last executing test programs: 951.33814ms ago: executing program 4 (id=6237): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 926.507281ms ago: executing program 4 (id=6239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x5) 723.880616ms ago: executing program 2 (id=6249): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000340)=0x7f, 0x4) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/252, 0xfc}, {0x0}], 0x2}, 0x1}], 0x1, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 627.070294ms ago: executing program 2 (id=6254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800001, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 626.849064ms ago: executing program 2 (id=6255): openat$ipvs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 608.801995ms ago: executing program 2 (id=6257): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xc0085504, &(0x7f00000000c0)={{r1}, "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"}) 532.238811ms ago: executing program 0 (id=6262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xd8}}, 0x40) 437.728738ms ago: executing program 0 (id=6269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a3200000000140002"], 0x34}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090000000000000000000400"], 0x14}}, 0x0) 397.163ms ago: executing program 0 (id=6271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x1000000) 354.872924ms ago: executing program 3 (id=6272): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f00000004c0)="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", 0x229}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877facd7b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a43cbd48ecc22dd81c5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f77", 0x82}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffeb8, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 354.691004ms ago: executing program 0 (id=6273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cd", 0x6, 0x840, 0x0, 0x0) 354.370214ms ago: executing program 0 (id=6275): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000"], 0x0}, 0x90) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) 336.360705ms ago: executing program 0 (id=6277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) 305.563498ms ago: executing program 4 (id=6278): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @remote, 0x1c}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 259.916491ms ago: executing program 4 (id=6280): r0 = io_uring_setup(0x7d5, &(0x7f0000000500)) io_setup(0x1, &(0x7f00000004c0)=0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$phonet(0x23, 0x2, 0x1) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\x00', 0x1}]) 259.085681ms ago: executing program 3 (id=6282): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') readlinkat(r1, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 214.145374ms ago: executing program 1 (id=6284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x0) 213.789474ms ago: executing program 3 (id=6285): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x28201, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) 187.208256ms ago: executing program 1 (id=6286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cd", 0x6, 0x840, 0x0, 0x0) 186.852427ms ago: executing program 3 (id=6287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0xfff, 0xff, 0x80, 0x8000}]}) 185.077657ms ago: executing program 1 (id=6296): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') readlinkat(r1, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 161.220678ms ago: executing program 3 (id=6288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") 160.674309ms ago: executing program 1 (id=6289): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) 104.805292ms ago: executing program 4 (id=6290): r0 = syz_io_uring_setup(0x2785, &(0x7f0000000680), &(0x7f0000000100), &(0x7f0000001440)) r1 = io_uring_setup(0x2e1b, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x2000f000, r2) 101.578893ms ago: executing program 4 (id=6291): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x4008031, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) 96.459033ms ago: executing program 1 (id=6292): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000279600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TCSBRK(r2, 0x5409, 0x7) 74.170815ms ago: executing program 2 (id=6293): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f00000004c0)="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", 0x229}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877facd7b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a43cbd48ecc22dd81c5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f77", 0x82}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffeb8, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 73.705615ms ago: executing program 1 (id=6304): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) shutdown(r0, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x82, &(0x7f0000000140), 0x8) 41.483677ms ago: executing program 3 (id=6294): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0xffffffffffffffff, &(0x7f0000000040)=0x31) 0s ago: executing program 2 (id=6295): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000680), 0x24, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.248523][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.256464][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.264389][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.271857][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.279359][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.286800][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.294378][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.301948][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.309661][ T3338] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.320862][ T3338] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 137.335283][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.418538][T12746] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 137.537762][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4038'. [ 137.646504][T12765] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4043'. [ 137.655965][T12765] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4043'. [ 137.715433][T12770] loop2: detected capacity change from 0 to 128 [ 138.263851][T12820] loop1: detected capacity change from 0 to 512 [ 138.279174][T12820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.304838][T12820] ext4 filesystem being mounted at /905/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.346112][ T3654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.385265][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.438927][T12830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4072'. [ 138.483610][T12832] loop1: detected capacity change from 0 to 512 [ 138.503868][T12834] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 138.512248][T12834] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 138.524733][T12832] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.4073: Invalid inode bitmap blk 4 in block_group 0 [ 138.561163][T12832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.596090][T12832] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.4073: Invalid inode bitmap blk 4 in block_group 0 [ 138.616672][T12832] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 138.657247][ T3654] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.977992][T12890] Cannot find set identified by id 0 to match [ 139.143637][T12903] loop2: detected capacity change from 0 to 512 [ 139.155361][T12903] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 139.170212][T12908] loop4: detected capacity change from 0 to 512 [ 139.190230][T12908] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.224484][T12903] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 139.252466][T12908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.254721][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4111'. [ 139.266002][T12908] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.288140][T12908] syz.4.4109[12908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.288218][T12908] syz.4.4109[12908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.301593][T12908] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 139.372291][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 139.372309][ T29] audit: type=1326 audit(1725430627.772:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.402334][ T29] audit: type=1326 audit(1725430627.772:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.425860][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.444043][ T29] audit: type=1326 audit(1725430627.842:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.467769][ T29] audit: type=1326 audit(1725430627.842:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.491290][ T29] audit: type=1326 audit(1725430627.842:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.514820][ T29] audit: type=1326 audit(1725430627.842:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.538480][ T29] audit: type=1326 audit(1725430627.842:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.562221][ T29] audit: type=1326 audit(1725430627.842:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.585833][ T29] audit: type=1326 audit(1725430627.842:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.613916][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.623988][ T29] audit: type=1326 audit(1725430627.942:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 139.690786][T12934] syz.1.4128[12934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.690851][T12934] syz.1.4128[12934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.734995][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.753889][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.761412][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.769358][T12940] netlink: 'syz.1.4120': attribute type 13 has an invalid length. [ 139.769771][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.784771][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.792230][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.799717][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.807307][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.814824][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.822451][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.830061][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.837539][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.844936][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.852382][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.859856][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.867338][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.874762][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.882309][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.889772][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.897574][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.906751][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.914212][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.921702][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.929154][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.936598][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.944184][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.951699][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.959228][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.966728][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.974143][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.981659][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.985021][T12949] loop0: detected capacity change from 0 to 2048 [ 139.989123][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.989152][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.989179][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.989204][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.989264][ T3337] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 139.989612][ T3337] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 140.043570][T12940] gretap0: refused to change device tx_queue_len [ 140.053022][T12940] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.107614][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'. [ 