last executing test programs: 6.933598486s ago: executing program 2 (id=1857): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4002, &(0x7f0000000680)={[{@nombcache}, {@noload}, {@bh}, {@noload}, {@data_err_ignore}, {@nojournal_checksum}, {@barrier}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chroot(0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x242d, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './bus'}, 0x9) 4.979056444s ago: executing program 2 (id=1920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.656094427s ago: executing program 0 (id=1974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0xb00) 1.631406709s ago: executing program 0 (id=1975): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x49c7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.357924365s ago: executing program 0 (id=1976): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x4000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in, 0x4d6, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xb7, 0x0, 0x81}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 1.270085644s ago: executing program 2 (id=1922): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 1.185849871s ago: executing program 2 (id=1982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x200600) 1.077862961s ago: executing program 2 (id=1985): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 905.257077ms ago: executing program 2 (id=1991): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xfe, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 861.946212ms ago: executing program 1 (id=1992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='workqueue_queue_work\x00', r0}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0) 802.893156ms ago: executing program 1 (id=1996): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$unix(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x10, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 786.820908ms ago: executing program 1 (id=1998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 770.76993ms ago: executing program 4 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 728.707973ms ago: executing program 3 (id=2000): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) 672.952869ms ago: executing program 4 (id=2001): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 597.614486ms ago: executing program 3 (id=2002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) 547.97204ms ago: executing program 4 (id=2003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xce22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 547.58814ms ago: executing program 4 (id=2004): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0'}, 0xb) close(r1) 523.207192ms ago: executing program 3 (id=2005): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) iopl(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 518.250142ms ago: executing program 0 (id=2006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 145.990977ms ago: executing program 0 (id=2007): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 145.540287ms ago: executing program 3 (id=2008): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 145.235307ms ago: executing program 0 (id=2009): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$can_bcm(r0, &(0x7f0000006080)={&(0x7f0000005f80)={0x1d, r1}, 0x10, &(0x7f0000006040)={&(0x7f0000005fc0)=ANY=[@ANYBLOB="0100000000000000ef860288f31c3a16", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 71.187503ms ago: executing program 1 (id=2010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000000)=0x80000000, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 70.494553ms ago: executing program 4 (id=2011): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x220, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) fcntl$setsig(r0, 0xa, 0x13) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 70.034653ms ago: executing program 3 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0x8e00, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x6d3, &(0x7f00000008c0), &(0x7f0000000040)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000047c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) io_uring_enter(r2, 0x1849, 0x0, 0x0, 0x0, 0x0) 33.467017ms ago: executing program 4 (id=2013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 31.029527ms ago: executing program 1 (id=2014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$unix(0x1, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea"], 0x20000600}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.044259ms ago: executing program 3 (id=2015): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad1f50ad32d3fd25dfd73a015e0ca6a0f68a7d007f15451dfb265a0e3ccae669e173a64bc1cfd5587d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661ca3dbe74bd09de8793dbcceef76b2e5feecf9c66c54c3b3ffe1b4ce25d7c983c044c06cd0a48dfe3e26e7a23129d6606fd28a69989d552af6d9a9df2c3af36e0360050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae82f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba73c31b05c00fba8a4aee676d7c45bb29671a68ee2e60da7b01a2e5785a238afa4aba70c07fcd95bf8b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf334178b04963d67dd5a5707e618a1ef9057fec00f9e930219fa8d30e716de8cde9c60f0000000c3b64d10f0939b42b788daa7075fa542242b00f6bf9b64ad460e386b6f388351fbdacb3ad074574ee9d450f9dcfaef1be95ff3c449e6482e4403174618c20e887d6f320616d31d78a0e5421d5742cc52509fd90cf2df6d1404f6b8f810d7b94d421971b77a3270153a0d57cccfe27872f3e8e44480f93c33421986a7737842627301fb2fee8cabab074adaa2024ff57e609ba2f4d83b3bbf52309484532416f48f43b31395c6f45fee8f1682a4e8d5e3b9ae634ed24fb0e8b5fadaf5cb7eea62b7bb4264e72950c9dc791d771acc24c08cdb6ef24c813d082a86d9b879bdf5aefdfd905a2bd4ea36b0b54915a68fe149db154a8340017e1855511e9c0fe62d0cf55"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="03011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e410820c520f061fecfdfe4b88942a31f48597e36e039b1c599db6e466749c2d05f64c8303a0f7fbda34fb88caffe288c4f8fff405fb9c6b3247ce08607b"], 0xdd12}], 0x1}, 0x0) 0s ago: executing program 1 (id=2016): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) kernel console output (not intermixed with test programs): " sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 54.645141][ T29] audit: type=1326 audit(1728169816.735:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 54.668547][ T29] audit: type=1400 audit(1728169816.735:1099): avc: denied { mount } for pid=5193 comm="syz.0.638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.690536][ T29] audit: type=1326 audit(1728169816.735:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 54.707625][ T4939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.714110][ T29] audit: type=1326 audit(1728169816.735:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 54.744565][ T29] audit: type=1400 audit(1728169816.735:1102): avc: denied { unmount } for pid=5193 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.754177][ T4939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.772929][ T5197] loop4: detected capacity change from 0 to 1024 [ 54.773050][ T4939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.788380][ T4939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.797339][ T4939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.808861][ T29] audit: type=1326 audit(1728169816.755:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 54.832297][ T29] audit: type=1326 audit(1728169816.755:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5193 comm="syz.0.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 54.857852][ T5197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.872465][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.883121][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.892953][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.903372][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.913215][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.923626][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.933434][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.943845][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.953945][ T4969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.964432][ T4969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.975001][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.975676][ T4969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.997310][ T5199] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.011047][ T4969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.019924][ T4969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.028657][ T4969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.037527][ T4969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.093754][ T5212] __nla_validate_parse: 2 callbacks suppressed [ 55.093768][ T5212] netlink: 108 bytes leftover after parsing attributes in process `syz.0.643'. [ 55.122457][ T5212] netlink: 108 bytes leftover after parsing attributes in process `syz.0.643'. [ 55.125227][ T5217] loop1: detected capacity change from 0 to 512 [ 55.131598][ T5212] netlink: 84 bytes leftover after parsing attributes in process `syz.0.643'. [ 55.142433][ T5219] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 55.147029][ T9] tipc: Node number set to 2886997162 [ 55.176150][ T5219] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 55.183422][ T5223] loop0: detected capacity change from 0 to 128 [ 55.191528][ T5217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.204247][ T5217] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.218384][ T5223] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.234662][ T4969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.251384][ T5223] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.300153][ T5234] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 55.300898][ T3729] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.344502][ T5244] mmap: syz.3.658 (5244) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.407984][ T5253] loop2: detected capacity change from 0 to 512 [ 55.438751][ T5256] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 55.438751][ T5256] The task syz.1.656 (5256) triggered the difference, watch for misbehavior. [ 55.463673][ T5253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.476365][ T5253] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.502859][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.558475][ T5264] vhci_hcd: invalid port number 157 [ 55.563714][ T5264] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 55.597899][ T5272] bond0: entered promiscuous mode [ 55.602969][ T5272] bond_slave_0: entered promiscuous mode [ 55.608761][ T5272] bond_slave_1: entered promiscuous mode [ 55.617112][ T5272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 55.625676][ T5272] bond0: left promiscuous mode [ 55.630537][ T5272] bond_slave_0: left promiscuous mode [ 55.636055][ T5272] bond_slave_1: left promiscuous mode [ 55.645092][ T5275] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 55.661255][ T5277] netlink: 140 bytes leftover after parsing attributes in process `syz.2.672'. [ 55.711168][ T5279] tipc: Invalid UDP bearer configuration [ 55.711179][ T5279] tipc: Enabling of bearer rejected, failed to enable media [ 55.735893][ T5281] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 55.735893][ T5281] program syz.0.674 not setting count and/or reply_len properly [ 55.837075][ T5303] loop2: detected capacity change from 0 to 128 [ 55.874453][ T5303] syz.2.685: attempt to access beyond end of device [ 55.874453][ T5303] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 55.936874][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 55.936951][ T5313] loop0: detected capacity change from 0 to 512 [ 55.964734][ T5313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.977728][ T5313] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.023678][ T3729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.043349][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 56.105112][ T5341] loop4: detected capacity change from 0 to 128 [ 56.111968][ T5337] netlink: 'syz.0.701': attribute type 4 has an invalid length. [ 56.119810][ T5337] netlink: 152 bytes leftover after parsing attributes in process `syz.0.701'. [ 56.188648][ T5341] syz.4.703: attempt to access beyond end of device [ 56.188648][ T5341] loop4: rw=0, sector=121, nr_sectors = 119 limit=128 [ 56.253230][ T5360] loop1: detected capacity change from 0 to 512 [ 56.266207][ T5360] EXT4-fs: Ignoring removed oldalloc option [ 56.292571][ T5360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.314810][ T5365] loop4: detected capacity change from 0 to 1024 [ 56.322328][ T5360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.329347][ T5365] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 56.338838][ T5382] loop2: detected capacity change from 0 to 128 [ 56.344662][ T5365] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 56.353622][ T5360] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.360852][ T5365] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.386244][ T5382] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.400007][ T5382] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.401059][ T5365] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #5: comm syz.4.714: unexpected bad inode w/o EXT4_IGET_BAD [ 56.449193][ T5365] EXT4-fs (loop4): no journal found [ 56.454531][ T5365] EXT4-fs (loop4): can't get journal size [ 56.462978][ T4969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.473073][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.500054][ T4913] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.523204][ T5365] EXT4-fs error (device loop4): __ext4_remount:6522: comm syz.4.714: Abort forced by user [ 56.536686][ T5365] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 56.577607][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.587344][ T5404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'. [ 56.709340][ T5428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 56.749494][ T5432] loop1: detected capacity change from 0 to 1024 [ 56.753700][ T5434] loop4: detected capacity change from 0 to 1024 [ 56.759964][ T5432] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 56.763788][ T5434] EXT4-fs: Ignoring removed orlov option [ 56.771940][ T5432] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 56.777748][ T5434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.792150][ T5432] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.805820][ T5432] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.734: unexpected bad inode w/o EXT4_IGET_BAD [ 56.819517][ T5432] EXT4-fs (loop1): no journal found [ 56.824754][ T5432] EXT4-fs (loop1): can't get journal size [ 56.835421][ T5434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.871366][ T5432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.951340][ T5450] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.952321][ T5432] EXT4-fs error (device loop1): __ext4_remount:6522: comm syz.1.734: Abort forced by user [ 56.962232][ T5452] loop4: detected capacity change from 0 to 512 [ 56.971141][ T5432] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 56.985053][ T5452] EXT4-fs: Ignoring removed orlov option [ 57.008190][ T5452] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.065842][ T5465] syz.1.748[5465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.065966][ T5465] syz.1.748[5465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.077673][ T5465] syz.1.748[5465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.127432][ T5473] loop1: detected capacity change from 0 to 128 [ 57.183486][ T5473] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.265128][ T5499] loop1: detected capacity change from 0 to 512 [ 57.311355][ T5499] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.353610][ T5509] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 57.363111][ T5509] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 57.435266][ T5520] loop3: detected capacity change from 0 to 128 [ 57.453539][ T5520] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.497033][ T5525] loop2: detected capacity change from 0 to 2048 [ 57.502471][ T5527] syz.4.775[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.503459][ T5527] syz.4.775[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.515293][ T5527] syz.4.775[5527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.528912][ T5527] netlink: 264 bytes leftover after parsing attributes in process `syz.4.775'. [ 57.539723][ T5525] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.564426][ T5525] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 57.576812][ T5525] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.576812][ T5525] [ 57.586448][ T5525] EXT4-fs (loop2): Total free blocks count 0 [ 57.592599][ T5525] EXT4-fs (loop2): Free/Dirty block details [ 57.597478][ T3340] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 57.598506][ T5525] EXT4-fs (loop2): free_blocks=2415919104 [ 57.606106][ T3340] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 57.611820][ T5525] EXT4-fs (loop2): dirty_blocks=16 [ 57.611832][ T5525] EXT4-fs (loop2): Block reservation details [ 57.611842][ T5525] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 57.612661][ T5532] loop3: detected capacity change from 0 to 512 [ 57.622314][ T3340] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 57.635301][ T5525] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 14 with error 28 [ 57.638852][ T5532] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.776: corrupted in-inode xattr: invalid ea_ino [ 57.642873][ T5525] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.642873][ T5525] [ 57.686373][ T3340] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 57.686875][ T5532] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.776: couldn't read orphan inode 15 (err -117) [ 57.742288][ T5542] loop2: detected capacity change from 0 to 128 [ 57.744156][ T5539] loop4: detected capacity change from 0 to 2048 [ 57.761321][ T5539] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.777015][ T5539] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 57.789456][ T5539] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.789456][ T5539] [ 57.799203][ T5539] EXT4-fs (loop4): Total free blocks count 0 [ 57.805262][ T5539] EXT4-fs (loop4): Free/Dirty block details [ 57.811242][ T5539] EXT4-fs (loop4): free_blocks=2415919104 [ 57.817067][ T5539] EXT4-fs (loop4): dirty_blocks=16 [ 57.822165][ T5539] EXT4-fs (loop4): Block reservation details [ 57.828306][ T5539] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 57.838942][ T5539] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 57.851359][ T5539] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.851359][ T5539] [ 57.851907][ T5551] netlink: 'syz.2.782': attribute type 11 has an invalid length. [ 57.872538][ T5551] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.881305][ T5551] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.890057][ T5551] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.898834][ T5551] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.908069][ T5551] vxlan0: entered promiscuous mode [ 57.942446][ T5559] bridge0: port 3(vlan2) entered blocking state [ 57.948935][ T5559] bridge0: port 3(vlan2) entered disabled state [ 57.955349][ T5559] vlan2: entered allmulticast mode [ 57.960988][ T5559] vlan2: left allmulticast mode [ 58.217428][ T5592] bond1: entered promiscuous mode [ 58.230494][ T5592] veth3: entered promiscuous mode [ 58.236884][ T5592] bond1: (slave veth3): Enslaving as an active interface with an up link [ 58.272555][ T5599] loop4: detected capacity change from 0 to 256 [ 58.280386][ T5599] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.292287][ T5599] Process accounting resumed [ 58.315619][ T5601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.643353][ T5623] loop2: detected capacity change from 0 to 128 [ 58.650618][ T5623] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 58.670333][ T5623] ext2 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.714741][ T5615] chnl_net:caif_netlink_parms(): no params data found [ 58.761263][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.768421][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.775606][ T5615] bridge_slave_0: entered allmulticast mode [ 58.782180][ T5615] bridge_slave_0: entered promiscuous mode [ 58.791383][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.798493][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.804133][ T5640] loop2: detected capacity change from 0 to 128 [ 58.805730][ T5615] bridge_slave_1: entered allmulticast mode [ 58.818450][ T5615] bridge_slave_1: entered promiscuous mode [ 58.834339][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.844864][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.862739][ T5615] team0: Port device team_slave_0 added [ 58.869699][ T5615] team0: Port device team_slave_1 added [ 58.885487][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.892478][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.918702][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.930071][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.937051][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.963355][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.998848][ T5650] smc: net device bond0 applied user defined pnetid SYZ0 [ 59.011122][ T5650] smc: net device bond0 erased user defined pnetid SYZ0 [ 59.011086][ T5615] hsr_slave_0: entered promiscuous mode [ 59.033463][ T5615] hsr_slave_1: entered promiscuous mode [ 59.041635][ T5615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.049587][ T5615] Cannot create hsr debugfs directory [ 59.106079][ T5615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.169744][ T5615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.210862][ T5615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.259449][ T5615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.313704][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.322558][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.331163][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.339659][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.356673][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.363838][ T5615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.371219][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.378361][ T5615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.416052][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.428177][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.437338][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.445533][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.448404][ T5680] loop4: detected capacity change from 0 to 8192 [ 59.466140][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.473258][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.483929][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.491056][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.517353][ T5680] loop4: p2 p3 p4 [ 59.517690][ T5615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.521157][ T5680] loop4: p2 start 452985600 is beyond EOD, truncated [ 59.538388][ T5680] loop4: p3 start 4177527808 is beyond EOD, truncated [ 59.545163][ T5680] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 59.565435][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 59.565451][ T29] audit: type=1400 audit(1728169821.695:1319): avc: denied { write } for pid=5679 comm="syz.4.830" name="loop4p4" dev="devtmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.572777][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.594503][ T29] audit: type=1400 audit(1728169821.695:1320): avc: denied { open } for pid=5679 comm="syz.4.830" path="/dev/loop4p4" dev="devtmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.594586][ T29] audit: type=1400 audit(1728169821.695:1321): avc: denied { ioctl } for pid=5679 comm="syz.4.830" path="/dev/loop4p4" dev="devtmpfs" ino=532 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.718390][ T5615] veth0_vlan: entered promiscuous mode [ 59.727328][ T5615] veth1_vlan: entered promiscuous mode [ 59.735115][ T29] audit: type=1400 audit(1728169821.865:1322): avc: denied { create } for pid=5700 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.743167][ T5615] veth0_macvtap: entered promiscuous mode [ 59.765689][ T5615] veth1_macvtap: entered promiscuous mode [ 59.774009][ T29] audit: type=1400 audit(1728169821.885:1323): avc: denied { shutdown } for pid=5700 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.777725][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.793730][ T29] audit: type=1400 audit(1728169821.885:1324): avc: denied { getopt } for pid=5700 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.804162][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.823642][ T29] audit: type=1400 audit(1728169821.885:1325): avc: denied { connect } for pid=5700 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.833543][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.833562][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.833573][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.833585][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.833598][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.853087][ T29] audit: type=1400 audit(1728169821.885:1326): avc: denied { name_connect } for pid=5700 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 59.924945][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.934883][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.945498][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.955332][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.965909][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.978359][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.001787][ T5703] wireguard0: entered promiscuous mode [ 60.007461][ T5703] wireguard0: entered allmulticast mode [ 60.017961][ T5712] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 60.028614][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.039146][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.046710][ T29] audit: type=1400 audit(1728169822.175:1327): avc: denied { read } for pid=5713 comm="syz.2.839" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.049106][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.071879][ T29] audit: type=1400 audit(1728169822.175:1328): avc: denied { open } for pid=5713 comm="syz.2.839" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.082287][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.082300][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.082313][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.082326][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.082337][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.082352][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.082409][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.082416][ T5615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.082428][ T5615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.083679][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.210666][ T5615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.219473][ T5615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.228364][ T5615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.237162][ T5615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.310001][ T5731] __nla_validate_parse: 3 callbacks suppressed [ 60.310017][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 60.325104][ T5731] netlink: 'syz.0.843': attribute type 6 has an invalid length. [ 60.332999][ T5731] netlink: 'syz.0.843': attribute type 5 has an invalid length. [ 60.349226][ T5731] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.358058][ T5731] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.366856][ T5731] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.375549][ T5731] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.388924][ T5731] vxlan0: entered promiscuous mode [ 60.944864][ T5766] syz.4.860[5766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.944969][ T5766] syz.4.860[5766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.959793][ T5766] syz.4.860[5766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.992200][ T5772] loop4: detected capacity change from 0 to 512 [ 61.010298][ T5772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.031129][ T5772] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.039210][ T5772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 61.047476][ T5772] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 61.056980][ T5772] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 61.072722][ T5772] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.863: dx entry: limit 65535 != root limit 120 [ 61.084817][ T5772] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.863: Corrupt directory, running e2fsck is recommended [ 61.143918][ T5772] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.863: path /115/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 61.236518][ T5792] loop3: detected capacity change from 0 to 512 [ 61.247740][ T5793] serio: Serial port ptm0 [ 61.276090][ T5792] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.375229][ T5815] netlink: 'syz.4.880': attribute type 10 has an invalid length. [ 61.401272][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.413526][ T5817] loop1: detected capacity change from 0 to 128 [ 61.458090][ T5821] loop2: detected capacity change from 0 to 1024 [ 61.464997][ T5821] EXT4-fs: Ignoring removed bh option [ 61.531127][ T5833] loop1: detected capacity change from 0 to 512 [ 61.539192][ T5833] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.889: casefold flag without casefold feature [ 61.552877][ T5833] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.889: couldn't read orphan inode 15 (err -117) [ 61.574328][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.586809][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.642108][ T5840] syzkaller0: entered promiscuous mode [ 61.647649][ T5840] syzkaller0: entered allmulticast mode [ 61.692324][ T5846] sctp: [Deprecated]: syz.1.894 (pid 5846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.692324][ T5846] Use struct sctp_sack_info instead [ 62.316504][ T5885] netlink: 900 bytes leftover after parsing attributes in process `syz.3.912'. [ 62.372690][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 62.573777][ T5912] syz.2.923[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.573896][ T5912] syz.2.923[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.610883][ T5912] syz.2.923[5912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.818158][ T5949] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.901326][ T5954] syzkaller0: entered promiscuous mode [ 62.906845][ T5954] syzkaller0: entered allmulticast mode [ 63.134401][ T3402] IPVS: starting estimator thread 0... [ 63.226631][ T5974] IPVS: using max 3264 ests per chain, 163200 per kthread [ 63.303667][ T5982] netlink: 'syz.3.954': attribute type 4 has an invalid length. [ 63.318160][ T5982] netlink: 'syz.3.954': attribute type 4 has an invalid length. [ 63.450908][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.461331][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.556135][ T5998] loop4: detected capacity change from 0 to 512 [ 63.609228][ T5998] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.737128][ T6025] loop3: detected capacity change from 0 to 128 [ 63.779069][ T6032] loop3: detected capacity change from 0 to 512 [ 63.801742][ T6032] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.810421][ T6041] syz.4.979: attempt to access beyond end of device [ 63.810421][ T6041] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 63.881082][ T977] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 63.888812][ T977] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 63.899058][ T977] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 63.908571][ T977] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.920042][ T6054] loop4: detected capacity change from 0 to 128 [ 63.997004][ T6067] syz.1.991: attempt to access beyond end of device [ 63.997004][ T6067] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.058267][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.062414][ T6071] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 64.077528][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.114967][ T6085] loop1: detected capacity change from 0 to 128 [ 64.134788][ T6087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.391061][ T6105] syz.2.1004: attempt to access beyond end of device [ 64.391061][ T6105] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.393566][ T6103] loop1: detected capacity change from 0 to 512 [ 64.420542][ T6103] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1017: corrupted in-inode xattr: invalid ea_ino [ 64.434338][ T6103] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1017: couldn't read orphan inode 15 (err -117) [ 64.453538][ T6111] loop4: detected capacity change from 0 to 512 [ 64.472397][ T6113] loop2: detected capacity change from 0 to 512 [ 64.488993][ T6111] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.538185][ T6113] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.567455][ T6126] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 64.601647][ T6133] syz.3.1021: attempt to access beyond end of device [ 64.601647][ T6133] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.608324][ T6136] loop2: detected capacity change from 0 to 512 [ 64.621776][ T6136] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.622487][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 64.631089][ T6136] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 64.644161][ T6138] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.657852][ T6138] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.666129][ T6138] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.674569][ T6138] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.684516][ T6138] vxlan0: entered promiscuous mode [ 65.420271][ T6145] loop4: detected capacity change from 0 to 512 [ 65.431278][ T6145] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1024: corrupted in-inode xattr: invalid ea_ino [ 65.431713][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 65.431724][ T29] audit: type=1400 audit(1728169827.565:1493): avc: denied { watch } for pid=6146 comm="syz.0.1034" path="/204/file0" dev="tmpfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.445117][ T6145] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1024: couldn't read orphan inode 15 (err -117) [ 65.485630][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1025'. [ 65.667599][ T6177] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1039'. [ 65.702718][ T29] audit: type=1326 audit(1728169827.835:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.734461][ T29] audit: type=1326 audit(1728169827.835:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.758104][ T29] audit: type=1326 audit(1728169827.835:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.781647][ T29] audit: type=1326 audit(1728169827.835:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.805175][ T29] audit: type=1326 audit(1728169827.835:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.828651][ T29] audit: type=1326 audit(1728169827.835:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.852261][ T29] audit: type=1326 audit(1728169827.835:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.875871][ T29] audit: type=1326 audit(1728169827.865:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.899390][ T29] audit: type=1326 audit(1728169827.865:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6180 comm="syz.2.