last executing test programs: 1.27114613s ago: executing program 3 (id=1415): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x20001, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33f555fdfdd407b9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port1\x00', 0x0, 0x120000, 0x4093, 0x8, 0x20000, 0xfffffffc, 0xffffffff, 0x0, 0x5}) 1.25448858s ago: executing program 3 (id=1416): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x8000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 739.25361ms ago: executing program 3 (id=1433): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 683.261849ms ago: executing program 4 (id=1435): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x6, 0x8}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x20000010) 667.27498ms ago: executing program 4 (id=1436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 652.08728ms ago: executing program 3 (id=1438): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100040, 0x0, 0x0, 0x2, 0x2, 0x15, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 633.05553ms ago: executing program 4 (id=1439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 632.39397ms ago: executing program 4 (id=1440): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x6}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r1) accept4(r0, 0x0, 0x0, 0x800) 545.09996ms ago: executing program 4 (id=1444): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x8000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 510.38552ms ago: executing program 3 (id=1447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r3 = dup2(r2, r2) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x8000000000003, 0x4a}}, 0x43) 509.44793ms ago: executing program 3 (id=1449): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r0, 0x0, 0x578410e9) sendfile(r2, r0, 0x0, 0x100000000) 491.89035ms ago: executing program 1 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 416.54395ms ago: executing program 1 (id=1451): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 415.874829ms ago: executing program 0 (id=1452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 310.60296ms ago: executing program 0 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 310.26601ms ago: executing program 1 (id=1454): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setgid(0xee01) 191.805019ms ago: executing program 0 (id=1455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 191.33101ms ago: executing program 2 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000080), &(0x7f00000004c0)=r4}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 170.32265ms ago: executing program 0 (id=1457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x80}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nodiscard}, {@quota}]}, 0x1, 0x50c, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x7, 0x6, 0x2000000000000000, 0x3, 0x2, 0x2, 0x79, 0xfffffffffffffffd, 0xf6d}) open(&(0x7f0000000040)='./bus\x00', 0x149942, 0x0) 162.588149ms ago: executing program 2 (id=1458): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipmr_delroute={0x2c, 0x19, 0x400, 0x70bd25, 0x25dfdbfc, {0x80, 0x94, 0x10, 0x33, 0xfc, 0x2, 0xc8, 0x4, 0xe00}, [@RTA_OIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) flistxattr(r0, 0x0, 0x0) 152.31034ms ago: executing program 1 (id=1459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 124.26057ms ago: executing program 2 (id=1460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 123.56255ms ago: executing program 2 (id=1461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 123.35373ms ago: executing program 1 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 67.86083ms ago: executing program 0 (id=1462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r3 = dup2(r2, r2) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x8000000000003, 0x4a}}, 0x43) 67.32533ms ago: executing program 2 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x55) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) 48.29466ms ago: executing program 2 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 38.70773ms ago: executing program 0 (id=1465): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000daf1b44f51eab8f11a2eddd6db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000027bb0570b000000000000"], 0x48) 29.431919ms ago: executing program 4 (id=1466): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 1 (id=1467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', '', [], 0xa, "b5f19f3863d5"}, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 19.255213][ T29] audit: type=1400 audit(1741216375.419:81): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. [ 25.348426][ T29] audit: type=1400 audit(1741216381.519:82): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.349216][ T3289] cgroup: Unknown subsys name 'net' [ 25.371583][ T29] audit: type=1400 audit(1741216381.519:83): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.399575][ T29] audit: type=1400 audit(1741216381.549:84): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.577004][ T3289] cgroup: Unknown subsys name 'cpuset' [ 25.583446][ T3289] cgroup: Unknown subsys name 'rlimit' [ 25.691813][ T29] audit: type=1400 audit(1741216381.859:85): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.715287][ T29] audit: type=1400 audit(1741216381.859:86): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.729077][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.735795][ T29] audit: type=1400 audit(1741216381.859:87): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.765185][ T29] audit: type=1400 audit(1741216381.859:88): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.781296][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.787544][ T29] audit: type=1400 audit(1741216381.859:89): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.821542][ T29] audit: type=1400 audit(1741216381.859:90): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.845139][ T29] audit: type=1400 audit(1741216381.919:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.885819][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 26.909540][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 26.964382][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.989139][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.030594][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.037848][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.045041][ T3305] bridge_slave_0: entered allmulticast mode [ 27.051621][ T3305] bridge_slave_0: entered promiscuous mode [ 27.073253][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.080359][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.087668][ T3305] bridge_slave_1: entered allmulticast mode [ 27.093971][ T3305] bridge_slave_1: entered promiscuous mode [ 27.100362][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 27.117998][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.125168][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.132369][ T3299] bridge_slave_0: entered allmulticast mode [ 27.138722][ T3299] bridge_slave_0: entered promiscuous mode [ 27.158335][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.165561][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.172802][ T3299] bridge_slave_1: entered allmulticast mode [ 27.179245][ T3299] bridge_slave_1: entered promiscuous mode [ 27.196287][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.203374][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.210618][ T3302] bridge_slave_0: entered allmulticast mode [ 27.217023][ T3302] bridge_slave_0: entered promiscuous mode [ 27.232783][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.246809][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.254055][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.261240][ T3302] bridge_slave_1: entered allmulticast mode [ 27.267850][ T3302] bridge_slave_1: entered promiscuous mode [ 27.281621][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.301123][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.319081][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.326336][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.333478][ T3310] bridge_slave_0: entered allmulticast mode [ 27.340018][ T3310] bridge_slave_0: entered promiscuous mode [ 27.351714][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.365193][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.372337][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.379582][ T3298] bridge_slave_0: entered allmulticast mode [ 27.386202][ T3298] bridge_slave_0: entered promiscuous mode [ 27.397833][ T3305] team0: Port device team_slave_0 added [ 27.404592][ T3305] team0: Port device team_slave_1 added [ 27.414697][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.421807][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.429005][ T3310] bridge_slave_1: entered allmulticast mode [ 27.435360][ T3310] bridge_slave_1: entered promiscuous mode [ 27.442550][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.461284][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.468487][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.475830][ T3298] bridge_slave_1: entered allmulticast mode [ 27.483133][ T3298] bridge_slave_1: entered promiscuous mode [ 27.495009][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.502089][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.528069][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.544144][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.554038][ T3299] team0: Port device team_slave_0 added [ 27.560684][ T3299] team0: Port device team_slave_1 added [ 