140.139299][T12949] loop0: p1 p2 p3 [ 140.213386][T12968] loop0: detected capacity change from 0 to 512 [ 140.228432][T12968] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.4135: invalid block [ 140.241718][T12968] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4135: invalid indirect mapped block 4294967295 (level 1) [ 140.267641][T12968] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4135: invalid indirect mapped block 4294967295 (level 1) [ 140.282007][T12968] EXT4-fs (loop0): 2 truncates cleaned up [ 140.288852][T12968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.314745][T12968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.323780][T12982] loop3: detected capacity change from 0 to 128 [ 140.330712][T12968] EXT4-fs error (device loop0): __ext4_remount:6491: comm syz.0.4135: Abort forced by user [ 140.340979][T12968] EXT4-fs (loop0): Remounting filesystem read-only [ 140.352297][T12968] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 140.365632][T12968] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 140.376563][T12987] netlink: 'syz.1.4144': attribute type 7 has an invalid length. [ 140.395667][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.465289][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 140.621249][T13021] loop3: detected capacity change from 0 to 512 [ 140.681353][T13021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.725351][T13021] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.748354][T13021] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4160: corrupted inode contents [ 140.763555][T13021] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.4160: mark_inode_dirty error [ 140.783187][T13021] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4160: corrupted inode contents [ 140.811021][T13021] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.4160: mark_inode_dirty error [ 140.845874][T13021] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #18: comm syz.3.4160: directory missing '.' [ 140.921166][ T9300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.120004][T13071] Cannot find del_set index 0 as target [ 141.179276][T13077] loop4: detected capacity change from 0 to 512 [ 141.208916][T13080] loop3: detected capacity change from 0 to 512 [ 141.217373][T13077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.230162][T13077] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.235914][T13080] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 141.256460][T13077] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4185: corrupted inode contents [ 141.269994][T13077] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.4185: mark_inode_dirty error [ 141.316315][T13077] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4185: corrupted inode contents [ 141.330047][T13088] loop2: detected capacity change from 0 to 256 [ 141.339918][T13088] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 141.373389][T13077] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4185: mark_inode_dirty error [ 141.416287][T13094] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #18: comm syz.4.4185: directory missing '.' [ 141.461437][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.495272][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 141.499123][T13111] loop4: detected capacity change from 0 to 512 [ 141.523232][T13111] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4197: invalid block [ 141.541206][T13111] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4197: invalid indirect mapped block 4294967295 (level 1) [ 141.556156][T13111] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4197: invalid indirect mapped block 4294967295 (level 1) [ 141.570551][T13111] EXT4-fs (loop4): 2 truncates cleaned up [ 141.577475][T13111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.610010][T13111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.625347][T13111] EXT4-fs error (device loop4): __ext4_remount:6491: comm syz.4.4197: Abort forced by user [ 141.638523][T13121] macvtap0: entered promiscuous mode [ 141.644510][T13121] macvtap0: left promiscuous mode [ 141.656858][T13119] syz.0.4203[13119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.657006][T13119] syz.0.4203[13119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.676196][T13111] EXT4-fs (loop4): Remounting filesystem read-only [ 141.707807][T13111] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 141.718824][T13127] loop3: detected capacity change from 0 to 256 [ 141.732030][T13111] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=11 [ 141.752737][T13130] pimreg: entered allmulticast mode [ 141.782127][T13130] pimreg: left allmulticast mode [ 141.787586][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.827976][T13142] syz.1.4215[13142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.828058][T13142] syz.1.4215[13142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.876864][T13142] netlink: 'syz.1.4215': attribute type 6 has an invalid length. [ 141.964873][T13152] cgroup: Unexpected value for 'cpuset_v2_mode' [ 142.105545][T13171] loop2: detected capacity change from 0 to 512 [ 142.122071][T13171] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.4228: invalid block [ 142.142684][T13176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4230'. [ 142.171485][T13171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4228: invalid indirect mapped block 4294967295 (level 1) [ 142.230284][T13171] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4228: invalid indirect mapped block 4294967295 (level 1) [ 142.281895][T13171] EXT4-fs (loop2): 2 truncates cleaned up [ 142.303014][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4237'. [ 142.310181][T13171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.312204][T13190] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4237'. [ 142.333607][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4237'. [ 142.338209][T13171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.363530][T13193] syz.1.4238[13193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.363595][T13193] syz.1.4238[13193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.381661][T13171] EXT4-fs error (device loop2): __ext4_remount:6491: comm syz.2.4228: Abort forced by user [ 142.423268][T13194] loop4: detected capacity change from 0 to 4096 [ 142.432892][T13171] EXT4-fs (loop2): Remounting filesystem read-only [ 142.439762][T13194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.446578][T13171] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 142.462044][T13171] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 142.476737][T13194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.500643][ T9922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.532936][T13192] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.4239: corrupted inode contents [ 142.545302][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 142.577973][T13192] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #15: comm syz.4.4239: mark_inode_dirty error [ 142.624598][T13192] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.4239: corrupted inode contents [ 142.652525][T13192] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.4239: mark_inode_dirty error [ 142.673884][T13192] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.4239: corrupted inode contents [ 142.687828][T13192] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.4239: mark_inode_dirty error [ 142.701032][T13192] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm syz.4.4239: corrupted inode contents [ 142.721856][T13192] EXT4-fs error (device loop4): ext4_truncate:4241: inode #15: comm syz.4.4239: mark_inode_dirty error [ 142.735177][T13192] EXT4-fs error (device loop4): ext4_evict_inode:262: comm syz.4.4239: couldn't truncate inode 15 (err -117) [ 142.763774][T13235] syzkaller1: entered promiscuous mode [ 142.769195][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.769432][T13235] syzkaller1: entered allmulticast mode [ 142.846540][T13245] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4262'. [ 142.881583][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4265'. [ 142.890540][T13249] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 143.000339][T13261] loop2: detected capacity change from 0 to 4096 [ 143.007901][T13261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.031687][T13261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.050888][T13259] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.4270: corrupted inode contents [ 143.072524][T13259] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #15: comm syz.2.4270: mark_inode_dirty error [ 143.086295][T13259] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.4270: corrupted inode contents [ 143.103136][T13259] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.4270: mark_inode_dirty error [ 143.125265][T13259] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.4270: corrupted inode contents [ 143.140598][T13259] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.4270: mark_inode_dirty error [ 143.163563][T13259] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #15: comm syz.2.4270: corrupted inode contents [ 143.181702][T13259] EXT4-fs error (device loop2): ext4_truncate:4241: inode #15: comm syz.2.4270: mark_inode_dirty error [ 143.202551][T13259] EXT4-fs error (device loop2): ext4_evict_inode:262: comm syz.2.4270: couldn't truncate inode 15 (err -117) [ 143.237919][ T9922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.533801][T13311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4291'. [ 143.575310][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.596261][T13317] tipc: Started in network mode [ 143.601164][T13317] tipc: Node identity 7ff, cluster identity 4711 [ 143.608007][T13317] tipc: Node number set to 2047 [ 143.626822][T13321] netlink: 'syz.1.4306': attribute type 10 has an invalid length. [ 143.661877][T13321] team0: Device hsr_slave_0 failed to register rx_handler [ 143.938654][T13352] netlink: 'syz.3.4312': attribute type 10 has an invalid length. [ 143.982417][T13352] team0: Device hsr_slave_0 failed to register rx_handler [ 144.331899][T13391] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.490219][T13418] netlink: 'syz.4.4343': attribute type 10 has an invalid length. [ 144.516095][T13418] bridge0: port 3(team0) entered blocking state [ 144.522420][T13418] bridge0: port 3(team0) entered disabled state [ 144.536111][T13418] team0: entered allmulticast mode [ 144.541288][T13418] team_slave_0: entered allmulticast mode [ 144.547140][T13418] team_slave_1: entered allmulticast mode [ 144.566337][T13418] team0: entered promiscuous mode [ 144.571417][T13418] team_slave_0: entered promiscuous mode [ 144.577260][T13418] team_slave_1: entered promiscuous mode [ 144.583602][T13418] bridge0: port 3(team0) entered blocking state [ 144.589983][T13418] bridge0: port 3(team0) entered forwarding state [ 144.615303][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 144.669210][T13425] loop4: detected capacity change from 0 to 256 [ 145.234693][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 145.234708][ T29] audit: type=1400 audit(1725430633.632:3777): avc: denied { watch_reads } for pid=13457 comm="syz.0.4360" path="/321" dev="tmpfs" ino=1660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 145.318884][T13460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4361'. [ 145.386749][T13470] Process accounting resumed [ 145.474918][ T29] audit: type=1400 audit(1725430633.872:3778): avc: denied { write } for pid=13479 comm="syz.2.