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f666ea4dff9 code=0x7ffc0000 [ 65.931322][ T6187] loop2: detected capacity change from 0 to 512 [ 65.939288][ T6187] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1042: corrupted in-inode xattr: invalid ea_ino [ 65.954600][ T6187] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1042: couldn't read orphan inode 15 (err -117) [ 65.988412][ T6191] loop3: detected capacity change from 0 to 1024 [ 66.008456][ T6191] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 66.019385][ T6191] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 66.033863][ T6191] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.043991][ T6191] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 66.048612][ T6194] loop2: detected capacity change from 0 to 2048 [ 66.052788][ T6191] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 66.161425][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 66.204943][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.217711][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.300570][ T6221] loop3: detected capacity change from 0 to 512 [ 66.326093][ T6221] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1057: corrupted in-inode xattr: invalid ea_ino [ 66.346847][ T6221] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1057: couldn't read orphan inode 15 (err -117) [ 66.368128][ T6226] syzkaller0: entered promiscuous mode [ 66.373631][ T6226] syzkaller0: entered allmulticast mode [ 66.470869][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.479424][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.751800][ T6247] loop7: detected capacity change from 0 to 16384 [ 66.810050][ T6247] I/O error, dev loop7, sector 11904 op 0x0:(READ) flags 0x800 phys_seg 16 prio class 0 [ 67.501765][ T6293] netlink: 900 bytes leftover after parsing attributes in process `syz.4.1086'. [ 67.831638][ T6343] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1111'. [ 67.861511][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.870104][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.897220][ T6351] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.904620][ T6351] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 67.925321][ T6353] tipc: Invalid UDP bearer configuration [ 67.925330][ T6353] tipc: Enabling of bearer rejected, failed to enable media [ 67.947604][ T6355] sg_write: data in/out 18/14 bytes for SCSI command 0x4-- guessing data in; [ 67.947604][ T6355] program syz.4.1117 not setting count and/or reply_len properly [ 68.004409][ T6363] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.052414][ T6376] loop3: detected capacity change from 0 to 512 [ 68.065512][ T6376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 68.092098][ T6376] EXT4-fs (loop3): 1 truncate cleaned up [ 68.098254][ T6376] EXT4-fs mount: 44 callbacks suppressed [ 68.098266][ T6376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.120833][ T6383] loop4: detected capacity change from 0 to 512 [ 68.127553][ T6383] EXT4-fs: Ignoring removed bh option [ 68.132989][ T6383] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.168061][ T6388] loop1: detected capacity change from 0 to 512 [ 68.175977][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.187296][ T6383] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.1130: invalid block [ 68.200574][ T6383] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1130: couldn't read orphan inode 15 (err -117) [ 68.213398][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.226733][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.239329][ T6388] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.251940][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.274649][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.292114][ T6400] atomic_op ffff88810ed66928 conn xmit_atomic 0000000000000000 [ 68.330631][ T6402] loop1: detected capacity change from 0 to 164 [ 68.340390][ T6402] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.358284][ T6410] loop4: detected capacity change from 0 to 128 [ 68.368776][ T6412] bond0: entered promiscuous mode [ 68.369466][ T6410] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 68.373895][ T6412] bond_slave_0: entered promiscuous mode [ 68.389600][ T6412] bond_slave_1: entered promiscuous mode [ 68.402266][ T6410] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 68.423814][ T6412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.434105][ T6412] bond0: left promiscuous mode [ 68.435030][ T6410] EXT4-fs error (device loop4): __ext4_find_entry:1652: inode #2: comm syz.4.1142: checksumming directory block 0 [ 68.438947][ T6412] bond_slave_0: left promiscuous mode [ 68.439012][ T6412] bond_slave_1: left promiscuous mode [ 68.471114][ T4029] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.577471][ T6436] netlink: 'syz.1.1152': attribute type 4 has an invalid length. [ 68.585283][ T6436] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1152'. [ 68.639518][ T6442] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1155'. [ 68.711591][ T6452] loop1: detected capacity change from 0 to 1024 [ 68.719622][ T6452] EXT4-fs: Ignoring removed nobh option [ 68.725216][ T6452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.749738][ T6452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.765806][ T6452] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 68.785733][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.923166][ T6492] loop3: detected capacity change from 0 to 512 [ 68.934303][ T6494] loop1: detected capacity change from 0 to 512 [ 68.938213][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.942916][ T6494] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 68.953084][ T6492] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.966049][ T6494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 68.983069][ T6494] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.990182][ T6494] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1170: bg 0: block 361: padding at end of block bitmap is not set [ 69.004745][ T6494] EXT4-fs (loop1): Remounting filesystem read-only [ 69.005065][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.011459][ T6494] EXT4-fs (loop1): 1 truncate cleaned up [ 69.026600][ T6494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.038904][ T6494] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 69.046050][ T6494] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.128732][ T6514] loop1: detected capacity change from 0 to 1024 [ 69.149674][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.161893][ T6514] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.198706][ T5615] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.228652][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.258277][ T6535] SELinux: Context system_u:object_r:crond_initrc_exec_t:s0 is not valid (left unmapped). [ 69.397036][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'. [ 69.425987][ T6539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1190'. [ 69.469721][ T6560] loop4: detected capacity change from 0 to 512 [ 69.481992][ T6560] EXT4-fs (loop4): invalid inodes per group: 0 [ 69.481992][ T6560] [ 69.528785][ T6572] atomic_op ffff88810c845128 conn xmit_atomic 0000000000000000 [ 69.564607][ T6580] syz.3.1209[6580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.564753][ T6580] syz.3.1209[6580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.576478][ T6580] syz.3.1209[6580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.627140][ T6591] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1214'. [ 69.674229][ T6601] io-wq is not configured for unbound workers [ 69.700716][ T6603] bridge0: port 3(vlan2) entered blocking state [ 69.713314][ T6603] bridge0: port 3(vlan2) entered disabled state [ 69.721925][ T6603] vlan2: entered allmulticast mode [ 69.727746][ T6603] vlan2: left allmulticast mode [ 69.749820][ T6607] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.861213][ T6627] Cannot find set identified by id 0 to match [ 70.235664][ T6665] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.561916][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 70.561928][ T29] audit: type=1400 audit(1728169832.695:1661): avc: denied { create } for pid=6691 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.747098][ T6702] loop3: detected capacity change from 0 to 512 [ 70.754158][ T6702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.768648][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.793279][ T6702] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.811336][ T29] audit: type=1400 audit(1728169832.945:1662): avc: denied { unlink } for pid=6701 comm="syz.3.1260" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.836187][ T6702] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 70.865172][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.867178][ T29] audit: type=1400 audit(1728169832.985:1663): avc: denied { rename } for pid=6701 comm="syz.3.1260" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.000398][ T6716] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 71.296760][ T6728] wireguard0: entered promiscuous mode [ 71.302308][ T6728] wireguard0: entered allmulticast mode [ 71.363899][ T29] audit: type=1326 audit(1728169833.495:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.387466][ T29] audit: type=1326 audit(1728169833.495:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.410972][ T29] audit: type=1326 audit(1728169833.495:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.434422][ T29] audit: type=1326 audit(1728169833.495:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.457907][ T29] audit: type=1326 audit(1728169833.495:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.482512][ T29] audit: type=1326 audit(1728169833.545:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.506156][ T29] audit: type=1326 audit(1728169833.545:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz.1.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c6925dff9 code=0x7ffc0000 [ 71.642511][ T6756] loop2: detected capacity change from 0 to 512 [ 71.670451][ T6756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.687939][ T6756] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.709964][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.737202][ T6770] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 71.765540][ T6770] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 71.770463][ T6778] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.291075][ T6810] loop4: detected capacity change from 0 to 512 [ 72.299745][ T6810] ext4: Unknown parameter 'fsname' [ 72.717021][ T6832] loop3: detected capacity change from 0 to 256 [ 72.737315][ T6832] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.751546][ T6832] Process accounting resumed [ 72.774026][ T6833] loop2: detected capacity change from 0 to 8192 [ 72.828044][ T6833] loop2: p2 p3 p4 [ 72.831854][ T6833] loop2: p2 start 452985600 is beyond EOD, truncated [ 72.838617][ T6833] loop2: p3 start 4177527808 is beyond EOD, truncated [ 72.845370][ T6833] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 72.938898][ T6852] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 73.144818][ T6880] __nla_validate_parse: 1 callbacks suppressed [ 73.144834][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 73.169945][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 73.170404][ T6884] syz.0.1338[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.183162][ T6884] syz.0.1338[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.195399][ T6884] syz.0.1338[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.208820][ T6886] macvlan0: entered allmulticast mode [ 73.225707][ T6886] veth1_vlan: entered allmulticast mode [ 73.251180][ T6886] pim6reg: entered allmulticast mode [ 73.258013][ T6886] veth1_vlan: left allmulticast mode [ 73.266926][ T6886] macvlan0 (unregistering): left allmulticast mode [ 73.441863][ T6917] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.450331][ T6917] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.458690][ T6917] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.466962][ T6917] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.475414][ T6917] geneve2: entered promiscuous mode [ 73.480733][ T6917] geneve2: entered allmulticast mode [ 73.504770][ T6921] loop2: detected capacity change from 0 to 512 [ 73.520305][ T6921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.533245][ T6921] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.534125][ T6926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1357'. [ 73.586309][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.645766][ T6938] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1363'. [ 73.904349][ T6950] 9pnet: p9_errstr2errno: server reported unknown error õ’ô [ 74.142184][ T6979] loop2: detected capacity change from 0 to 1024 [ 74.145995][ T6980] netlink: 'syz.3.1378': attribute type 29 has an invalid length. [ 74.151017][ T6979] EXT4-fs: Ignoring removed orlov option [ 74.162189][ T6979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.163502][ T6980] netlink: 'syz.3.1378': attribute type 29 has an invalid length. [ 74.180421][ T6979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.213376][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.224306][ T6986] pim6reg1: entered promiscuous mode [ 74.229691][ T6986] pim6reg1: entered allmulticast mode [ 74.257971][ T6994] loop3: detected capacity change from 0 to 512 [ 74.277645][ T6994] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1388: bg 0: block 5: invalid block bitmap [ 74.292115][ T6994] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 74.301357][ T6994] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1388: invalid indirect mapped block 3 (level 2) [ 74.316359][ T6994] EXT4-fs (loop3): 1 orphan inode deleted [ 74.322295][ T6994] EXT4-fs (loop3): 1 truncate cleaned up [ 74.328622][ T6994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.354670][ T4939] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 74.368728][ T4939] EXT4-fs error (device loop3): ext4_lookup:1813: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 74.405068][ T7012] netlink: 'syz.0.1397': attribute type 21 has an invalid length. [ 74.413095][ T7012] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1397'. [ 74.423281][ T7012] netlink: 'syz.0.1397': attribute type 5 has an invalid length. [ 74.431054][ T7012] netlink: 'syz.0.1397': attribute type 6 has an invalid length. [ 74.438922][ T7012] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1397'. [ 74.463987][ T7017] loop2: detected capacity change from 0 to 512 [ 74.470967][ T7017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.488194][ T7017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.500720][ T7017] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.534847][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.550993][ T7025] loop4: detected capacity change from 0 to 128 [ 74.560235][ T7025] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.572696][ T7025] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.607852][ T4939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.633202][ T4029] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.826403][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 74.874345][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.881494][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.889893][ T7036] bridge_slave_0: entered allmulticast mode [ 74.896386][ T7036] bridge_slave_0: entered promiscuous mode [ 74.903428][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.910534][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.919169][ T7036] bridge_slave_1: entered allmulticast mode [ 74.925695][ T7036] bridge_slave_1: entered promiscuous mode [ 74.946856][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.958866][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.980413][ T7036] team0: Port device team_slave_0 added [ 74.987303][ T7036] team0: Port device team_slave_1 added [ 75.003807][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.010854][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.036960][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.048214][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.055389][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.081360][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.109383][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.111324][ T7036] hsr_slave_0: entered promiscuous mode [ 75.123775][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.131874][ T7036] hsr_slave_1: entered promiscuous mode [ 75.137954][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.145554][ T7036] Cannot create hsr debugfs directory [ 75.195516][ T7036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.250337][ T7036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.290655][ T7036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.342340][ T7036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.413733][ T7036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.422142][ T7036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.430902][ T7036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.439544][ T7036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.484815][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.498758][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.511527][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.518819][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.538626][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.545977][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.597873][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 75.597887][ T29] audit: type=1400 audit(1728169837.735:1740): avc: denied { setopt } for pid=7102 comm="syz.1.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.637698][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.679329][ T7107] hub 2-0:1.0: USB hub found [ 75.685309][ T7107] hub 2-0:1.0: 8 ports detected [ 75.728317][ T7117] loop2: detected capacity change from 0 to 2048 [ 75.734891][ T7036] veth0_vlan: entered promiscuous mode [ 75.744344][ T7036] veth1_vlan: entered promiscuous mode [ 75.753168][ T7121] vlan2: entered allmulticast mode [ 75.764287][ T7117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.792783][ T7036] veth0_macvtap: entered promiscuous mode [ 75.802031][ T7036] veth1_macvtap: entered promiscuous mode [ 75.808734][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.813307][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.828286][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.838164][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.848901][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.858972][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.869448][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.879526][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.889982][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.899854][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.910491][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.920335][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.930903][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.940744][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.951158][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963180][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.971906][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.982587][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.992472][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.002950][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.012837][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.023323][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.033202][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.043704][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.053524][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.063963][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.073871][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.084332][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.094241][ T7036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.104672][ T7036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.116744][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.134059][ T7036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142842][ T7036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.151627][ T7036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.160474][ T7036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.199772][ T29] audit: type=1400 audit(1728169838.325:1741): avc: denied { create } for pid=7138 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.204471][ T7144] loop4: detected capacity change from 0 to 1024 [ 76.219438][ T29] audit: type=1400 audit(1728169838.335:1742): avc: denied { write } for pid=7138 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.232004][ T7144] EXT4-fs: Ignoring removed orlov option [ 76.252522][ T29] audit: type=1400 audit(1728169838.385:1743): avc: denied { read } for pid=7138 comm="syz.2.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 76.272152][ T7144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.295006][ T7144] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 76.305181][ T7144] System zones: 0-1, 3-12 [ 76.310343][ T7144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.340198][ T7144] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.1443: corrupted in-inode xattr: bad magic number in in-inode xattr [ 76.340667][ T29] audit: type=1400 audit(1728169838.475:1744): avc: denied { setattr } for pid=7142 comm="syz.4.1443" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.378431][ T29] audit: type=1400 audit(1728169838.475:1745): avc: denied { unlink } for pid=7142 comm="syz.4.1443" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.385473][ T7144] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.1443: attempt to clear invalid blocks 1886221359 len 1 [ 76.445970][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 76.459636][ T7166] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.468499][ T7166] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.478325][ T7166] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.484589][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.487215][ T7166] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.505803][ T7166] vxlan0: entered promiscuous mode [ 76.512419][ T7169] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.1453'. [ 76.521630][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1453'. [ 76.668632][ T7187] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 6 [ 76.699475][ T29] audit: type=1400 audit(1728169838.835:1746): avc: denied { ioctl } for pid=7190 comm="syz.4.1463" path="socket:[17882]" dev="sockfs" ino=17882 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.739230][ T29] audit: type=1326 audit(1728169838.875:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm=2B7D5BFF0F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 76.762803][ T29] audit: type=1326 audit(1728169838.875:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm=2B7D5BFF0F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 76.788454][ T29] audit: type=1326 audit(1728169838.925:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm=2B7D5BFF0F exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 76.863044][ T7203] syzkaller0: entered promiscuous mode [ 76.868657][ T7203] syzkaller0: entered allmulticast mode [ 77.070482][ T7222] serio: Serial port ptm0 [ 77.383644][ T7244] loop2: detected capacity change from 0 to 512 [ 77.392030][ T7244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.401753][ T7244] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 77.409874][ T7244] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 77.419655][ T7244] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 77.429283][ T7244] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 77.438968][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.458703][ T7244] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1486: dx entry: limit 65535 != root limit 120 [ 77.470867][ T7244] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1486: Corrupt directory, running e2fsck is recommended [ 77.484038][ T7244] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1486: path /201/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 77.514706][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.540964][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.561134][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.585313][ T7265] netlink: 'syz.2.1496': attribute type 10 has an invalid length. [ 77.619287][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.644901][ T7269] loop7: detected capacity change from 0 to 16384 [ 77.719241][ T7269] I/O error, dev loop7, sector 12928 op 0x0:(READ) flags 0x800 phys_seg 16 prio class 0 [ 77.765417][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 77.818454][ T7307] syz.2.1505[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.818525][ T7307] syz.2.1505[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.830126][ T7307] syz.2.1505[7307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.367914][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 78.388273][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 78.406148][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 