hsr_slave_1: left promiscuous mode [ 49.230008][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.237450][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.265174][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.272655][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.283371][ T4882] loop3: detected capacity change from 0 to 512 [ 49.293593][ T28] veth1_macvtap: left promiscuous mode [ 49.299134][ T28] veth0_macvtap: left promiscuous mode [ 49.304634][ T28] veth1_vlan: left promiscuous mode [ 49.309879][ T28] veth0_vlan: left promiscuous mode [ 49.318496][ T4882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.335686][ T4882] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.402415][ T4644] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.470658][ T28] team0 (unregistering): Port device team_slave_1 removed [ 49.484620][ T28] team0 (unregistering): Port device team_slave_0 removed [ 49.523286][ T4897] Invalid ELF header magic: != ELF [ 49.561230][ T4900] loop2: detected capacity change from 0 to 512 [ 49.567932][ T4900] EXT4-fs: Ignoring removed orlov option [ 49.574065][ T4900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.582532][ T4902] SELinux: Context ì is not valid (left unmapped). [ 49.586917][ T4900] EXT4-fs (loop2): 1 truncate cleaned up [ 49.596675][ T4900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.600757][ T4904] syz.3.470[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.624915][ T4904] syz.3.470[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.646344][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.708419][ T4822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.726251][ T4822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.747360][ T4822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.771218][ T4920] tipc: Enabling of bearer rejected, failed to enable media [ 49.780181][ T4822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.843648][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.869182][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.879156][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.886282][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.898153][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.905299][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.006673][ T4942] bio_check_eod: 8714 callbacks suppressed [ 50.006688][ T4942] syz.3.486: attempt to access beyond end of device [ 50.006688][ T4942] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 50.042130][ T4822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.058122][ T4950] ./file0/file0: Can't lookup blockdev [ 50.135072][ T4962] loop2: detected capacity change from 0 to 2048 [ 50.169213][ T4822] veth0_vlan: entered promiscuous mode [ 50.175404][ T4962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.196815][ T4822] veth1_vlan: entered promiscuous mode [ 50.228342][ T4822] veth0_macvtap: entered promiscuous mode [ 50.235885][ T4822] veth1_macvtap: entered promiscuous mode [ 50.244799][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.245766][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.264631][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.274709][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.285174][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.295242][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.296680][ T4981] syz.4.500[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.305668][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.307492][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.335251][ T4981] syz.4.500[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.344966][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.364516][ T4988] syz.2.501[4988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.366935][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.367804][ T4988] syz.2.501[4988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.378247][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.409775][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.419770][ T4822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.430192][ T4822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.441162][ T4822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.450318][ T4981] syz.4.500[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.450380][ T4981] syz.4.500[4981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.469367][ T4822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.489392][ T4822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.498138][ T4822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.506906][ T4822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.519969][ T4988] loop2: detected capacity change from 0 to 2048 [ 50.557897][ T4988] Alternate GPT is invalid, using primary GPT. [ 50.564200][ T4988] loop2: p1 p2 p3 [ 50.653155][ T5012] syz.4.514[5012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.653232][ T5012] syz.4.514[5012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.669995][ T5011] pimreg: entered allmulticast mode [ 50.689770][ T5011] pimreg: left allmulticast mode [ 50.719318][ T5018] __nla_validate_parse: 2 callbacks suppressed [ 50.719333][ T5018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 50.819827][ T5041] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 50.852517][ T5048] loop4: detected capacity change from 0 to 128 [ 50.887616][ T5052] loop0: detected capacity change from 0 to 128 [ 50.902901][ T5052] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.917957][ T5052] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.940410][ T5064] loop1: detected capacity change from 0 to 512 [ 50.957838][ T5064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.970880][ T5064] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.983637][ T3265] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.023071][ T5072] loop4: detected capacity change from 0 to 2048 [ 51.045378][ T5064] loop1: detected capacity change from 512 to 511 [ 51.062183][ T5064] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #18: comm syz.1.538: corrupted xattr block 20: invalid header [ 51.075938][ T5072] loop4: p1 < > p3 [ 51.080181][ T5072] loop4: p3 size 134217728 extends beyond EOD, truncated [ 51.094623][ T5064] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.538: bg 0: block 16032: padding at end of block bitmap is not set [ 51.126945][ T5090] loop2: detected capacity change from 0 to 512 [ 51.142771][ T5092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.152130][ T4822] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /4/file0: bad entry in directory: directory entry overrun - offset=2016, inode=2, rec_len=2036, size=2048 fake=1 [ 51.175313][ T5092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.186290][ T5090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.191342][ T4822] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 51.210575][ T5090] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.221767][ T4822] EXT4-fs error (device loop1): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 12 [ 51.281464][ T3261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.388025][ T5127] netlink: 76 bytes leftover after parsing attributes in process `syz.4.567'. [ 51.428038][ T5123] loop2: detected capacity change from 0 to 2048 [ 51.454558][ T5134] loop0: detected capacity change from 0 to 512 [ 51.461371][ T5134] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.473147][ T5134] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.570: invalid indirect mapped block 4294967295 (level 0) [ 51.487750][ T5123] loop2: p1 < > p3 [ 51.488832][ T5136] sctp: [Deprecated]: syz.4.568 (pid 5136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.488832][ T5136] Use struct sctp_sack_info instead [ 51.491985][ T5134] EXT4-fs (loop0): Remounting filesystem read-only [ 51.512274][ T5123] loop2: p3 size 134217728 extends beyond EOD, truncated [ 51.514725][ T5134] EXT4-fs (loop0): 1 orphan inode deleted [ 51.527105][ T5134] EXT4-fs (loop0): 1 truncate cleaned up [ 51.533203][ T5134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.533239][ T5134] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 51.533808][ T5134] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.732561][ T5154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.741332][ T5154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.800406][ T5162] loop0: detected capacity change from 0 to 2048 [ 51.835539][ T5162] loop0: p1 < > p3 [ 51.839802][ T5162] loop0: p3 size 134217728 extends beyond EOD, truncated [ 52.017374][ T5184] loop0: detected capacity change from 0 to 256 [ 52.030030][ T5184] FAT-fs (loop0): Directory bread(block 64) failed [ 52.036619][ T5184] FAT-fs (loop0): Directory bread(block 65) failed [ 52.043184][ T5184] FAT-fs (loop0): Directory bread(block 66) failed [ 52.050704][ T5184] FAT-fs (loop0): Directory bread(block 67) failed [ 52.057367][ T5184] FAT-fs (loop0): Directory bread(block 68) failed [ 52.063928][ T5184] FAT-fs (loop0): Directory bread(block 69) failed [ 52.070689][ T5184] FAT-fs (loop0): Directory bread(block 70) failed [ 52.077745][ T5184] FAT-fs (loop0): Directory bread(block 71) failed [ 52.084322][ T5184] FAT-fs (loop0): Directory bread(block 72) failed [ 52.090981][ T5184] FAT-fs (loop0): Directory bread(block 73) failed [ 52.106281][ T5187] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 52.117158][ T5186] IPVS: stopping master sync thread 5187 ... [ 52.147833][ T5184] syz.0.591: attempt to access beyond end of device [ 52.147833][ T5184] loop0: rw=2049, sector=1800, nr_sectors = 540 limit=256 [ 52.202531][ T5197] loop0: detected capacity change from 0 to 256 [ 52.216085][ T5197] FAT-fs (loop0): Directory bread(block 64) failed [ 52.222905][ T5197] FAT-fs (loop0): Directory bread(block 65) failed [ 52.229968][ T5197] FAT-fs (loop0): Directory bread(block 66) failed [ 52.237617][ T5197] FAT-fs (loop0): Directory bread(block 67) failed [ 52.244237][ T5197] FAT-fs (loop0): Directory bread(block 68) failed [ 52.251083][ T5197] FAT-fs (loop0): Directory bread(block 69) failed [ 52.258308][ T5197] FAT-fs (loop0): Directory bread(block 70) failed [ 52.271537][ T5197] FAT-fs (loop0): Directory bread(block 71) failed [ 52.285341][ T5197] FAT-fs (loop0): Directory bread(block 72) failed [ 52.300907][ T5197] FAT-fs (loop0): Directory bread(block 73) failed [ 52.301584][ T5202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 52.320394][ T5202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 52.372371][ T55] kworker/u8:4: attempt to access beyond end of device [ 52.372371][ T55] loop0: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 52.380748][ T5212] loop3: detected capacity change from 0 to 128 [ 52.394138][ T5212] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.406776][ T5212] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.469475][ T4644] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.746448][ T5252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.755747][ T5252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.214957][ T5290] loop2: detected capacity change from 0 to 128 [ 53.222751][ T5290] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.234919][ T5290] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.250457][ T5294] syzkaller1: entered promiscuous mode [ 53.256052][ T5294] syzkaller1: entered allmulticast mode [ 53.290612][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 53.299520][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.306952][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.315038][ T5296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.322631][ T5296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.343522][ T5298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.642'. [ 53.372676][ T5300] loop4: detected capacity change from 0 to 512 [ 53.379488][ T5300] EXT4-fs: Ignoring removed oldalloc option [ 53.387426][ T5300] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.643: Parent and EA inode have the same ino 15 [ 53.400288][ T5300] EXT4-fs (loop4): Remounting filesystem read-only [ 53.406930][ T5300] EXT4-fs warning (device loop4): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 53.417110][ T5300] EXT4-fs (loop4): 1 orphan inode deleted [ 53.423163][ T5300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.437029][ T5300] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 53.444507][ T5300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.637860][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.646495][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.667246][ T5290] ================================================================== [ 53.675348][ T5290] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 53.682560][ T5290] [ 53.684874][ T5290] write to 0xffff88810722e014 of 4 bytes by task 5297 on cpu 0: [ 53.692505][ T5290] __xa_set_mark+0x182/0x1b0 [ 53.697103][ T5290] __folio_mark_dirty+0x3b5/0x4e0 [ 53.702134][ T5290] mark_buffer_dirty+0x148/0x250 [ 53.707083][ T5290] block_write_end+0x16d/0x300 [ 53.711846][ T5290] generic_write_end+0x55/0x230 [ 53.716691][ T5290] fat_write_end+0x4e/0x160 [ 53.721206][ T5290] generic_perform_write+0x36e/0x580 [ 53.726500][ T5290] __generic_file_write_iter+0xa1/0x120 [ 53.732137][ T5290] generic_file_write_iter+0x7d/0x1d0 [ 53.737507][ T5290] iter_file_splice_write+0x5e6/0x970 [ 53.742886][ T5290] direct_splice_actor+0x16c/0x2c0 [ 53.747999][ T5290] splice_direct_to_actor+0x305/0x670 [ 53.753382][ T5290] do_splice_direct+0xd7/0x150 [ 53.758155][ T5290] do_sendfile+0x3ab/0x950 [ 53.762571][ T5290] __x64_sys_sendfile64+0x110/0x150 [ 53.767778][ T5290] x64_sys_call+0xed5/0x2d60 [ 53.772376][ T5290] do_syscall_64+0xc9/0x1c0 [ 53.776885][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.782793][ T5290] [ 53.785195][ T5290] read to 0xffff88810722e014 of 4 bytes by task 5290 on cpu 1: [ 53.792726][ T5290] xas_find_marked+0x60a/0x660 [ 53.797496][ T5290] find_get_entry+0x54/0x390 [ 53.802092][ T5290] filemap_get_folios_tag+0x9e/0x210 [ 53.807384][ T5290] __filemap_fdatawait_range+0x82/0x140 [ 53.812945][ T5290] file_write_and_wait_range+0x110/0x170 [ 53.818581][ T5290] __generic_file_fsync+0x4c/0x140 [ 53.823697][ T5290] fat_file_fsync+0x4c/0x100 [ 53.828295][ T5290] vfs_fsync_range+0x122/0x140 [ 53.833064][ T5290] generic_file_write_iter+0x191/0x1d0 [ 53.838525][ T5290] iter_file_splice_write+0x5e6/0x970 [ 53.843907][ T5290] direct_splice_actor+0x16c/0x2c0 [ 53.849018][ T5290] splice_direct_to_actor+0x305/0x670 [ 53.854404][ T5290] do_splice_direct+0xd7/0x150 [ 53.859182][ T5290] do_sendfile+0x3ab/0x950 [ 53.863588][ T5290] __x64_sys_sendfile64+0x110/0x150 [ 53.868797][ T5290] x64_sys_call+0xed5/0x2d60 [ 53.873386][ T5290] do_syscall_64+0xc9/0x1c0 [ 53.877892][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.883795][ T5290] [ 53.886101][ T5290] value changed: 0x04000021 -> 0x0a000021 [ 53.891809][ T5290] [ 53.894121][ T5290] Reported by Kernel Concurrency Sanitizer on: [ 53.900254][ T5290] CPU: 1 UID: 0 PID: 5290 Comm: syz.2.639 Not tainted 6.11.0-rc6-syzkaller-00070-gc763c4339688 #0 [ 53.910851][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 53.920892][ T5290] ================================================================== [ 54.059082][ T28] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 54.576259][ T4822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.588226][ T55] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.738952][ T55] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.809343][ T55] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.878024][ T55] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.958894][ T55] bridge_slave_1: left allmulticast mode [ 56.964542][ T55] bridge_slave_1: left promiscuous mode [ 56.970237][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.978690][ T55] bridge_slave_0: left allmulticast mode [ 56.984416][ T55] bridge_slave_0: left promiscuous mode [ 56.990149][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.087978][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.099181][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.109384][ T55] bond0 (unregistering): Released all slaves [ 57.207397][ T55] hsr_slave_0: left promiscuous mode [ 57.213046][ T55] hsr_slave_1: left promiscuous mode [ 57.219356][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.226758][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.234185][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.242765][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.253182][ T55] veth1_macvtap: left promiscuous mode [ 57.258720][ T55] veth0_macvtap: left promiscuous mode [ 57.264198][ T55] veth1_vlan: left promiscuous mode [ 57.269633][ T55] veth0_vlan: left promiscuous mode [ 57.354441][ T55] team0 (unregistering): Port device team_slave_1 removed [ 57.366970][ T55] team0 (unregistering): Port device team_slave_0 removed