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.570912][ T29] audit: type=1400 audit(1725430633.962:3779): avc: denied { ioctl } for pid=13490 comm="syz.1.4377" path="socket:[39829]" dev="sockfs" ino=39829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.596614][ T29] audit: type=1400 audit(1725430633.962:3780): avc: denied { bind } for pid=13490 comm="syz.1.4377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.665301][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 145.868545][ T29] audit: type=1400 audit(1725430634.272:3781): avc: denied { mount } for pid=13533 comm="syz.1.4397" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 145.891089][ T29] audit: type=1326 audit(1725430634.272:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 145.930594][ T29] audit: type=1326 audit(1725430634.272:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 145.954822][ T29] audit: type=1326 audit(1725430634.272:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 145.979125][ T29] audit: type=1326 audit(1725430634.272:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.4398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 146.026856][ T29] audit: type=1326 audit(1725430634.362:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13542 comm="syz.1.4403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f338cef9 code=0x7ffc0000 [ 146.215120][T13576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4419'. [ 146.224350][T13576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4419'. [ 146.402399][T13605] syz.4.4433[13605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.402490][T13605] syz.4.4433[13605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.525991][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.556621][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.695319][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 146.819916][T13652] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 146.829163][T13652] vhci_hcd: invalid port number 23 [ 146.850037][T13655] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 146.861595][T13654] IPVS: stopping master sync thread 13655 ... [ 147.155439][T13670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.162671][T13670] IPv6: NLM_F_CREATE should be set when creating new route [ 147.210183][T13678] syz.1.4465[13678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.210263][T13678] syz.1.4465[13678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.328853][T13688] loop0: detected capacity change from 0 to 2048 [ 147.366148][T13688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.406906][T13688] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.475372][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.539253][T13708] Cannot find del_set index 0 as target [ 147.601780][T13719] xt_CT: No such helper "netbios-ns" [ 147.664196][T13734] loop4: detected capacity change from 0 to 512 [ 147.708865][T13734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.722492][T13734] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.735270][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 147.740807][T13734] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: block 32: comm syz.4.4500: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.763669][T13734] EXT4-fs error (device loop4): ext4_get_first_dir_block:3541: inode #12: comm syz.4.4500: directory missing '.' [ 147.790412][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.852243][T13762] syz.3.4503[13762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.852317][T13762] syz.3.4503[13762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.872188][T13758] hub 9-0:1.0: USB hub found [ 147.894247][T13758] hub 9-0:1.0: 8 ports detected [ 147.911710][T13767] __nla_validate_parse: 3 callbacks suppressed [ 147.911731][T13767] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4505'. [ 147.927194][T13767] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4505'. [ 148.107171][T13790] syz.0.4516[13790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.107244][T13790] syz.0.4516[13790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.162648][T13796] loop0: detected capacity change from 0 to 512 [ 148.182445][T13796] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.191616][T13796] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 148.214284][T13796] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 148.222822][T13796] EXT4-fs (loop0): failed to initialize system zone (-117) [ 148.230947][T13796] EXT4-fs (loop0): mount failed [ 148.708514][T13835] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4538'. [ 148.776005][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 148.881094][T13862] loop4: detected capacity change from 0 to 1024 [ 148.887871][T13862] EXT4-fs: Ignoring removed orlov option [ 148.893614][T13862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.940674][T13865] xt_CT: No such helper "netbios-ns" [ 148.975474][T13862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.159632][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.239063][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4569'. [ 149.271017][T13909] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4571'. [ 149.280332][T13909] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4571'. [ 149.444347][T13939] hub 9-0:1.0: USB hub found [ 149.451726][T13939] hub 9-0:1.0: 8 ports detected [ 149.471891][T13949] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4591'. [ 149.481298][T13949] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4591'. [ 149.664358][T13975] hub 9-0:1.0: USB hub found [ 149.676829][T13975] hub 9-0:1.0: 8 ports detected [ 149.722738][T13947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.736147][T13947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.748365][T13982] loop0: detected capacity change from 0 to 512 [ 149.780122][T13982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.783991][T13987] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4606'. [ 149.802039][T13987] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4606'. [ 149.804306][T13982] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.825292][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 149.866118][T13982] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #12: block 32: comm syz.0.4605: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 149.889969][T13982] EXT4-fs error (device loop0): ext4_get_first_dir_block:3541: inode #12: comm syz.0.4605: directory missing '.' [ 149.924347][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.967764][T14004] loop0: detected capacity change from 0 to 512 [ 149.976170][T14004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.992025][T14007] syz.3.4617[14007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.992144][T14007] syz.3.4617[14007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.012357][T14004] EXT4-fs (loop0): 1 orphan inode deleted [ 150.029803][T14004] EXT4-fs (loop0): 1 truncate cleaned up [ 150.045678][T14004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.117689][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.256897][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 150.256911][ T29] audit: type=1326 audit(1725430638.662:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.315425][ T29] audit: type=1326 audit(1725430638.692:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.339035][ T29] audit: type=1326 audit(1725430638.692:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.3.4631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.369973][T14045] loop4: detected capacity change from 0 to 512 [ 150.379482][T14045] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.389050][T14045] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 150.417012][T14045] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 150.426966][T14045] EXT4-fs (loop4): failed to initialize system zone (-117) [ 150.436271][T14045] EXT4-fs (loop4): mount failed [ 150.461379][ T29] audit: type=1326 audit(1725430638.862:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14053 comm="syz.3.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.482071][T14056] syz.2.4639[14056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.484944][T14056] syz.2.4639[14056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.495794][ T29] audit: type=1326 audit(1725430638.892:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14053 comm="syz.3.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.532518][ T29] audit: type=1326 audit(1725430638.892:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14053 comm="syz.3.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.709456][ T29] audit: type=1326 audit(1725430639.112:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.733298][ T29] audit: type=1326 audit(1725430639.112:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.758670][ T29] audit: type=1326 audit(1725430639.112:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.782323][ T29] audit: type=1326 audit(1725430639.112:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 150.825584][T14080] tipc: Enabling of bearer rejected, failed to enable media [ 150.851086][T14082] tipc: Started in network mode [ 150.856026][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 150.863093][T14082] tipc: Node identity 00005f20000000006e, cluster identity 8 [ 150.993263][T14095] batadv_slave_1: entered promiscuous mode [ 151.009767][T14094] batadv_slave_1: left promiscuous mode [ 151.712415][T14180] syz.1.4698 (14180) used greatest stack depth: 9240 bytes left [ 151.807739][T14200] loop4: detected capacity change from 0 to 128 [ 151.828846][T14174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.851902][T14174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.895302][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.157994][T14237] netlink: 'syz.1.4714': attribute type 21 has an invalid length. [ 152.268231][T14246] SELinux: failed to load policy [ 152.936499][T14354] 9pnet: Could not find request transport: t [ 152.945253][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.994939][T14366] batadv_slave_1: entered promiscuous mode [ 153.017925][T14362] batadv_slave_1: left promiscuous mode [ 153.191013][T14394] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=14394 comm=syz.0.4740 [ 153.434157][T14420] netlink: 'syz.3.4753': attribute type 13 has an invalid length. [ 153.442820][T14420] __nla_validate_parse: 1 callbacks suppressed [ 153.442833][T14420] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.4753'. [ 153.556497][T14438] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4763'. [ 153.582633][T14444] loop0: detected capacity change from 0 to 512 [ 153.617997][T14444] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4764: casefold flag without casefold feature [ 153.669666][T14444] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4764: couldn't read orphan inode 15 (err -117) [ 153.724528][T14444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.808881][T14461] program syz.4.4771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.820136][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.908512][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.930135][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.946424][T14473] bpf_get_probe_write_proto: 4 callbacks suppressed [ 153.946516][T14473] syz.4.4778[14473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.964133][T14473] syz.4.4778[14473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.975627][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 154.086784][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4785'. [ 154.135750][T14487] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 40615 - 0 [ 154.144678][T14487] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 40615 - 0 [ 154.153527][T14487] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 40615 - 0 [ 154.163056][T14487] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 40615 - 0 [ 154.176378][T14487] geneve2: entered promiscuous mode [ 154.206001][T14487] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 40615 - 0 [ 154.215077][T14487] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 40615 - 0 [ 154.224211][T14487] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 40615 - 0 [ 154.233244][T14487] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 40615 - 0 [ 154.438338][T14504] loop0: detected capacity change from 0 to 512 [ 154.493695][T14504] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.4790: Invalid inode bitmap blk 4 in block_group 0 [ 154.510707][T14504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.535167][T14504] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 154.624268][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.750617][T14532] loop4: detected capacity change from 0 to 2048 [ 154.776924][T14532] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.806018][T14532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.898808][T14532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4805: bg 0: block 234: padding at end of block bitmap is not set [ 154.916551][T14532] EXT4-fs (loop4): Remounting filesystem read-only [ 155.009454][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4817'. [ 155.025254][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 155.147074][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.280907][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 155.280924][ T29] audit: type=1326 audit(1725430643.682:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.2.