78.415172][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 78.601995][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.610543][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.670726][ T7374] bridge0: port 4(vlan3) entered blocking state [ 78.677139][ T7374] bridge0: port 4(vlan3) entered disabled state [ 78.683648][ T7374] vlan3: entered allmulticast mode [ 78.692900][ T7374] vlan3: left allmulticast mode [ 78.763007][ T7382] erspan0: entered promiscuous mode [ 78.789143][ T7382] erspan0: left promiscuous mode [ 79.190138][ T7415] pim6reg1: entered promiscuous mode [ 79.195453][ T7415] pim6reg1: entered allmulticast mode [ 79.211098][ T3341] kernel read not supported for file /usbmon9 (pid: 3341 comm: kworker/0:3) [ 79.212160][ T7416] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.558789][ T7434] loop7: detected capacity change from 0 to 16384 [ 79.622712][ T7434] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x800 phys_seg 16 prio class 0 [ 79.912709][ T7454] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 79.926772][ T7450] macvlan0: entered allmulticast mode [ 79.932167][ T7450] veth1_vlan: entered allmulticast mode [ 79.950089][ T7450] pim6reg: entered allmulticast mode [ 79.964514][ T7450] veth1_vlan: left allmulticast mode [ 79.974018][ T7450] macvlan0 (unregistering): left allmulticast mode [ 79.998092][ T7468] loop3: detected capacity change from 0 to 512 [ 80.008772][ T7468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.021516][ T7468] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.079567][ T7036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.379349][ T7505] macvlan0: entered allmulticast mode [ 80.384767][ T7505] veth1_vlan: entered allmulticast mode [ 80.400891][ T7505] pim6reg: entered allmulticast mode [ 80.420652][ T7505] veth1_vlan: left allmulticast mode [ 80.446724][ T7505] macvlan0 (unregistering): left allmulticast mode [ 80.521653][ T7527] raw_sendmsg: syz.1.1599 forgot to set AF_INET. Fix it! [ 80.544301][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.578438][ T7531] atomic_op ffff888110a68d28 conn xmit_atomic 0000000000000000 [ 80.678280][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 80.738551][ T7553] macvlan0: entered allmulticast mode [ 80.743971][ T7553] veth1_vlan: entered allmulticast mode [ 80.752695][ T7553] pim6reg: entered allmulticast mode [ 80.764826][ T7553] veth1_vlan: left allmulticast mode [ 80.773393][ T7553] macvlan0 (unregistering): left allmulticast mode [ 80.923949][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 80.923963][ T29] audit: type=1326 audit(1728169843.055:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 80.960737][ T7569] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 80.974112][ T7569] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 81.006623][ T29] audit: type=1326 audit(1728169843.065:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.030198][ T29] audit: type=1326 audit(1728169843.065:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.053795][ T29] audit: type=1326 audit(1728169843.065:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.077288][ T29] audit: type=1326 audit(1728169843.065:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.100844][ T29] audit: type=1326 audit(1728169843.065:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.124317][ T29] audit: type=1326 audit(1728169843.065:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.147922][ T29] audit: type=1326 audit(1728169843.065:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.171323][ T29] audit: type=1326 audit(1728169843.065:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.195028][ T29] audit: type=1326 audit(1728169843.065:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6374bfdff9 code=0x7ffc0000 [ 81.312430][ T7588] loop4: detected capacity change from 0 to 2048 [ 81.323862][ T7589] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1627'. [ 81.333106][ T7589] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 81.348556][ T7592] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1629'. [ 81.359169][ T7588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.375752][ T7588] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.392595][ T7588] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 81.404934][ T7588] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.404934][ T7588] [ 81.414677][ T7588] EXT4-fs (loop4): Total free blocks count 0 [ 81.420689][ T7588] EXT4-fs (loop4): Free/Dirty block details [ 81.426856][ T7588] EXT4-fs (loop4): free_blocks=2415919104 [ 81.432572][ T7588] EXT4-fs (loop4): dirty_blocks=16 [ 81.437916][ T7588] EXT4-fs (loop4): Block reservation details [ 81.443895][ T7588] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 81.455659][ T7588] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 14 with error 28 [ 81.719165][ T7606] macvlan0: entered allmulticast mode [ 81.724688][ T7606] veth1_vlan: entered allmulticast mode [ 81.738116][ T7607] loop4: detected capacity change from 0 to 1024 [ 81.744770][ T7607] EXT4-fs: Ignoring removed i_version option [ 81.751953][ T7606] pim6reg: entered allmulticast mode [ 81.759459][ T7607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.771770][ T7606] veth1_vlan: left allmulticast mode [ 81.787584][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.797496][ T7606] macvlan0 (unregistering): left allmulticast mode [ 81.823153][ T7618] atomic_op ffff888112955928 conn xmit_atomic 0000000000000000 [ 82.159854][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.178494][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.200867][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1646'. [ 82.722144][ T9] kernel read not supported for file /usbmon9 (pid: 9 comm: kworker/0:1) [ 82.733339][ T7669] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.761219][ T7681] atomic_op ffff88810c5d1d28 conn xmit_atomic 0000000000000000 [ 82.880693][ T7703] loop2: detected capacity change from 0 to 512 [ 82.890046][ T7703] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #15: comm syz.2.1658: casefold flag without casefold feature [ 82.902957][ T7703] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1658: couldn't read orphan inode 15 (err -117) [ 82.917049][ T7703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.932877][ T7703] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 82.951337][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.786014][ T7851] loop4: detected capacity change from 0 to 128 [ 83.883786][ T7851] syz.4.1668: attempt to access beyond end of device [ 83.883786][ T7851] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 83.928538][ T7849] syz.4.1668: attempt to access beyond end of device [ 83.928538][ T7849] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 83.942863][ T7851] syz.4.1668: attempt to access beyond end of device [ 83.942863][ T7851] loop4: rw=0, sector=177, nr_sectors = 1 limit=128 [ 83.992361][ T7874] tipc: Started in network mode [ 83.997330][ T7874] tipc: Node identity ac1414aa, cluster identity 4711 [ 84.004531][ T7874] tipc: New replicast peer: 100.1.1.1 [ 84.009971][ T7874] tipc: Enabled bearer , priority 10 [ 84.048762][ T7879] IPVS: Error joining to the multicast group [ 84.163175][ T7894] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.830361][ T7954] loop3: detected capacity change from 0 to 1024 [ 84.838093][ T7954] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 84.877032][ T7954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.917849][ T7036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.937710][ T7967] loop2: detected capacity change from 0 to 1024 [ 84.944338][ T7967] EXT4-fs: Ignoring removed i_version option [ 84.968873][ T7973] loop4: detected capacity change from 0 to 512 [ 84.969447][ T7967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.998236][ T7973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.010840][ T7973] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.011534][ T4913] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.052678][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.120880][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 85.131536][ T3402] tipc: Node number set to 2886997162 [ 85.152404][ T7995] bridge0: port 3(vlan2) entered blocking state [ 85.158846][ T7995] bridge0: port 3(vlan2) entered disabled state [ 85.165691][ T7995] vlan2: entered allmulticast mode [ 85.171606][ T7995] vlan2: left allmulticast mode [ 85.192100][ T7999] loop2: detected capacity change from 0 to 256 [ 85.199805][ T7999] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.389892][ T8013] hub 2-0:1.0: USB hub found [ 85.394639][ T8013] hub 2-0:1.0: 8 ports detected [ 85.420537][ T8016] loop4: detected capacity change from 0 to 2048 [ 85.437999][ T8016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.462831][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.507817][ T8020] loop4: detected capacity change from 0 to 8192 [ 86.205255][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 86.205272][ T29] audit: type=1400 audit(1728169848.335:1866): avc: denied { nlmsg_write } for pid=8044 comm="syz.0.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 86.295480][ T8060] syz.1.1753[8060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.295533][ T8060] syz.1.1753[8060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.322639][ T8060] syz.1.1753[8060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.337040][ T8060] sd 0:0:1:0: device reset [ 86.353583][ T8063] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.360830][ T8063] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.368088][ T8063] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 86.376012][ T8063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1754'. [ 86.401814][ T8063] bridge0: port 3(ipvlan0) entered blocking state [ 86.408378][ T8063] bridge0: port 3(ipvlan0) entered disabled state [ 86.422306][ T8063] ipvlan0: entered allmulticast mode [ 86.427654][ T8063] veth0_vlan: entered allmulticast mode [ 86.434876][ T8063] ipvlan0: left allmulticast mode [ 86.439980][ T8063] veth0_vlan: left allmulticast mode [ 86.445986][ T8063] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 86.551929][ T29] audit: type=1400 audit(1728169848.685:1867): avc: denied { create } for pid=8080 comm="syz.3.1761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.572694][ T29] audit: type=1400 audit(1728169848.685:1868): avc: denied { bind } for pid=8080 comm="syz.3.1761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.593179][ T29] audit: type=1400 audit(1728169848.685:1869): avc: denied { connect } for pid=8080 comm="syz.3.1761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.613981][ T29] audit: type=1400 audit(1728169848.685:1870): avc: denied { sendto } for pid=8080 comm="syz.3.1761" path=2F35312FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.850907][ T8093] loop3: detected capacity change from 0 to 164 [ 86.858067][ T8093] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 86.870121][ T29] audit: type=1400 audit(1728169849.005:1871): avc: denied { read } for pid=8092 comm="syz.3.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.927532][ T8098] pim6reg1: entered promiscuous mode [ 86.932863][ T8098] pim6reg1: entered allmulticast mode [ 87.020791][ T29] audit: type=1326 audit(1728169849.155:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 87.046092][ T29] audit: type=1326 audit(1728169849.155:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 87.069577][ T29] audit: type=1326 audit(1728169849.155:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 87.093170][ T29] audit: type=1326 audit(1728169849.155:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8104 comm="syz.3.