27.575413][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.582519][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.608831][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.641146][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.651474][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.661860][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.675895][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.682968][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.709092][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.720721][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.728425][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.754839][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.771050][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.785684][ T3302] team0: Port device team_slave_0 added [ 27.813415][ T3302] team0: Port device team_slave_1 added [ 27.825277][ T3305] hsr_slave_0: entered promiscuous mode [ 27.831357][ T3305] hsr_slave_1: entered promiscuous mode [ 27.843648][ T3298] team0: Port device team_slave_0 added [ 27.854450][ T3310] team0: Port device team_slave_0 added [ 27.869239][ T3298] team0: Port device team_slave_1 added [ 27.877446][ T3310] team0: Port device team_slave_1 added [ 27.883548][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.890849][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.917096][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.960096][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.967106][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.993736][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.006851][ T3299] hsr_slave_0: entered promiscuous mode [ 28.013308][ T3299] hsr_slave_1: entered promiscuous mode [ 28.019273][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.027096][ T3299] Cannot create hsr debugfs directory [ 28.032902][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.039861][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.066042][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.078920][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.085957][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.112167][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.125375][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.132468][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.158598][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.172273][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.179322][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.205390][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.236653][ T3302] hsr_slave_0: entered promiscuous mode [ 28.242750][ T3302] hsr_slave_1: entered promiscuous mode [ 28.248625][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.256211][ T3302] Cannot create hsr debugfs directory [ 28.295431][ T3298] hsr_slave_0: entered promiscuous mode [ 28.301474][ T3298] hsr_slave_1: entered promiscuous mode [ 28.307493][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.315370][ T3298] Cannot create hsr debugfs directory [ 28.345982][ T3310] hsr_slave_0: entered promiscuous mode [ 28.352006][ T3310] hsr_slave_1: entered promiscuous mode [ 28.357865][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.365432][ T3310] Cannot create hsr debugfs directory [ 28.429238][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.446242][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.467172][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.495348][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.550858][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.565165][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.575078][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.586019][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.609551][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.628664][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.652094][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.663083][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.677811][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.684769][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.694901][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.712613][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.722496][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.737568][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.753625][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.762043][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.774289][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.783770][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.791401][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.801030][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.813209][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.820648][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.843414][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.880844][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.895335][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.904849][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.911958][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.928330][ T1928] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.935385][ T1928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.955142][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.977718][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.984885][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.004095][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.014558][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.031636][ T1928] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.038903][ T1928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.055796][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.093777][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.107669][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.122672][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.129786][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.139110][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.146216][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.158142][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.181866][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.201006][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.211642][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.224297][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.237990][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.245068][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.274737][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.281934][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.302968][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.313414][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.328152][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.355673][ T3305] veth0_vlan: entered promiscuous mode [ 29.379802][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.399122][ T3299] veth0_vlan: entered promiscuous mode [ 29.419097][ T3299] veth1_vlan: entered promiscuous mode [ 29.428744][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.440700][ T3305] veth1_vlan: entered promiscuous mode [ 29.497095][ T3299] veth0_macvtap: entered promiscuous mode [ 29.503921][ T3305] veth0_macvtap: entered promiscuous mode [ 29.511340][ T3298] veth0_vlan: entered promiscuous mode [ 29.522153][ T3302] veth0_vlan: entered promiscuous mode [ 29.529035][ T3299] veth1_macvtap: entered promiscuous mode [ 29.537257][ T3305] veth1_macvtap: entered promiscuous mode [ 29.547035][ T3302] veth1_vlan: entered promiscuous mode [ 29.559517][ T3298] veth1_vlan: entered promiscuous mode [ 29.567163][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.578713][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.589218][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.599708][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.608776][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.620980][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.631530][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.642036][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.651026][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.660173][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.668998][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.677714][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.692332][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.701199][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.710157][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.719012][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.741455][ T3298] veth0_macvtap: entered promiscuous mode [ 29.761571][ T3302] veth0_macvtap: entered promiscuous mode [ 29.769906][ T3298] veth1_macvtap: entered promiscuous mode [ 29.797662][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.808322][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.818219][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.828809][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.840636][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.842347][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.868649][ T3302] veth1_macvtap: entered promiscuous mode [ 29.882152][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.892691][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.902598][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.913049][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.923973][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.936036][ T3310] veth0_vlan: entered promiscuous mode [ 