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 155.321628][T14587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4830'. [ 155.331428][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4830'. [ 155.336090][ T29] audit: type=1326 audit(1725430643.712:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.2.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 155.340459][T14587] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 155.363970][ T29] audit: type=1326 audit(1725430643.722:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.2.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 155.385093][ T29] audit: type=1326 audit(1725430643.782:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.2.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 155.421384][ T29] audit: type=1326 audit(1725430643.782:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14584 comm="syz.2.4829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 155.452493][T14587] bond2: entered allmulticast mode [ 155.458614][T14587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.494126][ T29] audit: type=1326 audit(1725430643.832:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.0.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 155.518428][ T29] audit: type=1326 audit(1725430643.832:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.0.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 155.542133][ T29] audit: type=1326 audit(1725430643.832:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.0.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 155.566492][ T29] audit: type=1326 audit(1725430643.832:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.0.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 155.590063][ T29] audit: type=1326 audit(1725430643.852:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.0.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e534bcef9 code=0x7ffc0000 [ 155.730022][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4843'. [ 155.767889][T14621] xt_NFQUEUE: number of total queues is 0 [ 155.836328][T14627] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 155.919435][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4851'. [ 155.989539][T14642] loop4: detected capacity change from 0 to 2048 [ 156.001668][T14643] syzkaller1: entered promiscuous mode [ 156.007894][T14643] syzkaller1: entered allmulticast mode [ 156.045472][T14642] loop4: p1 < > p3 p4 < > [ 156.050565][T14642] loop4: p3 start 4259840 is beyond EOD, truncated [ 156.057173][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.127444][T14645] loop4: detected capacity change from 0 to 512 [ 156.169361][T14645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.193029][T14645] ext4 filesystem being mounted at /556/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.220927][T14645] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4856: corrupted inode contents [ 156.234118][T14645] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.4856: mark_inode_dirty error [ 156.247435][T14645] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4856: corrupted inode contents [ 156.268594][T14645] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4856: mark_inode_dirty error [ 156.305173][ T8719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.728578][T14685] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.759412][T14687] loop0: detected capacity change from 0 to 512 [ 156.777619][T14687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.805303][T14687] ext4 filesystem being mounted at /433/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.853045][ T9948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.021040][T14716] netlink: 844 bytes leftover after parsing attributes in process `syz.1.4885'. [ 157.032060][T14716] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 157.095782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.104263][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.834797][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4896'. [ 157.858129][T14739] syz.4.4897[14739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.858192][T14739] syz.4.4897[14739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.997452][T12440] bond0: (slave syz_tun): Releasing backup interface [ 158.053122][T14768] syz.2.4911[14768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.053245][T14768] syz.2.4911[14768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.100158][ T3526] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.135262][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.202510][ T3526] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.260018][ T3526] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.329691][ T3526] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.472451][T14821] loop4: detected capacity change from 0 to 2048 [ 158.492496][ T3526] bridge_slave_1: left allmulticast mode [ 158.498983][ T3526] bridge_slave_1: left promiscuous mode [ 158.504686][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.524176][ T3526] bridge_slave_0: left allmulticast mode [ 158.530839][ T3526] bridge_slave_0: left promiscuous mode [ 158.536637][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.550074][T14828] 9pnet_fd: Insufficient options for proto=fd [ 158.566081][T14821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4933: bg 0: block 136: padding at end of block bitmap is not set [ 158.798007][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.818302][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.830722][ T3526] bond0 (unregistering): Released all slaves [ 158.845525][T14826] __nla_validate_parse: 2 callbacks suppressed [ 158.845544][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4934'. [ 158.868921][T14826] vlan3: entered promiscuous mode [ 158.874044][T14826] macvlan1: entered promiscuous mode [ 158.890256][ T3526] tipc: Left network mode [ 158.902770][T14786] chnl_net:caif_netlink_parms(): no params data found [ 158.985309][ T3526] hsr_slave_0: left promiscuous mode [ 158.992153][ T3526] hsr_slave_1: left promiscuous mode [ 159.008031][ T3526] veth1_macvtap: left promiscuous mode [ 159.013541][ T3526] veth0_macvtap: left promiscuous mode [ 159.019494][ T3526] veth1_vlan: left promiscuous mode [ 159.024736][ T3526] veth0_vlan: left allmulticast mode [ 159.030129][ T3526] veth0_vlan: left promiscuous mode [ 159.146755][ T3526] team0 (unregistering): Port device batadv0 removed [ 159.175262][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.241756][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 159.259040][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 159.336870][T14864] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4948'. [ 159.351715][T14864] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 159.373530][T14786] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.380695][T14786] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.389869][T14786] bridge_slave_0: entered allmulticast mode [ 159.396623][T14786] bridge_slave_0: entered promiscuous mode [ 159.424441][T14786] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.431611][T14786] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.445967][T14786] bridge_slave_1: entered allmulticast mode [ 159.459799][T14786] bridge_slave_1: entered promiscuous mode [ 159.488428][T14786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.510919][T14786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.568392][T14786] team0: Port device team_slave_0 added [ 159.580042][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4958'. [ 159.591871][T14924] vlan0: entered promiscuous mode [ 159.597182][T14924] macvlan1: entered promiscuous mode [ 159.610456][T14786] team0: Port device team_slave_1 added [ 159.647737][T14786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.654708][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.680875][T14786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.842489][T14786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.849516][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.875528][T14786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.969368][T14786] hsr_slave_0: entered promiscuous mode [ 159.976660][T14786] hsr_slave_1: entered promiscuous mode [ 159.992875][T14786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.993006][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'. [ 160.003015][T14786] Cannot create hsr debugfs directory [ 160.012607][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'. [ 160.190434][ T3526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.200855][ T3526] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.215313][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.231213][T14883] chnl_net:caif_netlink_parms(): no params data found [ 160.260876][ T3526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.271362][ T3526] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.329782][ T3526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.340286][ T3526] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.358357][T14883] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.365528][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.374070][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 160.374085][ T29] audit: type=1326 audit(1725430648.772:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 160.411934][T14883] bridge_slave_0: entered allmulticast mode [ 160.425062][ T29] audit: type=1326 audit(1725430648.822:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.4971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 160.457377][T14883] bridge_slave_0: entered promiscuous mode [ 160.478314][ T3526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.488752][ T3526] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.503617][T14883] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.510860][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.519337][T15026] atomic_op ffff888112c12d28 conn xmit_atomic 0000000000000000 [ 160.519361][T14883] bridge_slave_1: entered allmulticast mode [ 160.533688][T14883] bridge_slave_1: entered promiscuous mode [ 160.587773][T14883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.627558][ T3526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.657692][T14883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.670222][T14983] chnl_net:caif_netlink_parms(): no params data found [ 160.728756][T14786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.762648][ T3526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.784124][T14786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.797622][T14883] team0: Port device team_slave_0 added [ 160.809026][T14786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.829822][T14883] team0: Port device team_slave_1 added [ 160.860832][ T3526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.886074][T14786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.957312][T14883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.964348][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.990791][T14883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.012644][T14883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.019730][T14883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.045799][T14883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.059011][ T29] audit: type=1326 audit(1725430649.462:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15058 comm="syz.3.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 161.082622][ T29] audit: type=1326 audit(1725430649.462:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15058 comm="syz.3.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 161.106313][ T29] audit: type=1326 audit(1725430649.462:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15058 comm="syz.3.4985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 161.133980][ T3526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.186304][T14983] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.193419][T14983] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.205566][T14983] bridge_slave_0: entered allmulticast mode [ 161.212020][T14983] bridge_slave_0: entered promiscuous mode [ 161.220855][T14983] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.228092][T14983] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.235458][T14983] bridge_slave_1: entered allmulticast mode [ 161.241988][T14983] bridge_slave_1: entered promiscuous mode [ 161.255277][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 161.264756][ T29] audit: type=1400 audit(1725430649.662:4241): avc: denied { bind } for pid=15064 comm="syz.3.