last executing test programs: 3.774073739s ago: executing program 0 (id=500): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x4, "ccc0dde4b00a6d2c16b99a7fd0d48117b817abfccfa3806091bcc9f67e3de361a9172be4c429adba1c63d1674a55890c3e46ca658ca8939b7fc9c8f133dd3351"}) dup2(r1, r0) 3.214545502s ago: executing program 0 (id=506): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 3.112682647s ago: executing program 0 (id=507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) 3.023527513s ago: executing program 0 (id=512): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2.149599294s ago: executing program 4 (id=537): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x339}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x38a7, 0x0, 0x0, 0x0) 2.05719315s ago: executing program 4 (id=539): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) 2.028958401s ago: executing program 4 (id=541): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bind$xdp(r3, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) 2.010456272s ago: executing program 4 (id=542): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x93, 0x9) 1.990221733s ago: executing program 0 (id=543): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@data_err_ignore}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0x3}}, 0x20) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.989500113s ago: executing program 4 (id=544): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.87476239s ago: executing program 4 (id=545): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb47, 0x8, 0x7, 0x8, 0x3}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x10ffff) 1.837222033s ago: executing program 0 (id=546): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)) 1.212674939s ago: executing program 3 (id=553): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x6}, 0x1c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1) 1.129437854s ago: executing program 3 (id=555): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x2c, r3, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x40006) 1.03120631s ago: executing program 3 (id=559): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 878.982319ms ago: executing program 3 (id=563): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x100000001, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x8006, 0x0, 0x5) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 831.757352ms ago: executing program 3 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000580)={0x8c, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x70, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000401}, 0x0) 789.915124ms ago: executing program 2 (id=569): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 776.830694ms ago: executing program 3 (id=571): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) exit(0x0) 695.97185ms ago: executing program 2 (id=573): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) getpgid(r0) 501.431761ms ago: executing program 2 (id=576): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r3, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 404.488806ms ago: executing program 2 (id=578): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100, 0x0, 0x8000}, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 361.158409ms ago: executing program 2 (id=579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r1, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 343.1387ms ago: executing program 1 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x2, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) 342.70663ms ago: executing program 2 (id=581): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 317.517462ms ago: executing program 1 (id=582): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1f, 0x2003, @empty, 0x7}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xffffffff}}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 300.888692ms ago: executing program 1 (id=583): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd46f13736000000000000000496cf096ffef73a4744a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xf71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 80.213645ms ago: executing program 1 (id=584): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 457.18µs ago: executing program 1 (id=585): msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x20982) ioctl$BLKRAGET(r0, 0x1263, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0}}], 0x1, 0x20044840) 0s ago: executing program 1 (id=586): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x2f, @multicast2, 0x4e24, 0x4, 'sed\x00', 0x18, 0x8, 0x4d}, {@local, 0x4e21, 0x10000, 0x1, 0x4}}, 0x44) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 34.039188][ T29] audit: type=1400 audit(1770576848.745:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.062299][ T29] audit: type=1400 audit(1770576848.765:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.064738][ T3301] cgroup: Unknown subsys name 'net' [ 34.090148][ T29] audit: type=1400 audit(1770576848.795:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.209290][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.215692][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.308223][ T29] audit: type=1400 audit(1770576849.005:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.338647][ T29] audit: type=1400 audit(1770576849.015:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.359224][ T29] audit: type=1400 audit(1770576849.015:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.379671][ T29] audit: type=1400 audit(1770576849.015:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.400023][ T29] audit: type=1400 audit(1770576849.025:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.424892][ T29] audit: type=1400 audit(1770576849.025:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.448156][ T29] audit: type=1400 audit(1770576849.035:71): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.475686][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.600444][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.874668][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.952113][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.989971][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.040170][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.047357][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.054661][ T3313] bridge_slave_0: entered allmulticast mode [ 36.061287][ T3313] bridge_slave_0: entered promiscuous mode [ 36.089458][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.096566][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.103973][ T3313] bridge_slave_1: entered allmulticast mode [ 36.110460][ T3313] bridge_slave_1: entered promiscuous mode [ 36.116840][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.130634][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.152603][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.159719][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.166919][ T3318] bridge_slave_0: entered allmulticast mode [ 36.173412][ T3318] bridge_slave_0: entered promiscuous mode [ 36.182957][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.190109][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.197273][ T3314] bridge_slave_0: entered allmulticast mode [ 36.203848][ T3314] bridge_slave_0: entered promiscuous mode [ 36.215248][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.222517][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.229724][ T3314] bridge_slave_1: entered allmulticast mode [ 36.236319][ T3314] bridge_slave_1: entered promiscuous mode [ 36.247806][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.254989][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.262231][ T3318] bridge_slave_1: entered allmulticast mode [ 36.268657][ T3318] bridge_slave_1: entered promiscuous mode [ 36.280845][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.314309][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.324551][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.356682][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.366964][ T3313] team0: Port device team_slave_0 added [ 36.381500][ T3313] team0: Port device team_slave_1 added [ 36.388898][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.418764][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.433301][ T3314] team0: Port device team_slave_0 added [ 36.439345][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.446328][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.472276][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.502009][ T3314] team0: Port device team_slave_1 added [ 36.507741][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.514911][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.522304][ T3321] bridge_slave_0: entered allmulticast mode [ 36.529073][ T3321] bridge_slave_0: entered promiscuous mode [ 36.535827][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.542817][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.568792][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.583411][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.590625][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.597952][ T3312] bridge_slave_0: entered allmulticast mode [ 36.604749][ T3312] bridge_slave_0: entered promiscuous mode [ 36.616040][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.623192][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.630547][ T3312] bridge_slave_1: entered allmulticast mode [ 36.637012][ T3312] bridge_slave_1: entered promiscuous mode [ 36.648399][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.655622][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.663144][ T3321] bridge_slave_1: entered allmulticast mode [ 36.669647][ T3321] bridge_slave_1: entered promiscuous mode [ 36.682164][ T3318] team0: Port device team_slave_0 added [ 36.708882][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.723325][ T3318] team0: Port device team_slave_1 added [ 36.733711][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.740916][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.766878][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.779269][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.789848][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.800366][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.816215][ T3313] hsr_slave_0: entered promiscuous mode [ 36.822940][ T3313] hsr_slave_1: entered promiscuous mode [ 36.829334][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.836402][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.862366][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.898259][ T3312] team0: Port device team_slave_0 added [ 36.904954][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.912376][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.938839][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.953973][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.961257][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.987374][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.003877][ T3312] team0: Port device team_slave_1 added [ 37.010304][ T3321] team0: Port device team_slave_0 added [ 37.041198][ T3321] team0: Port device team_slave_1 added [ 37.063280][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.070359][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.096489][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.109907][ T3314] hsr_slave_0: entered promiscuous mode [ 37.115891][ T3314] hsr_slave_1: entered promiscuous mode [ 37.121802][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.127553][ T3314] Cannot create hsr debugfs directory [ 37.138731][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.145717][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.171856][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.187768][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.194946][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.221058][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.232229][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.239280][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.265250][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.302208][ T3318] hsr_slave_0: entered promiscuous mode [ 37.308363][ T3318] hsr_slave_1: entered promiscuous mode [ 37.314339][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.320139][ T3318] Cannot create hsr debugfs directory [ 37.377516][ T3321] hsr_slave_0: entered promiscuous mode [ 37.383684][ T3321] hsr_slave_1: entered promiscuous mode [ 37.389749][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.395659][ T3321] Cannot create hsr debugfs directory [ 37.403849][ T3312] hsr_slave_0: entered promiscuous mode [ 37.410332][ T3312] hsr_slave_1: entered promiscuous mode [ 37.416500][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.422336][ T3312] Cannot create hsr debugfs directory [ 