29.944720][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.953533][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.962323][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.971192][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.986930][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.997461][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.007297][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.017869][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.027818][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.038364][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.050860][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.062197][ T3310] veth1_vlan: entered promiscuous mode [ 30.076703][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.087319][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.097496][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.108291][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.118171][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.128700][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.144506][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.162413][ T3310] veth0_macvtap: entered promiscuous mode [ 30.173470][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.182299][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.191128][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.199974][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.223092][ T3444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 30.230259][ T3310] veth1_macvtap: entered promiscuous mode [ 30.253044][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.263733][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.273607][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.284046][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.294069][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.304558][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.314397][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.324824][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.336557][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.347385][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.358149][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.368066][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.378673][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.388523][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.399126][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.409055][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.419846][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.439530][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.454354][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 30.454377][ T29] audit: type=1400 audit(1741216386.609:138): avc: denied { read write } for pid=3450 comm="syz.2.7" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.484814][ T29] audit: type=1400 audit(1741216386.609:139): avc: denied { open } for pid=3450 comm="syz.2.7" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 30.508403][ T29] audit: type=1400 audit(1741216386.609:140): avc: denied { mounton } for pid=3450 comm="syz.2.7" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.548884][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.557680][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.566679][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.575447][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.633432][ T29] audit: type=1400 audit(1741216386.799:141): avc: denied { create } for pid=3459 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.669775][ T29] audit: type=1400 audit(1741216386.829:142): avc: denied { write } for pid=3459 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.716077][ T29] audit: type=1400 audit(1741216386.879:143): avc: denied { create } for pid=3460 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 30.771549][ T29] audit: type=1400 audit(1741216386.909:144): avc: denied { sys_admin } for pid=3460 comm="syz.3.4" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 30.792383][ T29] audit: type=1326 audit(1741216386.909:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 30.815615][ T29] audit: type=1326 audit(1741216386.909:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 30.838944][ T29] audit: type=1400 audit(1741216386.909:147): avc: denied { create } for pid=3468 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.910702][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 30.929249][ T3480] loop1: detected capacity change from 0 to 128 [ 30.938348][ T3475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14'. [ 30.972296][ T3478] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.141408][ T3501] netlink: 96 bytes leftover after parsing attributes in process `syz.0.27'. [ 31.338673][ T3528] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 31.348880][ T3525] IPVS: stopping master sync thread 3528 ... [ 31.562088][ T3559] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 31.568692][ T3559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 31.576378][ T3559] vhci_hcd vhci_hcd.0: Device attached [ 31.593699][ T3560] vhci_hcd: connection closed [ 31.593987][ T50] vhci_hcd: stop threads [ 31.603059][ T50] vhci_hcd: release socket [ 31.607581][ T50] vhci_hcd: disconnect device [ 31.830583][ T3478] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.922493][ T3586] pimreg: entered allmulticast mode [ 31.949173][ T3586] pimreg: left allmulticast mode [ 31.973626][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 31.981684][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 31.989732][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 31.998825][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.006633][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.014485][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.022263][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.030158][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.037920][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.045735][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.053531][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.061387][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.069234][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.077066][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.085353][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.093142][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.100960][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.101556][ C1] hrtimer: interrupt took 26739 ns [ 32.108704][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.121598][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.129508][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.137270][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.145010][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.152821][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.160768][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.168547][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.176380][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.184415][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.192255][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.200147][ T3360] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.208796][ T3360] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 32.295647][ T3610] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 32.306898][ T3608] loop0: detected capacity change from 0 to 1024 [ 32.315717][ T3608] ======================================================= [ 32.315717][ T3608] WARNING: The mand mount option has been deprecated and [ 32.315717][ T3608] and is ignored by this kernel. Remove the mand [ 32.315717][ T3608] option from the mount to silence this warning. [ 32.315717][ T3608] ======================================================= [ 32.353920][ T3608] EXT4-fs: Ignoring removed bh option [ 32.385636][ T3606] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 32.395522][ T3608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.418855][ T3478] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.430046][ T3608] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.76: Abort forced by user [ 32.443407][ T3608] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 32.482092][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.566902][ T3639] netlink: 96 bytes leftover after parsing attributes in process `syz.3.88'. [ 32.619825][ T3643] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.719266][ T3478] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.827850][ T3671] syzkaller1: entered promiscuous mode [ 32.833392][ T3671] syzkaller1: entered allmulticast mode [ 32.862324][ T3478] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.889795][ T3478] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.908010][ T3478] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.924917][ T3478] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.270938][ T3713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.348662][ T3713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.400098][ T3713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.510211][ T3713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.574324][ T3713] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.588000][ T3713] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.601236][ T3713] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.613328][ T3713] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725476][ T3774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.757785][ T3779] process 'syz.0.147' launched '/dev/fd/3' with NULL argv: empty string added [ 33.789074][ T3784] syz.0.149 uses obsolete (PF_INET,SOCK_PACKET) [ 33.800670][ T3774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.811163][ T3785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 33.848517][ T3792] loop1: detected capacity change from 0 to 1024 [ 33.855253][ T3792] EXT4-fs: Ignoring removed bh option [ 33.862605][ T3774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.879644][ T3792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.902789][ T3796] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 33.911400][ T3792] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.152: Allocating blocks 497-513 which overlap fs metadata [ 33.916785][ T3796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.926070][ T3792] EXT4-fs (loop1): pa ffff8881068f8000: logic 256, phys. 385, len 8 [ 33.940019][ T3792] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 33.953214][ T3774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.005364][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.024071][ T3774] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.036003][ T3774] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.049436][ T3774] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.061217][ T3774] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.131123][ T3815] IPv4: Oversized IP packet from 127.202.26.0 [ 34.230844][ T3835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3835 comm=syz.1.169 [ 34.251872][ T3835] netlink: 'syz.1.169': attribute type 5 has an invalid length. [ 34.380770][ T3852] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 34.393670][ T3852] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 34.488899][ T3871] capability: warning: `syz.4.184' uses 32-bit capabilities (legacy support in use) [ 34.565570][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 34.962115][ T3911] bridge: RTM_NEWNEIGH with invalid ether address [ 35.108691][ T3920] mmap: syz.1.205 (3920) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.322719][ T3940] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 35.331711][ T3940] syz_tun: entered promiscuous mode [ 35.503363][ T3956] netlink: 96 bytes leftover after parsing attributes in process `syz.4.223'. [ 35.581342][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 35.581356][ T29] audit: type=1400 audit(1741216391.749:381): avc: denied { create } for pid=3961 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 35.612325][ T29] audit: type=1400 audit(1741216391.779:382): avc: denied { setopt } for pid=3961 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 35.651096][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 35.661647][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 35.755262][ T29] audit: type=1400 audit(1741216391.919:383): avc: denied { connect } for pid=3986 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 35.777590][ T3988] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.233'. [ 35.786703][ T3988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'. [ 35.787947][ T29] audit: type=1400 audit(1741216391.919:384): avc: denied { name_connect } for pid=3986 comm="syz.0.236" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 35.955302][ T29] audit: type=1400 audit(1741216392.119:385): avc: denied { create } for pid=3995 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.956214][ T3996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.239'. [ 35.976518][ T29] audit: type=1400 audit(1741216392.119:386): avc: denied { setopt } for pid=3995 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.002896][ T29] audit: type=1400 audit(1741216392.119:387): avc: denied { write } for pid=3995 comm="syz.0.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.038137][ T3998] program syz.0.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.047658][ T3998] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 36.141529][ T4012] netlink: 96 bytes leftover after parsing attributes in process `syz.4.247'. [ 36.214903][ T4022] wg2: entered promiscuous mode [ 36.219842][ T4022] wg2: entered allmulticast mode [ 36.276993][ T4030] netlink: 'syz.4.257': attribute type 30 has an invalid length. [ 36.363974][ T29] audit: type=1326 audit(1741216392.529:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 36.387501][ T29] audit: type=1326 audit(1741216392.529:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 36.410843][ T29] audit: type=1326 audit(1741216392.529:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4046 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 36.441711][ T4049] SELinux: security_context_str_to_sid ({ÿ) failed with errno=-22 [ 36.561506][ T4069] loop1: detected capacity change from 0 to 164 [ 36.570889][ T4069] Unable to read rock-ridge attributes [ 36.602697][ T4069] Unable to read rock-ridge attributes [ 36.617871][ T4069] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 36.625674][ T4069] syz.1.275: attempt to access beyond end of device [ 36.625674][ T4069] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 36.925850][ T4114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'. [ 36.935050][ T4114] netlink: 'syz.1.296': attribute type 7 has an invalid length. [ 36.942754][ T4114] netlink: 'syz.1.296': attribute type 8 has an invalid length. [ 36.950440][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 36.961602][ T4114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'. [ 36.970670][ T4114] netlink: 'syz.1.296': attribute type 7 has an invalid length. [ 36.990731][ T4114] Zero length message leads to an empty skb [ 37.040463][ T4121] syz.1.300 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.059325][ T4124] wireguard0: entered promiscuous mode [ 37.064844][ T4124] wireguard0: entered allmulticast mode [ 37.241411][ T4153] loop0: detected capacity change from 0 to 128 [ 37.308491][ T4164] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.316814][ T4164] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.325015][ T4164] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.333294][ T4164] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.342903][ T4164] vxlan0: entered promiscuous mode [ 37.509755][ T4191] ip6gre1: entered allmulticast mode [ 37.797417][ T4229] loop3: detected capacity change from 0 to 512 [ 37.838056][ T4229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.851735][ T4229] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.875593][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.957627][ T4245] lo speed is unknown, defaulting to 1000 [ 37.963516][ T4245] lo speed is unknown, defaulting to 1000 [ 37.970651][ T4245] lo speed is unknown, defaulting to 1000 [ 37.976982][ T4245] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.988731][ T4245] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 38.001029][ T4245] lo speed is unknown, defaulting to 1000 [ 38.007384][ T4245] lo speed is unknown, defaulting to 1000 [ 38.013534][ T4245] lo speed is unknown, defaulting to 1000 [ 38.024817][ T4245] lo speed is unknown, defaulting to 1000 [ 38.031680][ T4245] lo speed is unknown, defaulting to 1000 [ 38.047609][ T4245] syz.0.358 (4245) used greatest stack depth: 10824 bytes left [ 38.094063][ T4164] syz.2.316 (4164) used greatest stack depth: 10392 bytes left [ 38.253821][ T4280] loop0: detected capacity change from 0 to 256 [ 38.265528][ T4280] FAT-fs (loop0): bogus number of FAT sectors [ 38.271713][ T4280] FAT-fs (loop0): Can't find a valid FAT filesystem [ 38.329521][ T4286] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 38.439529][ T4310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.461848][ T4314] xt_hashlimit: size too large, truncated to 1048576 [ 38.550208][ T4310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.643289][ T4310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.710212][ T4310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.753892][ T4338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.793366][ T4310] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.810633][ T4310] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836094][ T4310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.859434][ T4310] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.070119][ T4358] vlan2: entered allmulticast mode [ 39.081230][ T4360] bond_slave_1: mtu less than device minimum [ 39.198673][ T4385] validate_nla: 2 callbacks suppressed [ 39.198724][ T4385] netlink: 'syz.3.424': attribute type 3 has an invalid length. [ 39.238014][ T4393] loop3: detected capacity change from 0 to 1024 [ 39.273177][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 39.282494][ T4397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4397 comm=syz.4.430 [ 39.295083][ T4397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4397 comm=syz.4.430 [ 39.297471][ T4393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.337904][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 39.357527][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.411274][ T4416] netlink: 'syz.0.438': attribute type 12 has an invalid length. [ 39.597934][ T4453] IPv6: Can't replace route, no match found [ 39.939319][ T4501] wg2: entered promiscuous mode [ 39.944222][ T4501] wg2: entered allmulticast mode [ 40.368957][ T4541] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 40.368957][ T4541] program syz.2.493 not setting count and/or reply_len properly [ 40.710470][ T4574] netem: change failed [ 40.849959][ T4591] loop4: detected capacity change from 0 to 512 [ 40.863262][ T4591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.895264][ T4591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.912756][ T4591] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.933293][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 40.933307][ T29] audit: type=1400 audit(1741216397.099:577): avc: denied { create } for pid=4590 comm="syz.4.517" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.967927][ T4597] ip6gre2: entered allmulticast mode [ 40.984348][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.175202][ T29] audit: type=1400 audit(1741216397.339:578): avc: denied { connect } for pid=4620 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.211928][ T29] audit: type=1400 audit(1741216397.379:579): avc: denied { ioctl } for pid=4628 comm="syz.1.535" path="socket:[8738]" dev="sockfs" ino=8738 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.263527][ T4633] loop1: detected capacity change from 0 to 256 [ 41.281412][ T4626] lo speed is unknown, defaulting to 1000 [ 41.488842][ T29] audit: type=1326 audit(1741216397.649:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 41.513297][ T29] audit: type=1326 audit(1741216397.649:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 41.536805][ T29] audit: type=1326 audit(1741216397.649:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 41.549480][ T4658] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 41.560180][ T29] audit: type=1326 audit(1741216397.649:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 41.592777][ T29] audit: type=1326 audit(1741216397.649:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4654 comm="syz.1.