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.311373][T14983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.331285][T14883] hsr_slave_0: entered promiscuous mode [ 161.339336][T14883] hsr_slave_1: entered promiscuous mode [ 161.345950][T14883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.355856][T14883] Cannot create hsr debugfs directory [ 161.386113][T14983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.403625][ T3526] bridge_slave_1: left allmulticast mode [ 161.409392][ T3526] bridge_slave_1: left promiscuous mode [ 161.415081][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.426134][ T3526] bridge_slave_0: left allmulticast mode [ 161.431953][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.446711][ T3526] team0: left allmulticast mode [ 161.451701][ T3526] team_slave_0: left allmulticast mode [ 161.457252][ T3526] team_slave_1: left allmulticast mode [ 161.462877][ T3526] team0: left promiscuous mode [ 161.467713][ T3526] team_slave_0: left promiscuous mode [ 161.473168][ T3526] team_slave_1: left promiscuous mode [ 161.478853][ T3526] bridge0: port 3(team0) entered disabled state [ 161.508038][ T3526] bridge_slave_1: left allmulticast mode [ 161.513717][ T3526] bridge_slave_1: left promiscuous mode [ 161.519486][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.535839][ T3526] bridge_slave_0: left allmulticast mode [ 161.541557][ T3526] bridge_slave_0: left promiscuous mode [ 161.547296][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.827009][ T3526] bond0 (unregistering): Released all slaves [ 161.838590][ T3526] bond1 (unregistering): Released all slaves [ 161.848528][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.860211][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.870796][ T3526] bond0 (unregistering): Released all slaves [ 161.880317][ T3526] bond1 (unregistering): Released all slaves [ 161.889910][ T3526] bond2 (unregistering): Released all slaves [ 161.910198][T14983] team0: Port device team_slave_0 added [ 161.916852][T14983] team0: Port device team_slave_1 added [ 161.962085][ T3526] tipc: Left network mode [ 161.970568][T14983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.977672][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.003694][T14983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.024598][ T3526] tipc: Left network mode [ 162.029893][ T29] audit: type=1326 audit(1725430650.432:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15073 comm="syz.2.4992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x0 [ 162.070664][T14983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.077707][T14983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.103731][T14983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.169896][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.181728][T14983] hsr_slave_0: entered promiscuous mode [ 162.196529][T14983] hsr_slave_1: entered promiscuous mode [ 162.202535][T14983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.217305][T14983] Cannot create hsr debugfs directory [ 162.230835][ T3526] hsr_slave_0: left promiscuous mode [ 162.237114][ T3526] hsr_slave_1: left promiscuous mode [ 162.242869][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.250593][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.258509][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.266010][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.273278][ T29] audit: type=1326 audit(1725430650.662:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.3.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 162.297039][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 162.304246][ T29] audit: type=1326 audit(1725430650.662:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.3.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 162.328057][ T29] audit: type=1326 audit(1725430650.662:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15077 comm="syz.3.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 162.357115][ T3526] hsr_slave_0: left promiscuous mode [ 162.362836][ T3526] hsr_slave_1: left promiscuous mode [ 162.384452][ T3526] macvlan1: left promiscuous mode [ 162.389719][ T3526] veth1_macvtap: left promiscuous mode [ 162.395470][ T3526] veth0_macvtap: left promiscuous mode [ 162.408335][ T3526] veth1_vlan: left promiscuous mode [ 162.413818][ T3526] veth0_vlan: left promiscuous mode [ 162.423264][ T3526] veth1_macvtap: left promiscuous mode [ 162.428914][ T3526] veth0_macvtap: left promiscuous mode [ 162.434442][ T3526] veth1_vlan: left promiscuous mode [ 162.439745][ T3526] veth0_vlan: left promiscuous mode [ 162.572530][ T3526] pim6reg (unregistering): left allmulticast mode [ 162.629256][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 162.642235][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 162.696509][ T3526] pimreg3 (unregistering): left allmulticast mode [ 162.748682][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 162.760574][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 162.818540][T14786] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.842148][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.849276][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.896253][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.903464][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.971954][T14786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.982392][T14786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.071472][T14883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.096852][T14883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.107691][T14883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.127505][T14883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.161835][T14786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.201161][T14883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.222575][T14883] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.247982][ T3496] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.255093][ T3496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.275467][ T3496] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.282589][ T3496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.326019][T14883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.336635][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.401289][T14786] veth0_vlan: entered promiscuous mode [ 163.419924][T14786] veth1_vlan: entered promiscuous mode [ 163.452905][ T3526] IPVS: stop unused estimator thread 0... [ 163.457618][T14786] veth0_macvtap: entered promiscuous mode [ 163.479527][ T3526] IPVS: stop unused estimator thread 0... [ 163.485146][T14883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.509990][T14786] veth1_macvtap: entered promiscuous mode [ 163.536722][T14983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.554718][T14983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.563812][T14983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.592085][T14983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.637150][T14786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.647704][T14786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.657823][T14786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.668301][T14786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.700841][T14786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.739117][T14786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.749748][T14786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.759684][T14786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.770269][T14786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.784687][T14786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.818776][T14983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.827344][T14786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.836238][T14786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.841546][T15178] syz.2.5028[15178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.844945][T14786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.844985][T15178] syz.2.5028[15178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.856519][T14786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.902076][T14983] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.917484][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.924676][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.976224][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.983488][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.038832][T14883] veth0_vlan: entered promiscuous mode [ 164.065064][T14983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.075684][T14983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.114409][T14883] veth1_vlan: entered promiscuous mode [ 164.148317][T14883] veth0_macvtap: entered promiscuous mode [ 164.188465][T14883] veth1_macvtap: entered promiscuous mode [ 164.212954][T15201] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 164.221246][T15201] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 164.232348][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.242935][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.252827][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.263393][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.273351][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.283951][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.296740][T14883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.306484][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.317165][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.327042][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.337544][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.347480][T14883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.357941][T14883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.370767][T14883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.382911][T14883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.385263][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.391677][T14883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.407258][T14883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.416304][T14883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.452982][T14983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.606196][T14983] veth0_vlan: entered promiscuous mode [ 164.624129][T15235] loop4: detected capacity change from 0 to 1024 [ 164.634455][T14983] veth1_vlan: entered promiscuous mode [ 164.651818][T14983] veth0_macvtap: entered promiscuous mode [ 164.663848][T15235] EXT4-fs mount: 2 callbacks suppressed [ 164.663867][T15235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.674869][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5044'. [ 164.696264][T14983] veth1_macvtap: entered promiscuous mode [ 164.726203][T15239] vlan0: entered promiscuous mode [ 164.726428][T14883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.731281][T15239] vlan0: entered allmulticast mode [ 164.755820][T15239] veth0_vlan: entered allmulticast mode [ 164.763215][T15239] team0: Port device vlan0 added [ 164.819438][T15244] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 164.830790][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.841355][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.851233][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.861777][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.871802][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.882283][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.892144][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.902795][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.923397][T14983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.959131][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.969913][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.979860][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.990340][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.000254][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.010727][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.020615][T14983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.031061][T14983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.042765][T14983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.060461][T14983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.069258][T14983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.078060][T14983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.086797][T14983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.166456][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'. [ 165.229647][T15277] SELinux: security_context_str_to_sid (‰ñ‹ÅT>Õr£Ä_‘Tߣå*¢¹¬ø û…M­t.