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 87.173414][ T8119] loop2: detected capacity change from 0 to 128 [ 87.236873][ T8119] loop2: detected capacity change from 128 to 11 [ 87.260949][ T4913] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000074f) [ 87.260972][ T4913] FAT-fs (loop2): Filesystem has been set read-only [ 87.261339][ T4913] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000074f) [ 87.317086][ T8130] loop4: detected capacity change from 0 to 164 [ 87.329841][ T8130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 87.384166][ T8152] loop4: detected capacity change from 0 to 256 [ 87.402689][ T8162] loop4: detected capacity change from 0 to 128 [ 87.411638][ T8162] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.423866][ T8162] ext4 filesystem being mounted at /276/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 87.473525][ T4029] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.610304][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 87.646852][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.653920][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.661144][ T8174] bridge_slave_0: entered allmulticast mode [ 87.667874][ T8174] bridge_slave_0: entered promiscuous mode [ 87.674640][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.681940][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.689412][ T8174] bridge_slave_1: entered allmulticast mode [ 87.696109][ T8174] bridge_slave_1: entered promiscuous mode [ 87.714586][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.725064][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.744974][ T8174] team0: Port device team_slave_0 added [ 87.751707][ T8174] team0: Port device team_slave_1 added [ 87.767540][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.774490][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.800453][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.811838][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.818874][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.845181][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.871853][ T8174] hsr_slave_0: entered promiscuous mode [ 87.877918][ T8174] hsr_slave_1: entered promiscuous mode [ 87.883748][ T8174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.891701][ T8174] Cannot create hsr debugfs directory [ 87.949861][ T8174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.960197][ T8174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.029914][ T8174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.040574][ T8174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.089495][ T8174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.100023][ T8174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.162661][ T8174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.173131][ T8174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.260135][ T8174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.270897][ T8174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.281829][ T8174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.290535][ T8174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.308087][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 88.347614][ T8568] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1804'. [ 88.357620][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.382572][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.395750][ T7810] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.402971][ T7810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.416060][ T7810] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.423229][ T7810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.438014][ T8576] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1808'. [ 88.447005][ T8576] 0ªX¹¦À: renamed from caif0 [ 88.453773][ T8576] 0ªX¹¦À: entered allmulticast mode [ 88.459091][ T8576] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 88.522183][ T8583] loop3: detected capacity change from 0 to 1024 [ 88.543790][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.552210][ T8583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.574889][ T7036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.585115][ T8593] syzkaller0: entered promiscuous mode [ 88.590724][ T8593] syzkaller0: entered allmulticast mode [ 88.610721][ T8601] loop3: detected capacity change from 0 to 1024 [ 88.639169][ T8601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.639892][ T8174] veth0_vlan: entered promiscuous mode [ 88.651633][ T8601] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.662095][ T8174] veth1_vlan: entered promiscuous mode [ 88.685809][ T8174] veth0_macvtap: entered promiscuous mode [ 88.694135][ T8174] veth1_macvtap: entered promiscuous mode [ 88.705707][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.716211][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.726085][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.736625][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.746523][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.757090][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.767115][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.777628][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.787602][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.798022][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.807915][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.818352][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.828263][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.838705][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.848582][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.858995][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.870383][ T7036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.870956][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.887650][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.898221][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.908074][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.918532][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.928476][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.938991][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.948806][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.959245][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.969054][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.979479][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.989295][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.999905][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.009770][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.020194][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.030441][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.040876][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.052297][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.064690][ T8611] loop3: detected capacity change from 0 to 512 [ 89.072516][ T8174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.078847][ T8611] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.081472][ T8174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.090348][ T8611] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 89.107544][ T8174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.112606][ T8611] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 89.116323][ T8174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.125565][ T8611] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 89.142448][ T8611] System zones: 0-2, 18-18, 34-34 [ 89.152021][ T8611] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.168395][ T8611] EXT4-fs (loop3): 1 truncate cleaned up [ 89.177008][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.241838][ T7036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.254129][ T8625] vlan2: entered allmulticast mode [ 89.386899][ T8650] @: renamed from bond0 [ 89.459003][ T8676] syz.3.1832[8676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.459110][ T8676] syz.3.1832[8676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.470675][ T8676] syz.3.1832[8676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.578988][ T8690] sd 0:0:1:0: device reset [ 89.606430][ T8692] netlink: 'syz.3.1839': attribute type 39 has an invalid length. [ 89.724681][ T8696] pim6reg1: entered promiscuous mode [ 89.730031][ T8696] pim6reg1: entered allmulticast mode [ 90.253037][ T8708] loop4: detected capacity change from 0 to 1024 [ 90.279734][ T8708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.296909][ T8708] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.422411][ T4029] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.513801][ T8739] veth5: entered promiscuous mode [ 90.606497][ T8772] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 90.783856][ T8794] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1869'. [ 90.793170][ T8794] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 91.441533][ T8796] rdma_op ffff88810c5d2580 conn xmit_rdma 0000000000000000 [ 91.519855][ T3402] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 91.527700][ T3402] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 91.535444][ T3402] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 91.543695][ T3402] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.576333][ T8822] netlink: 17251 bytes leftover after parsing attributes in process `syz.4.1878'. [ 91.668453][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 91.668466][ T29] audit: type=1400 audit(1728169853.805:1976): avc: denied { mount } for pid=8838 comm="syz.3.1886" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.699935][ T29] audit: type=1400 audit(1728169853.805:1977): avc: denied { unmount } for pid=7036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.914100][ T29] audit: type=1326 audit(1728169854.045:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 91.942399][ T29] audit: type=1326 audit(1728169854.075:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 91.965872][ T29] audit: type=1326 audit(1728169854.075:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 91.989436][ T29] audit: type=1326 audit(1728169854.075:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 92.013038][ T29] audit: type=1326 audit(1728169854.075:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 92.036535][ T29] audit: type=1326 audit(1728169854.075:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 92.060051][ T29] audit: type=1326 audit(1728169854.075:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 92.083561][ T29] audit: type=1326 audit(1728169854.075:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 92.146592][ T8874] loop3: detected capacity change from 0 to 2048 [ 92.159977][ T8874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.188141][ T7036] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.238738][ T8888] loop3: detected capacity change from 0 to 512 [ 92.253228][ T8888] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.413416][ T8919] loop3: detected capacity change from 0 to 1024 [ 92.420317][ T8919] EXT4-fs: Ignoring removed bh option [ 92.430901][ T8919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 92.446020][ T7816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.465303][ T8919] System zones: 0-1, 3-12 [ 92.526774][ T8932] loop3: detected capacity change from 0 to 512 [ 92.541594][ T8932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.560408][ T8932] EXT4-fs (loop3): 1 orphan inode deleted [ 92.566174][ T8932] EXT4-fs (loop3): 1 truncate cleaned up [ 92.580495][ T8932] tipc: Started in network mode [ 92.585449][ T8932] tipc: Node identity ac14140f, cluster identity 4711 [ 92.592904][ T8932] tipc: New replicast peer: 255.255.255.255 [ 92.599039][ T8932] tipc: Enabled bearer , priority 10 [ 92.602450][ T8940] syz.1.1924[8940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.605232][ T8940] syz.1.1924[8940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.616789][ T8940] syz.1.1924[8940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.631081][ T8943] syz.4.1925[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.643823][ T8943] syz.4.1925[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.680136][ T8943] syz.4.1925[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.742521][ T7816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.799615][ T7816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.853558][ T7816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.869317][ T8933] chnl_net:caif_netlink_parms(): no params data found [ 92.963138][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.970318][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.979690][ T8933] bridge_slave_0: entered allmulticast mode [ 92.986293][ T8933] bridge_slave_0: entered promiscuous mode [ 