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 41.616294][ T29] audit: type=1400 audit(1741216397.739:585): avc: denied { relabelto } for pid=4656 comm="syz.1.547" name="136" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 41.627566][ T4658] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.642383][ T29] audit: type=1400 audit(1741216397.739:586): avc: denied { associate } for pid=4656 comm="syz.1.547" name="136" dev="tmpfs" ino=715 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 41.650565][ T4658] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.685723][ T4658] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.694085][ T4658] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.745229][ T4644] Set syz1 is full, maxelem 65536 reached [ 41.814247][ T4665] loop1: detected capacity change from 0 to 2048 [ 41.822961][ T4667] __nla_validate_parse: 14 callbacks suppressed [ 41.822970][ T4667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.551'. [ 41.827878][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.870710][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.883962][ T4674] batadv_slave_1: entered promiscuous mode [ 41.890567][ T4674] batadv_slave_1: left promiscuous mode [ 41.917547][ T4678] netlink: 'syz.1.554': attribute type 5 has an invalid length. [ 41.937855][ T4683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4683 comm=syz.3.557 [ 42.205026][ T4721] loop1: detected capacity change from 0 to 2048 [ 42.254725][ T4721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.395134][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.493229][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.598'. [ 42.537434][ T4781] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 42.547557][ T4778] IPVS: stopping master sync thread 4781 ... [ 42.919184][ T4832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'. [ 42.973939][ T4846] netlink: 'syz.3.631': attribute type 13 has an invalid length. [ 43.015319][ T4846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 43.236385][ T4866] Falling back ldisc for ttyS3. [ 43.387357][ T4911] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.658'. [ 43.407963][ T4902] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.658'. [ 43.611349][ T4945] netlink: 240 bytes leftover after parsing attributes in process `syz.0.669'. [ 43.695415][ T4962] capability: warning: `syz.3.684' uses deprecated v2 capabilities in a way that may be insecure [ 43.737103][ T4966] loop4: detected capacity change from 0 to 8192 [ 43.789378][ T4971] pim6reg1: entered promiscuous mode [ 43.794792][ T4971] pim6reg1: entered allmulticast mode [ 43.843188][ T4984] syz.3.695 (4984) used greatest stack depth: 10304 bytes left [ 43.938107][ T4996] batadv_slave_1: entered promiscuous mode [ 43.944397][ T4996] batadv_slave_1: left promiscuous mode [ 43.962221][ T4997] lo speed is unknown, defaulting to 1000 [ 44.115152][ T5027] netlink: 'syz.3.708': attribute type 13 has an invalid length. [ 44.221423][ T5027] gretap0: refused to change device tx_queue_len [ 44.228596][ T5027] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.311378][ T5035] batadv_slave_1: entered promiscuous mode [ 44.325433][ T5035] batadv_slave_1: left promiscuous mode [ 44.375919][ T5018] Set syz1 is full, maxelem 65536 reached [ 44.439040][ T5049] netlink: 'syz.4.721': attribute type 13 has an invalid length. [ 44.481227][ T5053] netlink: 'syz.1.723': attribute type 16 has an invalid length. [ 44.490082][ T5053] netlink: 'syz.1.723': attribute type 17 has an invalid length. [ 44.517692][ T5049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.576362][ T5053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.592241][ T5061] batadv_slave_1: entered promiscuous mode [ 44.599240][ T5061] batadv_slave_1: left promiscuous mode [ 44.725168][ T5081] random: crng reseeded on system resumption [ 44.869036][ T5100] vlan2: entered allmulticast mode [ 44.897373][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'. [ 44.976376][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 44.985286][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 45.021248][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 45.315397][ T5149] netlink: 'syz.2.762': attribute type 13 has an invalid length. [ 45.388537][ T5149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.515190][ T5178] loop4: detected capacity change from 0 to 128 [ 45.710825][ T5210] netlink: 'syz.4.793': attribute type 10 has an invalid length. [ 45.720380][ T5210] team0: Device hsr_slave_0 failed to register rx_handler [ 45.822381][ T5224] netem: incorrect gi model size [ 45.827931][ T5224] netem: change failed [ 45.849340][ T5230] rdma_rxe: rxe_newlink: failed to add bond0 [ 45.859027][ T5230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.870733][ T5230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.917258][ T5230] lo speed is unknown, defaulting to 1000 [ 45.981198][ T5253] vlan2: entered allmulticast mode [ 46.140333][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 46.140352][ T29] audit: type=1326 audit(1741216402.309:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.171856][ T29] audit: type=1326 audit(1741216402.309:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.195303][ T29] audit: type=1326 audit(1741216402.309:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.218613][ T29] audit: type=1326 audit(1741216402.309:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.241955][ T29] audit: type=1326 audit(1741216402.309:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.265538][ T29] audit: type=1326 audit(1741216402.309:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.274155][ T5281] atomic_op ffff888119a32928 conn xmit_atomic 0000000000000000 [ 46.289134][ T29] audit: type=1326 audit(1741216402.339:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.320420][ T29] audit: type=1326 audit(1741216402.339:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.344409][ T29] audit: type=1326 audit(1741216402.339:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.368059][ T29] audit: type=1326 audit(1741216402.339:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5277 comm="syz.0.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 46.712096][ T5334] syzkaller1: entered promiscuous mode [ 46.717818][ T5334] syzkaller1: entered allmulticast mode [ 47.350249][ T5408] __nla_validate_parse: 18 callbacks suppressed [ 47.350264][ T5408] netlink: 96 bytes leftover after parsing attributes in process `syz.4.877'. [ 47.741464][ T5468] bridge: RTM_NEWNEIGH with invalid ether address [ 47.770424][ T5472] loop2: detected capacity change from 0 to 128 [ 47.845239][ T5484] netlink: 32 bytes leftover after parsing attributes in process `syz.2.911'. [ 47.960420][ T5500] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 47.970466][ T5500] syz_tun: entered promiscuous mode [ 48.433481][ T5517] bond_slave_1: mtu less than device minimum [ 48.861800][ T5538] netlink: 'syz.2.937': attribute type 4 has an invalid length. [ 48.878295][ T5538] netlink: 'syz.2.937': attribute type 4 has an invalid length. [ 48.909402][ T5545] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 48.921803][ T5544] IPVS: stopping master sync thread 5545 ... [ 49.015928][ T5564] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 49.051298][ T5564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.058486][ T5571] loop0: detected capacity change from 0 to 164 [ 49.065846][ T5571] Unable to read rock-ridge attributes [ 49.091150][ T5571] Unable to read rock-ridge attributes [ 49.102578][ T5571] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.361095][ T5599] loop4: detected capacity change from 0 to 1024 [ 49.368060][ T5599] EXT4-fs: Ignoring removed bh option [ 49.410245][ T5599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.470447][ T5615] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.479395][ T5599] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.959: Allocating blocks 497-513 which overlap fs metadata [ 49.496305][ T5599] EXT4-fs (loop4): pa ffff888106937150: logic 256, phys. 385, len 8 [ 49.504320][ T5599] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 49.549403][ T5615] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.585153][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.609067][ T5615] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.661934][ T5632] loop2: detected capacity change from 0 to 1024 [ 49.668919][ T5632] EXT4-fs: Ignoring removed bh option [ 49.677798][ T5615] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.691750][ T5635] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 49.716011][ T5632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.730810][ T5632] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.977: Abort forced by user [ 49.740932][ T5632] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 49.769818][ T5615] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.782020][ T5615] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.794868][ T5615] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.804827][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.805982][ T5615] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885190][ T5653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.974020][ T5673] lo speed is unknown, defaulting to 1000 [ 49.993562][ T5673] lo speed is unknown, defaulting to 1000 [ 50.008101][ T5673] lo speed is unknown, defaulting to 1000 [ 50.015482][ T5673] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 50.028568][ T5673] lo speed is unknown, defaulting to 1000 [ 50.035461][ T5673] lo speed is unknown, defaulting to 1000 [ 50.042362][ T5673] lo speed is unknown, defaulting to 1000 [ 50.048622][ T5673] lo speed is unknown, defaulting to 1000 [ 50.054864][ T5673] lo speed is unknown, defaulting to 1000 [ 50.117381][ T5691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5691 comm=syz.3.1003 [ 50.154053][ T5691] netlink: 'syz.3.1003': attribute type 5 has an invalid length. [ 50.337511][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 50.360330][ T5716] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.437932][ T5716] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.477587][ T5716] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.527288][ T5716] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.961594][ T5727] loop0: detected capacity change from 0 to 8192 [ 51.049245][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.057384][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.065165][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.075251][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.083058][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.090895][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.098775][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.106546][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.114315][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.122173][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.129960][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.137749][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.145579][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.153349][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.161357][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.169118][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.176930][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.184684][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.192528][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.200398][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.208240][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.215970][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.223795][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.231707][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.239449][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.247338][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.255074][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.262877][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.270643][ T4451] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 51.290025][ T4451] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz1 [ 51.337640][ T5729] Set syz1 is full, maxelem 65536 reached [ 51.343723][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 51.343735][ T29] audit: type=1326 audit(1741216407.499:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.373638][ T29] audit: type=1326 audit(1741216407.499:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.397044][ T29] audit: type=1326 audit(1741216407.499:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.420767][ T29] audit: type=1326 audit(1741216407.499:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.445097][ T29] audit: type=1326 audit(1741216407.499:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.468812][ T29] audit: type=1326 audit(1741216407.499:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.492883][ T29] audit: type=1326 audit(1741216407.499:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.516324][ T29] audit: type=1326 audit(1741216407.499:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.539735][ T29] audit: type=1326 audit(1741216407.509:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.563459][ T29] audit: type=1326 audit(1741216407.509:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5741 comm="syz.0.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eec2ad169 code=0x7ffc0000 [ 51.626500][ T5738] Falling back ldisc for ttyS3. [ 51.693848][ T5752] loop0: detected capacity change from 0 to 1024 [ 51.702312][ T5752] EXT4-fs: Ignoring removed bh option [ 51.712577][ T5754] loop4: detected capacity change from 0 to 1024 [ 51.719875][ T5754] EXT4-fs: Ignoring removed bh option [ 51.742823][ T5752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.742874][ T5754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.785216][ T5752] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.1026: Allocating blocks 497-513 which overlap fs metadata [ 51.799761][ T5752] EXT4-fs (loop0): pa ffff8881068f80e0: logic 256, phys. 385, len 8 [ 51.808000][ T5752] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 51.838024][ T5754] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.1029: Abort forced by user [ 51.854746][ T5754] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.876819][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.889309][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.890472][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.906518][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.914512][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.929384][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.937228][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.944986][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.952847][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.960678][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.961920][ T5778] rdma_rxe: rxe_newlink: failed to add bond0 [ 51.968435][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.968459][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.984140][ T5778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.990069][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.990096][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 51.999475][ T5778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.006227][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.029567][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.052809][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.060616][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.063304][ T5778] lo speed is unknown, defaulting to 1000 [ 52.068431][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.082109][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.089913][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.097742][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.105512][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.113313][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.121084][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.128839][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.136616][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.144366][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.152172][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.159919][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.167660][ T8] hid-generic 0000:0000:20000000.0003: unknown main item tag 0x0 [ 52.175832][ T8] hid-generic 0000:0000:20000000.0003: hidraw0: HID v0.01 Device [syz0] on syz1 [ 52.692459][ T5785] netlink: 'syz.2.1051': attribute type 30 has an invalid length. [ 52.900331][ T5807] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.918063][ T5805] loop1: detected capacity change from 0 to 1024 [ 52.925102][ T5805] EXT4-fs: Ignoring removed bh option [ 52.938331][ T5809] loop2: detected capacity change from 0 to 512 [ 52.945467][ T5809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.958232][ T5807] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.979492][ T5809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.979612][ T5805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.992457][ T5809] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.017601][ T5807] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.029649][ T5805] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.1048: Abort forced by user [ 53.040028][ T5805] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.059420][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.070491][ T5807] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.086326][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.096626][ T5821] rdma_rxe: rxe_newlink: failed to add bond0 [ 53.103526][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.113392][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.132429][ T5807] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.146606][ T5821] lo speed is unknown, defaulting to 1000 [ 53.155234][ T5807] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.167451][ T5807] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.179110][ T5807] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.840964][ T5716] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.851412][ T5716] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.861880][ T5716] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.872613][ T5716] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.965370][ T5839] netlink: 'syz.0.1059': attribute type 30 has an invalid length. [ 54.023073][ T5845] loop2: detected capacity change from 0 to 512 [ 54.053296][ T5845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.089595][ T5845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.106429][ T5845] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.180993][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.288705][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 54.307849][ T5864] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.317668][ T5864] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.380434][ T5864] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.390281][ T5864] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.457438][ T5864] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.467257][ T5864] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.547423][ T5864] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.557244][ T5864] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.610899][ T5864] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.619155][ T5864] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.629949][ T5864] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.638199][ T5864] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.648730][ T5864] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.656962][ T5864] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.667565][ T5864] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.675800][ T5864] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.773613][ T5893] lo speed is unknown, defaulting to 1000 [ 54.821249][ T5896] netem: change failed [ 55.699950][ T5912] loop0: detected capacity change from 0 to 1024 [ 55.724016][ T5912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.731908][ T5912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.763760][ T5912] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 55.776296][ T5912] System zones: 0-1, 3-36 [ 55.782607][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.797972][ T5923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5923 comm=syz.1.1098 [ 55.825813][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.932525][ T5945] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 55.955452][ T5950] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1109'. [ 55.970862][ T5937] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1109'. [ 56.004719][ T5956] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 56.029479][ T5956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.039730][ T5961] loop4: detected capacity change from 0 to 2048 [ 56.052747][ T5961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.087860][ T5961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.162948][ T5961] tipc: Started in network mode [ 56.168084][ T5961] tipc: Node identity ac1414aa, cluster identity 4711 [ 56.185503][ T5961] tipc: Enabled bearer , priority 10 [ 56.205895][ T5961] tipc: Disabling bearer [ 56.255102][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.319502][ T5991] loop0: detected capacity change from 0 to 512 [ 56.328780][ T5991] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.341869][ T5991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.353162][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 56.362771][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 56.379453][ T5995] loop2: detected capacity change from 0 to 512 [ 56.405618][ T5998] lo speed is unknown, defaulting to 1000 [ 56.407202][ T5991] EXT4-fs (loop0): 1 truncate cleaned up [ 56.418501][ T5995] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1132: bg 0: block 35: padding at end of block bitmap is not set [ 56.444425][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.467889][ T5995] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.486412][ T5995] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1132: invalid indirect mapped block 4294967295 (level 1) [ 56.533323][ T5995] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1132: invalid indirect mapped block 4294967295 (level 2) [ 56.557414][ T5995] EXT4-fs (loop2): 1 truncate cleaned up [ 56.569177][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.589705][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 56.589723][ T29] audit: type=1400 audit(1741216412.759:763): avc: denied { map } for pid=5988 comm="syz.0.1129" path="/252/file2/memory.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.619231][ T29] audit: type=1400 audit(1741216412.759:764): avc: denied { write } for pid=5988 comm="syz.0.1129" path="/252/file2/memory.current" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.680861][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.770733][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.783684][ T29] audit: type=1400 audit(1741216412.949:765): avc: denied { create } for pid=6015 comm="syz.0.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 56.786546][ T6016] delete_channel: no stack [ 56.815193][ T6016] delete_channel: no stack [ 56.849393][ T6020] netem: change failed [ 56.875951][ T6024] pim6reg1: entered promiscuous mode [ 56.881432][ T6024] pim6reg1: entered allmulticast mode [ 57.040751][ T29] audit: type=1326 audit(1741216413.209:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.064180][ T29] audit: type=1326 audit(1741216413.209:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.088938][ T29] audit: type=1326 audit(1741216413.259:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.112415][ T29] audit: type=1326 audit(1741216413.259:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.135839][ T29] audit: type=1326 audit(1741216413.259:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.136175][ T6038] loop4: detected capacity change from 0 to 8192 [ 57.159394][ T29] audit: type=1326 audit(1741216413.259:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.189152][ T29] audit: type=1326 audit(1741216413.259:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.4.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432c89d169 code=0x7ffc0000 [ 57.271293][ T6049] loop1: detected capacity change from 0 to 256 [ 57.314494][ T6053] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 57.503279][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1163'. [ 57.619295][ T6109] batadv_slave_1: entered promiscuous mode [ 57.699627][ T6108] batadv_slave_1: left promiscuous mode [ 57.791680][ T6140] loop0: detected capacity change from 0 to 512 [ 57.809872][ T6140] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1171: bg 0: block 248: padding at end of block bitmap is not set [ 57.832270][ T6140] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.1171: Failed to acquire dquot type 1 [ 57.844428][ T6140] EXT4-fs (loop0): 1 truncate cleaned up [ 57.851274][ T6140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.864702][ T6140] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.883061][ T6162] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1174'. [ 57.911304][ T6167] atomic_op ffff888119a31528 conn xmit_atomic 0000000000000000 [ 57.919263][ T6140] syz.0.1171 (6140) used greatest stack depth: 9272 bytes left [ 57.927732][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.937177][ T175] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 58.067372][ T6189] xt_CT: No such helper "pptp" [ 58.159019][ T6210] loop4: detected capacity change from 0 to 512 [ 58.187171][ T6210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.200182][ T6210] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.218579][ T6210] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1183: corrupted inode contents [ 58.234417][ T6210] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #19: comm syz.4.1183: mark_inode_dirty error [ 58.252384][ T6210] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #19: comm syz.4.1183: corrupted inode contents [ 58.265554][ T6210] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.1183: mark_inode_dirty error [ 58.287984][ T6210] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.1183: mark inode dirty (error -117) [ 58.301002][ T6210] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 58.321748][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.489700][ T6263] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1191'. [ 58.656927][ T6287] vlan2: entered allmulticast mode [ 58.662568][ T6287] bond0: entered allmulticast mode [ 58.667785][ T6287] bond_slave_0: entered allmulticast mode [ 58.673557][ T6287] bond_slave_1: entered allmulticast mode [ 58.680858][ T6287] bond0: left allmulticast mode [ 58.685741][ T6287] bond_slave_0: left allmulticast mode [ 58.691253][ T6287] bond_slave_1: left allmulticast mode [ 58.963939][ T6331] syz_tun: entered allmulticast mode [ 58.970631][ T6329] syz_tun: left allmulticast mode [ 59.108871][ T6352] loop4: detected capacity change from 0 to 2048 [ 59.150582][ T6362] loop2: detected capacity change from 0 to 512 [ 59.157464][ T6352] loop4: p3 < > p4 < > [ 59.161759][ T6352] loop4: partition table partially beyond EOD, truncated [ 59.169137][ T6352] loop4: p3 start 4284289 is beyond EOD, truncated [ 59.169890][ T6362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.195989][ T6362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.210092][ T6362] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.250552][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.392577][ T6392] loop2: detected capacity change from 0 to 2048 [ 59.404875][ T6392] EXT4-fs: Ignoring removed bh option [ 59.439434][ T6392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.461120][ T6392] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.477723][ T6392] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 19 with error 28 [ 59.490082][ T6392] EXT4-fs (loop2): This should not happen!! Data will be lost [ 59.490082][ T6392] [ 59.499865][ T6392] EXT4-fs (loop2): Total free blocks count 0 [ 59.505844][ T6392] EXT4-fs (loop2): Free/Dirty block details [ 59.511798][ T6392] EXT4-fs (loop2): free_blocks=2415919104 [ 59.517689][ T6392] EXT4-fs (loop2): dirty_blocks=32 [ 59.522927][ T6392] EXT4-fs (loop2): Block reservation details [ 59.528961][ T6392] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 59.550535][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.579498][ T6406] netlink: 'syz.0.1259': attribute type 4 has an invalid length. [ 59.612441][ T6406] netlink: 'syz.0.1259': attribute type 4 has an invalid length. [ 59.638928][ T6416] loop2: detected capacity change from 0 to 1024 [ 59.645725][ T6416] EXT4-fs: Ignoring removed bh option [ 59.657607][ T6416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.685755][ T6416] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.1263: Allocating blocks 497-513 which overlap fs metadata [ 59.701593][ T6416] EXT4-fs (loop2): pa ffff8881068f80e0: logic 256, phys. 385, len 8 [ 59.709662][ T6416] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 59.765515][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.779271][ T6428] netlink: 'syz.3.1269': attribute type 4 has an invalid length. [ 59.803643][ T9] lo speed is unknown, defaulting to 1000 [ 59.854981][ T6444] pim6reg1: entered promiscuous mode [ 59.860558][ T6444] pim6reg1: entered allmulticast mode [ 59.962508][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 60.002505][ T6459] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.062918][ T6471] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 60.142547][ T6475] SELinux: ebitmap: truncated map [ 60.170060][ T6475] SELinux: failed to load policy [ 60.176689][ T6490] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1299'. [ 60.237980][ T6498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1301'. [ 60.256786][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 60.589016][ T6544] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1324'. [ 60.723383][ T6561] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 60.824482][ T6567] SELinux: ebitmap: truncated map [ 60.834190][ T6567] SELinux: failed to load policy [ 60.883506][ T6575] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1339'. [ 60.908121][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1340'. [ 60.984968][ T6585] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 61.045195][ T6594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 61.100767][ T6598] SELinux: ebitmap: truncated map [ 61.110027][ T6598] SELinux: failed to load policy [ 61.149573][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1353'. [ 61.225331][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 61.249597][ T6613] loop0: detected capacity change from 0 to 512 [ 61.269772][ T6613] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.295032][ T6613] EXT4-fs (loop0): mount failed [ 61.653480][ T6653] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 61.671308][ T6650] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 61.734658][ T6660] pim6reg1: entered promiscuous mode [ 61.740170][ T6660] pim6reg1: entered allmulticast mode [ 62.100995][ T6694] serio: Serial port ptm0 [ 62.254547][ T6712] loop1: detected capacity change from 0 to 512 [ 62.274670][ T6712] __quota_error: 219 callbacks suppressed [ 62.274686][ T6712] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 62.291310][ T6712] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.309067][ T6712] EXT4-fs (loop1): mount failed [ 62.344713][ T29] audit: type=1400 audit(1741216418.509:988): avc: denied { unmount } for pid=6722 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.641540][ T6773] pim6reg1: entered promiscuous mode [ 62.647030][ T6773] pim6reg1: entered allmulticast mode [ 63.266609][ T6815] Falling back ldisc for ttyS3. [ 63.332313][ T29] audit: type=1326 audit(1741216419.499:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.360407][ T29] audit: type=1326 audit(1741216419.529:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.383940][ T29] audit: type=1326 audit(1741216419.529:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.407502][ T29] audit: type=1326 audit(1741216419.529:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.431083][ T29] audit: type=1326 audit(1741216419.529:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.454576][ T29] audit: type=1326 audit(1741216419.529:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.478620][ T29] audit: type=1326 audit(1741216419.599:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.502095][ T29] audit: type=1326 audit(1741216419.599:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6822 comm="syz.1.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99601dd169 code=0x7ffc0000 [ 63.572337][ T6831] loop0: detected capacity change from 0 to 512 [ 63.598900][ T6831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.601070][ T6842] serio: Serial port ptm0 [ 63.613255][ T6831] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.639669][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.728205][ C1] ================================================================== [ 63.736312][ C1] BUG: KCSAN: data-race in can_receive / can_receive [ 63.742983][ C1] [ 63.745291][ C1] read-write to 0xffff8881092b6d68 of 8 bytes by interrupt on cpu 0: [ 63.753338][ C1] can_receive+0x62/0x1f0 [ 63.757661][ C1] canfd_rcv+0xe7/0x180 [ 63.761807][ C1] __netif_receive_skb+0x123/0x280 [ 63.766912][ C1] process_backlog+0x22e/0x440 [ 63.771673][ C1] __napi_poll+0x63/0x3c0 [ 63.775996][ C1] net_rx_action+0x3a1/0x7f0 [ 63.780598][ C1] handle_softirqs+0xbf/0x280 [ 63.785310][ C1] run_ksoftirqd+0x1c/0x30 [ 63.789749][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 63.794684][ C1] kthread+0x4ae/0x520 [ 63.798747][ C1] ret_from_fork+0x4b/0x60 [ 63.803156][ C1] ret_from_fork_asm+0x1a/0x30 [ 63.807916][ C1] [ 63.810223][ C1] read-write to 0xffff8881092b6d68 of 8 bytes by interrupt on cpu 1: [ 63.818272][ C1] can_receive+0x62/0x1f0 [ 63.822605][ C1] canfd_rcv+0xe7/0x180 [ 63.826757][ C1] __netif_receive_skb+0x123/0x280 [ 63.831865][ C1] process_backlog+0x22e/0x440 [ 63.836626][ C1] __napi_poll+0x63/0x3c0 [ 63.840953][ C1] net_rx_action+0x3a1/0x7f0 [ 63.845547][ C1] handle_softirqs+0xbf/0x280 [ 63.850231][ C1] do_softirq+0x5e/0x90 [ 63.854405][ C1] __local_bh_enable_ip+0x6e/0x70 [ 63.859428][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 63.864362][ C1] batadv_nc_purge_paths+0x220/0x270 [ 63.869636][ C1] batadv_nc_worker+0x3db/0xad0 [ 63.874490][ C1] process_scheduled_works+0x4db/0xa20 [ 63.879943][ C1] worker_thread+0x51d/0x6f0 [ 63.884522][ C1] kthread+0x4ae/0x520 [ 63.888586][ C1] ret_from_fork+0x4b/0x60 [ 63.892996][ C1] ret_from_fork_asm+0x1a/0x30 [ 63.897756][ C1] [ 63.900063][ C1] value changed: 0x0000000000000662 -> 0x0000000000000664 [ 63.907152][ C1] [ 63.909461][ C1] Reported by Kernel Concurrency Sanitizer on: [ 63.915621][ C1] CPU: 1 UID: 0 PID: 1928 Comm: kworker/u8:8 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 63.926473][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.936692][ C1] Workqueue: bat_events batadv_nc_worker [ 63.942342][ C1] ================================================================== [ 63.958335][ C0] ================================================================== [ 63.966460][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 63.973165][ C0] [ 63.975495][ C0] read-write to 0xffff8881092b6d08 of 8 bytes by interrupt on cpu 1: [ 63.983573][ C0] can_receive+0x4e/0x1f0 [ 63.987902][ C0] canfd_rcv+0xe7/0x180 [ 63.992048][ C0] __netif_receive_skb+0x123/0x280 [ 63.997164][ C0] process_backlog+0x22e/0x440 [ 64.001925][ C0] __napi_poll+0x63/0x3c0 [ 64.006263][ C0] net_rx_action+0x3a1/0x7f0 [ 64.010857][ C0] handle_softirqs+0xbf/0x280 [ 64.015535][ C0] do_softirq+0x5e/0x90 [ 64.019686][ C0] __local_bh_enable_ip+0x6e/0x70 [ 64.024705][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 64.029635][ C0] batadv_nc_purge_paths+0x220/0x270 [ 64.034909][ C0] batadv_nc_worker+0x402/0xad0 [ 64.039763][ C0] process_scheduled_works+0x4db/0xa20 [ 64.045266][ C0] worker_thread+0x51d/0x6f0 [ 64.049887][ C0] kthread+0x4ae/0x520 [ 64.053956][ C0] ret_from_fork+0x4b/0x60 [ 64.058378][ C0] ret_from_fork_asm+0x1a/0x30 [ 64.063138][ C0] [ 64.065448][ C0] read-write to 0xffff8881092b6d08 of 8 bytes by interrupt on cpu 0: [ 64.073496][ C0] can_receive+0x4e/0x1f0 [ 64.077818][ C0] canfd_rcv+0xe7/0x180 [ 64.081961][ C0] __netif_receive_skb+0x123/0x280 [ 64.087108][ C0] process_backlog+0x22e/0x440 [ 64.091869][ C0] __napi_poll+0x63/0x3c0 [ 64.096191][ C0] net_rx_action+0x3a1/0x7f0 [ 64.100776][ C0] handle_softirqs+0xbf/0x280 [ 64.105462][ C0] run_ksoftirqd+0x1c/0x30 [ 64.109875][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 64.114907][ C0] kthread+0x4ae/0x520 [ 64.119081][ C0] ret_from_fork+0x4b/0x60 [ 64.123504][ C0] ret_from_fork_asm+0x1a/0x30 [ 64.128266][ C0] [ 64.130577][ C0] value changed: 0x0000000000000953 -> 0x0000000000000954 [ 64.137757][ C0] [ 64.140169][ C0] Reported by Kernel Concurrency Sanitizer on: [ 64.146316][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 64.157068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.167111][ C0] ==================================================================