ïa‡ò0HD–) failed with errno=-22 [ 165.258932][T15279] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.287217][T15279] vhci_hcd: invalid port number 23 [ 165.355120][T15293] loop4: detected capacity change from 0 to 1024 [ 165.372509][T15293] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 165.375234][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 165.375252][ T29] audit: type=1326 audit(1725430909.770:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.394552][T15293] JBD2: no valid journal superblock found [ 165.416681][ T29] audit: type=1326 audit(1725430909.820:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.418576][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.441982][ T29] audit: type=1326 audit(1725430909.820:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.448871][T15293] EXT4-fs (loop4): Could not load journal inode [ 165.507960][ T29] audit: type=1326 audit(1725430909.880:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.531644][ T29] audit: type=1326 audit(1725430909.880:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.555252][ T29] audit: type=1326 audit(1725430909.880:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.578809][ T29] audit: type=1326 audit(1725430909.880:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15295 comm="syz.3.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655499cef9 code=0x7ffc0000 [ 165.730254][T15320] loop0: detected capacity change from 0 to 128 [ 165.819185][T15329] batadv_slave_0: entered promiscuous mode [ 165.829102][T15329] batadv_slave_0: left promiscuous mode [ 165.856760][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 165.864583][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 165.892246][ T29] audit: type=1326 audit(1725430910.290:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 165.895359][ T9] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 165.916047][ T29] audit: type=1326 audit(1725430910.290:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 165.969519][ T9] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 165.989653][T15345] syz.0.5093[15345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.989722][T15345] syz.0.5093[15345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.007427][ T29] audit: type=1326 audit(1725430910.360:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15338 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 166.455272][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 166.513209][T15393] hub 9-0:1.0: USB hub found [ 166.523368][T15393] hub 9-0:1.0: 8 ports detected [ 166.602263][T15410] syz.3.5122[15410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.602337][T15410] syz.3.5122[15410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.665615][T15415] IPv6: Can't replace route, no match found [ 166.874043][T15442] syz.2.5139[15442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.874113][T15442] syz.2.5139[15442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.228382][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5157'. [ 167.495300][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.686700][T15518] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.779994][T15432] kexec: Could not allocate control_code_buffer [ 167.826081][ T8] kernel write not supported for file /snd/seq (pid: 8 comm: kworker/0:0) [ 167.979520][T15550] loop4: detected capacity change from 0 to 512 [ 167.994929][T15550] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 168.010040][T15550] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5191: invalid indirect mapped block 2683928664 (level 1) [ 168.049142][T15550] EXT4-fs (loop4): 1 truncate cleaned up [ 168.069286][T15550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.087163][ T3337] kernel write not supported for file /snd/seq (pid: 3337 comm: kworker/1:4) [ 168.165767][T14883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.290095][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5205'. [ 168.517662][T15602] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5214'. [ 168.535284][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.947551][T15649] netlink: 'syz.3.5237': attribute type 4 has an invalid length. [ 168.990890][T15649] netlink: 'syz.3.5237': attribute type 4 has an invalid length. [ 169.085534][ T35] kernel write not supported for file /snd/seq (pid: 35 comm: kworker/1:1) [ 169.232166][T15682] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 169.251946][T15679] IPVS: stopping master sync thread 15682 ... [ 169.583396][T15716] loop0: detected capacity change from 0 to 512 [ 169.585294][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.607579][T15716] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5266: casefold flag without casefold feature [ 169.643610][T15716] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5266: couldn't read orphan inode 15 (err -117) [ 169.675307][T15716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.738118][T14786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.799727][T15734] bond1: entered promiscuous mode [ 169.804893][T15734] bond1: entered allmulticast mode [ 169.811753][T15734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.838033][T15734] bond1 (unregistering): Released all slaves [ 169.883056][T15743] netlink: 'syz.4.5278': attribute type 10 has an invalid length. [ 169.890961][T15743] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5278'. [ 169.969059][T15749] loop4: detected capacity change from 0 to 2048 [ 170.015870][T15749] loop4: p1 < > p4 [ 170.020743][T15749] loop4: p4 size 8388608 extends beyond EOD, truncated [ 170.376101][ T35] kernel write not supported for file /snd/seq (pid: 35 comm: kworker/1:1) [ 170.429146][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 170.429160][ T29] audit: type=1326 audit(1725430914.830:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.503474][ T29] audit: type=1326 audit(1725430914.860:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.527414][ T29] audit: type=1326 audit(1725430914.860:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.551543][ T29] audit: type=1326 audit(1725430914.860:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.575407][ T29] audit: type=1326 audit(1725430914.860:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.599707][ T29] audit: type=1326 audit(1725430914.860:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.2.5305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.623372][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.715917][ T29] audit: type=1326 audit(1725430915.110:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.739584][ T29] audit: type=1326 audit(1725430915.110:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.763207][ T29] audit: type=1326 audit(1725430915.110:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.786953][ T29] audit: type=1326 audit(1725430915.110:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15824 comm="syz.2.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 170.816669][T15835] loop4: detected capacity change from 0 to 512 [ 170.826315][T15832] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5315'. [ 170.842965][T15835] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.850828][T15835] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 170.882706][T15835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 170.900970][T15835] System zones: 1-12 [ 170.924245][T15835] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.5324: corrupted in-inode xattr: e_value size too large [ 170.977371][T15835] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.5324: couldn't read orphan inode 15 (err -117) [ 171.007509][T15856] syz.3.5325[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.007634][T15856] syz.3.5325[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.010060][T15835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.090143][T15835] EXT4-fs error (device loop4): ext4_check_dx_root:2218: inode #2: comm syz.4.5324: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 171.131440][T14883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.180257][T15867] loop0: detected capacity change from 0 to 2048 [ 171.207640][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.218978][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.229392][T15867] loop0: p1 < > p4 [ 171.233755][T15867] loop0: p4 size 8388608 extends beyond EOD, truncated [ 171.358688][T15888] program syz.4.5340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.665262][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.903795][T15930] vlan2: entered promiscuous mode [ 171.909002][T15930] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 171.919015][T15930] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 172.566082][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 172.695257][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 172.782324][T16013] syz.2.5398[16013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.782395][T16013] syz.2.5398[16013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.887915][T16023] tipc: Enabling not permitted [ 172.892279][T16027] loop4: detected capacity change from 0 to 128 [ 172.899421][T16023] tipc: Enabling of bearer rejected, failed to enable media [ 172.926976][T16027] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.945536][T16027] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.035085][T16035] syz.3.5409[16035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.035272][T16035] syz.3.5409[16035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.052508][T16037] syz.0.5410[16037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.069612][T14883] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.096532][T16037] syz.0.5410[16037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.202280][T16056] hub 8-0:1.0: USB hub found [ 173.218842][T16056] hub 8-0:1.0: 8 ports detected [ 173.374181][T16079] netlink: 'syz.0.5429': attribute type 2 has an invalid length. [ 173.648306][T16117] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16117 comm=syz.1.5448 [ 173.662935][T16120] @: renamed from bond0 (while UP) [ 173.735590][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.849750][T16151] syz.3.5463[16151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.849871][T16151] syz.3.5463[16151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.956482][T16163] sctp: [Deprecated]: syz.3.5469 (pid 16163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.956482][T16163] Use struct sctp_sack_info instead [ 174.016390][ T984] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 174.024536][ T984] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 174.259724][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5481'. [ 174.283738][T16192] Cannot find del_set index 0 as target [ 174.599463][T16239] pim6reg1: entered promiscuous mode [ 174.604857][T16239] pim6reg1: entered allmulticast mode [ 174.716608][T16255] SELinux: failed to load policy [ 174.775340][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.928268][ T3336] kernel write not supported for file /146/timerslack_ns (pid: 3336 comm: kworker/1:3) [ 175.208727][T16297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.225516][T16297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.732413][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 175.732430][ T29] audit: type=1326 audit(1725430920.130:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd760b0cef9 code=0x7ffc0000 [ 175.813433][ T29] audit: type=1326 audit(1725430920.170:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd760b0cef9 code=0x7ffc0000 [ 175.837071][ T29] audit: type=1326 audit(1725430920.170:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd760b0cef9 code=0x7ffc0000 [ 175.845256][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.860617][ T29] audit: type=1326 audit(1725430920.170:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16320 comm="syz.4.5542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd760b0cef9 code=0x7ffc0000 [ 175.891048][ T29] audit: type=1326 audit(1725430920.200:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 175.914840][ T29] audit: type=1326 audit(1725430920.210:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 175.938401][ T29] audit: type=1326 audit(1725430920.210:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 175.961960][ T29] audit: type=1326 audit(1725430920.210:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 175.985590][ T29] audit: type=1326 audit(1725430920.210:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 176.009137][ T29] audit: type=1326 audit(1725430920.210:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16322 comm="syz.1.