92.997329][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.004486][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.012938][ T8933] bridge_slave_1: entered allmulticast mode [ 93.019778][ T8933] bridge_slave_1: entered promiscuous mode [ 93.041780][ T7816] bridge_slave_1: left allmulticast mode [ 93.047509][ T7816] bridge_slave_1: left promiscuous mode [ 93.053129][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.062320][ T7816] bridge_slave_0: left allmulticast mode [ 93.068077][ T7816] bridge_slave_0: left promiscuous mode [ 93.073916][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.151846][ T7816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.162006][ T7816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.175006][ T7816] bond0 (unregistering): Released all slaves [ 93.186281][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.205648][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.230488][ T7816] hsr_slave_0: left promiscuous mode [ 93.238622][ T7816] hsr_slave_1: left promiscuous mode [ 93.244802][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.252365][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.260242][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.267789][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.277991][ T7816] veth1_macvtap: left promiscuous mode [ 93.283483][ T7816] veth0_macvtap: left promiscuous mode [ 93.289128][ T7816] veth1_vlan: left promiscuous mode [ 93.294398][ T7816] veth0_vlan: left promiscuous mode [ 93.386795][ T7816] team0 (unregistering): Port device team_slave_1 removed [ 93.398142][ T7816] team0 (unregistering): Port device team_slave_0 removed [ 93.459907][ T8933] team0: Port device team_slave_0 added [ 93.466700][ T8933] team0: Port device team_slave_1 added [ 93.493345][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.500531][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.526682][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.540399][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.547382][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.573352][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.627894][ T9338] syz.1.1933[9338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.628027][ T9338] syz.1.1933[9338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.633354][ T8933] hsr_slave_0: entered promiscuous mode [ 93.681192][ T9338] syz.1.1933[9338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.693521][ T9368] loop4: detected capacity change from 0 to 256 [ 93.720448][ T3340] tipc: Node number set to 2886997007 [ 93.747156][ T8933] hsr_slave_1: entered promiscuous mode [ 93.763927][ T8933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.788681][ T8933] Cannot create hsr debugfs directory [ 93.849670][ T9401] bridge0: port 3(vlan2) entered blocking state [ 93.855984][ T9401] bridge0: port 3(vlan2) entered disabled state [ 93.864185][ T9401] vlan2: entered allmulticast mode [ 93.869684][ T9401] vlan2: left allmulticast mode [ 94.061619][ T9476] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 94.190936][ T9501] loop3: detected capacity change from 0 to 164 [ 94.198093][ T9501] Unable to read rock-ridge attributes [ 94.204102][ T9501] Unable to read rock-ridge attributes [ 94.658845][ T9530] loop4: detected capacity change from 0 to 256 [ 94.667162][ T9530] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.967081][ T8933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.975915][ T8933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.992152][ T8933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.010046][ T8933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.095897][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.128087][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.151772][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.159021][ T7816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.182795][ T2275] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.189956][ T2275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.331750][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.369881][ T9586] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 95.424962][ T8933] veth0_vlan: entered promiscuous mode [ 95.445215][ T8933] veth1_vlan: entered promiscuous mode [ 95.462688][ T987] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 95.467171][ T8933] veth0_macvtap: entered promiscuous mode [ 95.470407][ T987] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 95.487945][ T8933] veth1_macvtap: entered promiscuous mode [ 95.514658][ T987] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3 [ 95.539737][ T987] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.539925][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.554470][ T9607] syz.3.1971[9607] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.560282][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.582465][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.592922][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.601020][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9608 comm=syz.4.1970 [ 95.602743][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.625588][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.635555][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.646032][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.655858][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.666434][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.676607][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.687816][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.697674][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.708267][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.718172][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.728618][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.768894][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.785199][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 95.808472][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.818942][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.828806][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.839289][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.849199][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.859624][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.869439][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.879861][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.889669][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.900135][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.910021][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.920440][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.930323][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.940734][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.950548][ T8933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.960956][ T8933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.015148][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.029845][ T8933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.038702][ T8933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.047637][ T8933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.056348][ T8933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.168249][ T9653] loop3: detected capacity change from 0 to 512 [ 96.182871][ T9653] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.1981: corrupted xattr block 95: invalid header [ 96.197897][ T9653] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1981: bg 0: block 7: invalid block bitmap [ 96.202788][ T9656] loop2: detected capacity change from 0 to 512 [ 96.221146][ T9653] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 96.240509][ T9653] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.1981: corrupted xattr block 95: invalid header [ 96.248039][ T9656] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.270341][ T9653] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 96.309353][ T9653] EXT4-fs (loop3): 1 orphan inode deleted [ 96.480928][ T9691] loop4: detected capacity change from 0 to 128 [ 96.523789][ T9691] syz.4.1990: attempt to access beyond end of device [ 96.523789][ T9691] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 96.537372][ T9691] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 96.670520][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 96.701372][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 96.837009][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 96.837021][ T29] audit: type=1326 audit(1728170114.968:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 96.974022][ T29] audit: type=1326 audit(1728170114.998:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 96.997976][ T29] audit: type=1326 audit(1728170114.998:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.021369][ T29] audit: type=1326 audit(1728170114.998:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.044892][ T29] audit: type=1326 audit(1728170114.998:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.068308][ T29] audit: type=1400 audit(1728170115.088:2098): avc: denied { connect } for pid=9793 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.109111][ T9796] loop4: detected capacity change from 0 to 2048 [ 97.114480][ T29] audit: type=1326 audit(1728170115.178:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.138882][ T29] audit: type=1326 audit(1728170115.178:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.162299][ T29] audit: type=1326 audit(1728170115.178:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.185792][ T29] audit: type=1326 audit(1728170115.178:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f33cc4ddff9 code=0x7ffc0000 [ 97.246324][ T9796] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.262324][ T9796] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 1 with error 28 [ 97.274561][ T9796] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.274561][ T9796] [ 97.284227][ T9796] EXT4-fs (loop4): Total free blocks count 0 [ 97.290811][ T9796] EXT4-fs (loop4): Free/Dirty block details [ 97.296712][ T9796] EXT4-fs (loop4): free_blocks=2415919120 [ 97.302422][ T9796] EXT4-fs (loop4): dirty_blocks=16 [ 97.307525][ T9796] EXT4-fs (loop4): Block reservation details [ 97.313479][ T9796] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 97.354705][ T9824] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.383754][ T9829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2013'. [ 97.414070][ T7813] ================================================================== [ 97.422158][ T7813] BUG: KCSAN: data-race in alloc_pid / copy_process [ 97.428739][ T7813] [ 97.431050][ T7813] read-write to 0xffffffff8665d858 of 4 bytes by task 40 on cpu 1: [ 97.438922][ T7813] alloc_pid+0x542/0x6f0 [ 97.443150][ T7813] copy_process+0xe72/0x1f90 [ 97.447728][ T7813] kernel_clone+0x167/0x5e0 [ 97.452222][ T7813] user_mode_thread+0x7d/0xb0 [ 97.456897][ T7813] call_usermodehelper_exec_work+0x41/0x150 [ 97.462812][ T7813] process_scheduled_works+0x483/0x9a0 [ 97.468264][ T7813] worker_thread+0x51d/0x6f0 [ 97.472838][ T7813] kthread+0x1d1/0x210 [ 97.476892][ T7813] ret_from_fork+0x4b/0x60 [ 97.481297][ T7813] ret_from_fork_asm+0x1a/0x30 [ 97.486052][ T7813] [ 97.488361][ T7813] read to 0xffffffff8665d858 of 4 bytes by task 7813 on cpu 0: [ 97.495887][ T7813] copy_process+0x1799/0x1f90 [ 97.500551][ T7813] kernel_clone+0x167/0x5e0 [ 97.505043][ T7813] user_mode_thread+0x7d/0xb0 [ 97.509708][ T7813] call_usermodehelper_exec_work+0x41/0x150 [ 97.515609][ T7813] process_scheduled_works+0x483/0x9a0 [ 97.521058][ T7813] worker_thread+0x51d/0x6f0 [ 97.525631][ T7813] kthread+0x1d1/0x210 [ 97.529685][ T7813] ret_from_fork+0x4b/0x60 [ 97.534089][ T7813] ret_from_fork_asm+0x1a/0x30 [ 97.538843][ T7813] [ 97.541149][ T7813] value changed: 0x800000c7 -> 0x800000c8 [ 97.546847][ T7813] [ 97.549154][ T7813] Reported by Kernel Concurrency Sanitizer on: [ 97.555291][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: kworker/u8:9 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 97.566124][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.576172][ T7813] Workqueue: events_unbound call_usermodehelper_exec_work [ 97.583280][ T7813] ==================================================================