37.603774][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.613217][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.629696][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.641961][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.674010][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.683283][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.692505][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.713305][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.737318][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.750660][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.764073][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.773097][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.812760][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.820019][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.829981][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.839513][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.861305][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.885473][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.901233][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.910135][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.921679][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.932492][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.939749][ T1711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.957682][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.968299][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.983556][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.994091][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.001335][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.052710][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.084799][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.098352][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.105665][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.114662][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.121770][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.134378][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.163404][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.174045][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.195757][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.213033][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.231581][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.244086][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.255890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.263051][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.278995][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.299992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.307103][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.317147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.324286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.352590][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.366214][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.376685][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.391411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.398643][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.416816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.423920][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.432807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.439887][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.464145][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.521625][ T3313] veth0_vlan: entered promiscuous mode [ 38.536129][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.558448][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.566732][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.604185][ T3313] veth1_vlan: entered promiscuous mode [ 38.644879][ T3313] veth0_macvtap: entered promiscuous mode [ 38.679391][ T3313] veth1_macvtap: entered promiscuous mode [ 38.714443][ T3312] veth0_vlan: entered promiscuous mode [ 38.741375][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.756758][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.769185][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.783663][ T3312] veth1_vlan: entered promiscuous mode [ 38.793602][ T1711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.809738][ T1711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.826543][ T3312] veth0_macvtap: entered promiscuous mode [ 38.839834][ T1711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849042][ T3312] veth1_macvtap: entered promiscuous mode [ 38.870491][ T3314] veth0_vlan: entered promiscuous mode [ 38.882589][ T1711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.902834][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.912868][ T3314] veth1_vlan: entered promiscuous mode [ 38.945986][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.952162][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.984930][ T3433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.013852][ T3482] loop3: detected capacity change from 0 to 128 [ 39.020052][ T3433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.054409][ T3318] veth0_vlan: entered promiscuous mode [ 39.063138][ T3482] syz.3.4: attempt to access beyond end of device [ 39.063138][ T3482] loop3: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 39.080184][ T3318] veth1_vlan: entered promiscuous mode [ 39.080787][ T3482] syz.3.4: attempt to access beyond end of device [ 39.080787][ T3482] loop3: rw=2049, sector=153, nr_sectors = 13 limit=128 [ 39.100525][ T3321] veth0_vlan: entered promiscuous mode [ 39.106401][ T3433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116289][ T3482] syz.3.4: attempt to access beyond end of device [ 39.116289][ T3482] loop3: rw=8423425, sector=121, nr_sectors = 8 limit=128 [ 39.122528][ T3433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.140147][ T3482] syz.3.4: attempt to access beyond end of device [ 39.140147][ T3482] loop3: rw=8423425, sector=137, nr_sectors = 8 limit=128 [ 39.160535][ T3318] veth0_macvtap: entered promiscuous mode [ 39.169805][ T3318] veth1_macvtap: entered promiscuous mode [ 39.182608][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.197163][ T3482] syz.3.4: attempt to access beyond end of device [ 39.197163][ T3482] loop3: rw=8423425, sector=153, nr_sectors = 13 limit=128 [ 39.197770][ T3321] veth1_vlan: entered promiscuous mode [ 39.219343][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.225692][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 39.225754][ T29] audit: type=1400 audit(1770576853.925:99): avc: denied { open } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.252011][ T29] audit: type=1400 audit(1770576853.925:100): avc: denied { perfmon } for pid=3485 