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 176.117382][T16345] syz.3.5552[16345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.117447][T16345] syz.3.5552[16345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.214060][T16354] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.5557' sets config #0 [ 176.359949][T16371] loop4: detected capacity change from 0 to 512 [ 176.379312][T16371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.400850][T16371] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.502346][T14883] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.605850][T16400] syz.4.5577[16400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.605927][T16400] syz.4.5577[16400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.623414][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5579'. [ 176.865239][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.100113][T16468] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.390368][T16507] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 177.400476][T16505] IPVS: stopping master sync thread 16507 ... [ 177.516504][T16527] netlink: 'syz.0.5636': attribute type 1 has an invalid length. [ 177.524300][T16527] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5636'. [ 177.593423][T16543] ebt_among: src integrity fail: 300 [ 177.622631][T16545] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5645'. [ 177.817436][T16575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5659'. [ 177.844662][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5661'. [ 177.856498][T16580] syz_tun: entered promiscuous mode [ 177.866343][T16580] batadv_slave_0: entered promiscuous mode [ 177.895267][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.111283][T16486] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 178.119393][T16486] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 178.935333][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.991052][ T9300] @: (slave syz_tun): Releasing backup interface [ 179.897338][T16685] chnl_net:caif_netlink_parms(): no params data found [ 179.940396][T16685] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.947526][T16685] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.954799][T16685] bridge_slave_0: entered allmulticast mode [ 179.961306][T16685] bridge_slave_0: entered promiscuous mode [ 179.968493][T16685] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.975670][T16685] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.982990][T16685] bridge_slave_1: entered allmulticast mode [ 179.989665][T16685] bridge_slave_1: entered promiscuous mode [ 180.008655][T16685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.019945][T16685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.041890][T16685] team0: Port device team_slave_0 added [ 180.049992][T16685] team0: Port device team_slave_1 added [ 180.069956][T16685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.076988][T16685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.103082][T16685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.117388][T16685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.124368][T16685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.150380][T16685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.181740][T16685] hsr_slave_0: entered promiscuous mode [ 180.189299][T16685] hsr_slave_1: entered promiscuous mode [ 180.276866][T16685] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.365621][T16685] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.428131][T16685] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.486454][T16685] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.564031][T16685] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.574294][T16685] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.583347][T16685] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.593600][T16685] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.611228][T16685] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.618344][T16685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.625644][T16685] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.632772][T16685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.674000][T16685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.687542][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.697792][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.712618][T16685] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.725696][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.732993][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.761830][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.769149][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.787813][T16685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.850386][T16685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.940418][T16685] veth0_vlan: entered promiscuous mode [ 180.949529][T16685] veth1_vlan: entered promiscuous mode [ 180.971425][T16685] veth0_macvtap: entered promiscuous mode [ 180.981568][T16685] veth1_macvtap: entered promiscuous mode [ 180.994271][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.004935][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.014904][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.025455][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.035426][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.046270][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.056411][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.067113][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.077334][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.088441][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.100424][T16685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.112828][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.123512][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.133518][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.144105][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.154067][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.164796][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.174833][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.185458][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.195347][T16685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.205995][T16685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.217701][T16685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.232151][T16685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.241101][T16685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.249890][T16685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.258670][T16685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.404450][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 181.404490][ T29] audit: type=1400 audit(1725430925.800:4872): avc: denied { connect } for pid=16733 comm="syz.1.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.445257][ T29] audit: type=1400 audit(1725430925.820:4873): avc: denied { getopt } for pid=16736 comm="syz.1.5719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.485064][ T29] audit: type=1326 audit(1725430925.850:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.509022][ T29] audit: type=1326 audit(1725430925.850:4875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.532799][ T29] audit: type=1326 audit(1725430925.860:4876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.556508][ T29] audit: type=1326 audit(1725430925.860:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.580579][ T29] audit: type=1326 audit(1725430925.860:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.604226][ T29] audit: type=1326 audit(1725430925.860:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.627896][ T29] audit: type=1326 audit(1725430925.860:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.651401][ T29] audit: type=1326 audit(1725430925.860:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 181.861596][T16762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5734'. [ 182.076531][T16777] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5741'. [ 182.271622][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5749'. [ 183.233710][T16849] pimreg: entered allmulticast mode [ 183.241382][T16855] syz.2.5778[16855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.241506][T16855] syz.2.5778[16855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.242956][T16849] pimreg: left allmulticast mode [ 183.288233][T16857] netlink: 'syz.0.5779': attribute type 4 has an invalid length. [ 183.713735][T16844] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 183.724467][T16844] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 183.828713][T16890] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5795'. [ 184.272263][T16924] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5808'. [ 184.655875][T16960] Invalid ELF header len 2 [ 184.802682][T16972] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5835'. [ 184.888887][T16984] syz.1.5840[16984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.888954][T16984] syz.1.5840[16984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.035514][T17008] openvswitch: netlink: IPv4 tun info is not correct [ 186.409308][T17139] ieee802154 phy0 wpan0: encryption failed: -126 [ 186.472354][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 186.472372][ T29] audit: type=1326 audit(1725430930.870:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.505859][ T29] audit: type=1326 audit(1725430930.910:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.529706][ T29] audit: type=1326 audit(1725430930.910:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.553530][ T29] audit: type=1326 audit(1725430930.910:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.597748][ T29] audit: type=1326 audit(1725430930.960:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.621541][ T29] audit: type=1326 audit(1725430930.960:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.645251][ T29] audit: type=1326 audit(1725430930.960:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.668864][ T29] audit: type=1326 audit(1725430930.960:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.692525][ T29] audit: type=1326 audit(1725430930.980:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.716379][ T29] audit: type=1326 audit(1725430930.980:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.2.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56b29cef9 code=0x7ffc0000 [ 186.907266][T17179] program syz.1.5931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.016440][T17195] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 187.365796][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5973'. [ 187.756835][T17311] program syz.3.5993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.796833][T17316] syz.2.5995[17316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.796987][T17316] syz.2.5995[17316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.075856][T17354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.094507][T17354] IPv6: NLM_F_CREATE should be set when creating new route [ 188.150448][T17365] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 188.162773][T17364] IPVS: stopping master sync thread 17365 ... [ 188.252371][T17375] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.569297][T17446] tipc: Enabled bearer , priority 10 [ 189.644264][T17457] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 189.796399][T17466] vhci_hcd: invalid port number 157 [ 189.801669][T17466] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 190.406784][T17504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.442890][T17507] bond1: entered promiscuous mode [ 190.448116][T17507] bond1: entered allmulticast mode [ 190.453755][T17507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.471778][T17507] bond1 (unregistering): Released all slaves [ 191.175453][T17547] syz.3.6101[17547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.175574][T17547] syz.3.6101[17547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.188701][T17547] Invalid ELF header magic: != ELF [ 191.595564][T17558] program syz.0.6106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.653382][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 191.653399][ T29] audit: type=1326 audit(1725430936.050:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 191.687232][ T29] audit: type=1326 audit(1725430936.050:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 191.710807][ T29] audit: type=1326 audit(1725430936.050:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 191.734307][ T29] audit: type=1326 audit(1725430936.070:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17561 comm="syz.0.6108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17462cef9 code=0x7ffc0000 [ 191.872877][ T29] audit: type=1326 audit(1725430936.270:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.1.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 191.896642][ T29] audit: type=1326 audit(1725430936.270:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.1.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 191.920161][ T29] audit: type=1326 audit(1725430936.270:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.1.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 191.943990][ T29] audit: type=1326 audit(1725430936.270:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.1.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 191.967646][ T29] audit: type=1326 audit(1725430936.270:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.1.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 191.991202][ T29] audit: type=1326 audit(1725430936.270:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17577 comm="syz.1.6116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91faffcef9 code=0x7ffc0000 [ 192.162199][T17596] program syz.3.6125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.392754][ T3522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.477431][ T3522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.516482][T17590] chnl_net:caif_netlink_parms(): no params data found [ 192.549032][ T3522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.616892][ T3522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.825447][T17590] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.832572][T17590] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.839948][T17590] bridge_slave_0: entered allmulticast mode [ 192.854269][T17590] bridge_slave_0: entered promiscuous mode [ 192.874814][ T3522] bridge_slave_1: left allmulticast mode [ 192.880572][ T3522] bridge_slave_1: left promiscuous mode [ 192.886278][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.911314][ T3522] bridge_slave_0: left allmulticast mode [ 192.917115][ T3522] bridge_slave_0: left promiscuous mode [ 192.922859][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.098513][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.112539][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.123289][ T3522] bond0 (unregistering): Released all slaves [ 193.131954][T17590] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.139247][T17590] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.148305][T17590] bridge_slave_1: entered allmulticast mode [ 193.154750][T17590] bridge_slave_1: entered promiscuous mode [ 193.188040][T17590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.201562][T17590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.231461][T17590] team0: Port device team_slave_0 added [ 193.244227][ T3522] hsr_slave_0: left promiscuous mode [ 193.252402][ T3522] hsr_slave_1: left promiscuous mode [ 193.260622][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.268101][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.284261][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.291761][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.313132][ T3522] veth1_macvtap: left promiscuous mode [ 193.318680][ T3522] veth0_macvtap: left promiscuous mode [ 193.324358][ T3522] veth1_vlan: left promiscuous mode [ 193.329930][ T3522] veth0_vlan: left promiscuous mode [ 193.484461][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 193.507320][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 193.577714][T17590] team0: Port device team_slave_1 added [ 193.628087][T17722] vlan2: entered allmulticast mode [ 193.633831][T17722] bond0: entered allmulticast mode [ 193.639054][T17722] bond_slave_0: entered allmulticast mode [ 193.644849][T17722] bond_slave_1: entered allmulticast mode [ 193.655245][T17722] bond0: left allmulticast mode [ 193.660150][T17722] bond_slave_0: left allmulticast mode [ 193.665697][T17722] bond_slave_1: left allmulticast mode [ 193.685516][T17590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.692539][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.718568][T17590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.772026][T17590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.779047][T17590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.805067][T17590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.875318][T17736] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6180'. [ 193.921115][T17590] hsr_slave_0: entered promiscuous mode [ 193.938027][T17590] hsr_slave_1: entered promiscuous mode [ 193.949999][T17590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.965284][T17590] Cannot create hsr debugfs directory [ 193.981360][T17740] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 193.987925][T17740] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 193.995837][T17740] vhci_hcd vhci_hcd.0: Device attached [ 194.017357][T17741] vhci_hcd: connection closed [ 194.017594][ T56] vhci_hcd: stop threads [ 194.026633][ T56] vhci_hcd: release socket [ 194.031059][ T56] vhci_hcd: disconnect device [ 194.532632][T17763] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.541636][T17763] vhci_hcd: invalid port number 23 [ 194.834243][T17590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.850712][T17590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.865574][T17590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.879754][T17590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.977600][T17590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.007279][T17590] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.034456][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.041586][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.061312][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.068501][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.213916][T17590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.389620][T17590] veth0_vlan: entered promiscuous mode [ 195.407999][T17590] veth1_vlan: entered promiscuous mode [ 195.422487][T17856] sctp: [Deprecated]: syz.3.6226 (pid 17856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.422487][T17856] Use struct sctp_sack_info instead [ 195.446743][T17590] veth0_macvtap: entered promiscuous mode [ 195.457972][T17590] veth1_macvtap: entered promiscuous mode [ 195.479145][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.489732][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.499979][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.510701][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.520577][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.531107][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.540950][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.551397][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.561368][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.571955][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.593529][T17590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.607092][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.617752][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.627694][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.638262][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.648130][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.658677][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.669058][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.679599][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.689428][T17590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.699882][T17590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.711215][T17590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.721760][T17590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.730713][T17590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.739549][T17590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.748321][T17590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.938628][T17886] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 195.945203][T17886] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 195.952948][T17886] vhci_hcd vhci_hcd.0: Device attached [ 195.976636][T17892] vhci_hcd: connection closed [ 195.977059][ T56] vhci_hcd: stop threads [ 195.986269][ T56] vhci_hcd: release socket [ 195.990696][ T56] vhci_hcd: disconnect device [ 196.252065][T17933] program syz.3.6260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.286400][T17937] syz.0.6262[17937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.286474][T17937] syz.0.6262[17937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.318500][T17941] netlink: 'syz.1.6264': attribute type 1 has an invalid length. [ 196.337764][T17941] netlink: 'syz.1.6264': attribute type 2 has an invalid length. [ 196.661238][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 196.661262][ T29] audit: type=1400 audit(1725430941.060:5304): avc: denied { execute } for pid=17993 comm="syz.1.6289" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=55577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 196.717257][T17999] syz.4.6291[17999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.717451][T17999] syz.4.6291[17999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.848279][T18013] ================================================================== [ 196.867802][T18013] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 196.875569][T18013] [ 196.877901][T18013] write to 0xffff888237c2ab78 of 1 bytes by task 18007 on cpu 0: [ 196.885630][T18013] folios_put_refs+0x266/0x2b0 [ 196.890431][T18013] folio_batch_move_lru+0x202/0x230 [ 196.895667][T18013] folio_add_lru+0x13e/0x1f0 [ 196.900287][T18013] shmem_get_folio_gfp+0x7ec/0xd80 [ 196.905428][T18013] shmem_fault+0x100/0x260 [ 196.909874][T18013] __do_fault+0xb6/0x200 [ 196.914146][T18013] handle_mm_fault+0xe8b/0x2a30 [ 196.919022][T18013] __get_user_pages+0x499/0x10d0 [ 196.923986][T18013] __mm_populate+0x25b/0x3b0 [ 196.928610][T18013] vm_mmap_pgoff+0x1d6/0x290 [ 196.933213][T18013] ksys_mmap_pgoff+0xd0/0x340 [ 196.937933][T18013] x64_sys_call+0x1884/0x2d60 [ 196.942647][T18013] do_syscall_64+0xc9/0x1c0 [ 196.947170][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.953104][T18013] [ 196.955437][T18013] read to 0xffff888237c2ab78 of 1 bytes by task 18013 on cpu 1: [ 196.963077][T18013] __lru_add_drain_all+0x12c/0x410 [ 196.968228][T18013] lru_cache_disable+0x1f/0x30 [ 196.973045][T18013] __se_sys_mbind+0x4df/0x1160 [ 196.977832][T18013] __x64_sys_mbind+0x78/0x90 [ 196.982446][T18013] x64_sys_call+0x2b4d/0x2d60 [ 196.987159][T18013] do_syscall_64+0xc9/0x1c0 [ 196.991687][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.997624][T18013] [ 196.999953][T18013] value changed: 0x01 -> 0x00 [ 197.004635][T18013] [ 197.006968][T18013] Reported by Kernel Concurrency Sanitizer on: [ 197.013140][T18013] CPU: 1 UID: 0 PID: 18013 Comm: syz.1.6297 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 197.023915][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 197.033975][T18013] ==================================================================