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.272954][ T29] audit: type=1400 audit(1770576853.925:101): avc: denied { kernel } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.302117][ T29] audit: type=1400 audit(1770576853.985:102): avc: denied { tracepoint } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.302100][ T405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.302169][ T405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.341230][ T3314] veth0_macvtap: entered promiscuous mode [ 39.349749][ T3314] veth1_macvtap: entered promiscuous mode [ 39.356898][ T29] audit: type=1400 audit(1770576854.055:103): avc: denied { prog_load } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.376064][ T29] audit: type=1400 audit(1770576854.055:104): avc: denied { bpf } for pid=3485 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.396501][ T29] audit: type=1400 audit(1770576854.055:105): avc: denied { prog_run } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.415522][ T29] audit: type=1400 audit(1770576854.055:106): avc: denied { create } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.435912][ T29] audit: type=1400 audit(1770576854.055:107): avc: denied { write } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.463002][ T405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.485177][ T405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.503861][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.511915][ T29] audit: type=1400 audit(1770576854.225:108): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.556872][ T3321] veth0_macvtap: entered promiscuous mode [ 39.570748][ T3492] loop0: detected capacity change from 0 to 512 [ 39.588000][ T3321] veth1_macvtap: entered promiscuous mode [ 39.606888][ T3492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.625049][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.636773][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.647855][ T3492] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.659428][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.680079][ T1711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.724777][ T1711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.790892][ T3433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.876773][ C0] hrtimer: interrupt took 47134 ns [ 39.889135][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.905308][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 39.943831][ T3520] netlink: 'syz.0.12': attribute type 83 has an invalid length. [ 39.966260][ T3433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.986588][ T3433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.018839][ T3433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.053087][ T3433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.076505][ T3433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.654724][ T3569] loop3: detected capacity change from 0 to 128 [ 40.683847][ T3569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.721930][ T3569] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.820600][ T3426] IPVS: starting estimator thread 0... [ 40.909169][ T3585] IPVS: using max 2016 ests per chain, 100800 per kthread [ 41.016141][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.093495][ T3612] loop1: detected capacity change from 0 to 512 [ 41.128637][ T3612] ======================================================= [ 41.128637][ T3612] WARNING: The mand mount option has been deprecated and [ 41.128637][ T3612] and is ignored by this kernel. Remove the mand [ 41.128637][ T3612] option from the mount to silence this warning. [ 41.128637][ T3612] ======================================================= [ 41.194858][ T3612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.218554][ T3612] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.377411][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.417464][ T3641] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 41.654906][ T3650] program syz.2.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.752590][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 42.482535][ T3683] loop4: detected capacity change from 0 to 512 [ 42.589229][ T3702] loop2: detected capacity change from 0 to 512 [ 42.602248][ T3683] EXT4-fs: Ignoring removed i_version option [ 42.667906][ T3683] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 42.682912][ T3683] EXT4-fs (loop4): 1 truncate cleaned up [ 42.703019][ T3683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.798900][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.886802][ T3715] loop0: detected capacity change from 0 to 256 [ 42.948908][ T3715] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙˙˙' [ 43.090600][ T3722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 43.138353][ T3727] veth1_to_bond: entered allmulticast mode [ 43.157127][ T3727] veth1_to_bond: left allmulticast mode [ 43.175020][ T3394] IPVS: starting estimator thread 0... [ 43.268777][ T3731] IPVS: using max 2208 ests per chain, 110400 per kthread [ 43.411489][ T3752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.439351][ T3752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.464019][ T3752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.489278][ T3373] kernel write not supported for file bpf-prog (pid: 3373 comm: kworker/1:2) [ 43.492672][ T3752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.533789][ T3752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 43.543174][ T3752] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(13) [ 43.549859][ T3752] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.557729][ T3752] vhci_hcd vhci_hcd.0: Device attached [ 43.569246][ T3767] vhci_hcd: connection closed [ 43.575202][ T12] vhci_hcd vhci_hcd.4: stop threads [ 43.585474][ T12] vhci_hcd vhci_hcd.4: release socket [ 43.591000][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 43.619381][ T3772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 43.654436][ T3772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.105'. [ 43.664001][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.674113][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.766567][ T3785] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.812938][ T3787] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.111'. [ 43.831927][ T3787] netlink: zone id is out of range [ 43.837195][ T3787] netlink: zone id is out of range [ 43.842933][ T3787] netlink: zone id is out of range [ 43.871208][ T3787] netlink: set zone limit has 8 unknown bytes [ 43.948996][ T3792] loop3: detected capacity change from 0 to 2048 [ 44.108823][ T3798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.220769][ T3792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.443234][ T3792] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.476129][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 44.476175][ T29] audit: type=1400 audit(1770576859.175:313): avc: denied { read write } for pid=3791 comm="syz.3.114" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.505165][ T29] audit: type=1400 audit(1770576859.175:314): avc: denied { open } for pid=3791 comm="syz.3.114" path="/25/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.540637][ T3792] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.114: bg 0: block 345: padding at end of block bitmap is not set [ 44.579793][ T3792] EXT4-fs (loop3): Remounting filesystem read-only [ 44.598613][ T29] audit: type=1400 audit(1770576859.175:315): avc: denied { create } for pid=3803 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.617992][ T29] audit: type=1400 audit(1770576859.195:316): avc: denied { bind } for pid=3803 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.637795][ T29] audit: type=1400 audit(1770576859.195:317): avc: denied { listen } for pid=3803 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.657493][ T29] audit: type=1400 audit(1770576859.195:318): avc: denied { write } for pid=3803 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.676790][ T29] audit: type=1400 audit(1770576859.195:319): avc: denied { accept } for pid=3803 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.684445][ T3792] syz.3.114 (3792) used greatest stack depth: 9968 bytes left [ 44.726485][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.784504][ T29] audit: type=1400 audit(1770576859.485:320): avc: denied { mount } for pid=3819 comm="syz.3.123" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.893592][ T3828] loop1: detected capacity change from 0 to 512 [ 44.914508][ T3828] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.955705][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.006633][ T3828] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.024066][ T3830] loop2: detected capacity change from 0 to 4096 [ 45.058192][ T3828] EXT4-fs (loop1): shut down requested (2) [ 45.075553][ T29] audit: type=1400 audit(1770576859.775:321): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 45.097655][ T29] audit: type=1400 audit(1770576859.775:322): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.176783][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.193485][ T3839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.132'. [ 45.255513][ T3848] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.642108][ T3882] sctp: [Deprecated]: syz.2.148 (pid 3882) Use of int in maxseg socket option. [ 45.642108][ T3882] Use struct sctp_assoc_value instead [ 45.661768][ T3883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 45.678691][ T3883] netlink: 'syz.0.150': attribute type 2 has an invalid length. [ 45.686500][ T3883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 45.853711][ T3897] netlink: 256 bytes leftover after parsing attributes in process `syz.0.157'. [ 46.091261][ T3913] process 'syz.0.165' launched './file0' with NULL argv: empty string added [ 46.111332][ T3913] Invalid argument reading file caps for ./file0 [ 46.133094][ T3918] loop1: detected capacity change from 0 to 1024 [ 46.142124][ T3918] EXT4-fs: Ignoring removed bh option [ 46.149237][ T3918] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.171213][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.201589][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.277212][ T3937] loop3: detected capacity change from 0 to 512 [ 46.294772][ T3940] mmap: syz.0.172 (3940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.317338][ T3941] loop1: detected capacity change from 0 to 512 [ 46.331892][ T3941] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.170: inode has both inline data and extents flags [ 46.356530][ T3941] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.170: couldn't read orphan inode 15 (err -117) [ 46.371089][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.383362][ T3937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.396962][ T3937] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.454620][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.515087][ T3955] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 46.543164][ T3961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 46.626171][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 46.635095][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 46.644086][ T3970] netlink: 'syz.3.182': attribute type 7 has an invalid length. [ 46.657161][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'. [ 46.658169][ T407] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.666226][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 46.666258][ T3970] netlink: 'syz.3.182': attribute type 7 has an invalid length. [ 46.692009][ T3970] Zero length message leads to an empty skb [ 46.717914][ T407] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.728564][ T3433] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.737464][ T3433] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.807304][ T3985] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 46.834662][ T3985] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 47.164623][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.201734][ T3992] loop2: detected capacity change from 0 to 32768 [ 47.234147][ T407] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.279346][ T3992] loop2: p1 p3 < > [ 47.296510][ T4010] netlink: 108 bytes leftover after parsing attributes in process `syz.4.196'. [ 47.424685][ T4017] loop2: detected capacity change from 0 to 1024 [ 47.443387][ T4017] EXT4-fs: Ignoring removed bh option [ 47.493215][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.500914][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 47.715940][ T4044] usb usb8: usbfs: process 4044 (syz.4.211) did not claim interface 0 before use [ 47.938899][ T4047] netlink: 'syz.0.212': attribute type 10 has an invalid length. [ 47.946718][ T4047] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 48.269216][ T4085] loop4: detected capacity change from 0 to 2048 [ 48.281302][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.411377][ T4085] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.426459][ T4085] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1398 with error 28 [ 48.439065][ T4085] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.439065][ T4085] [ 48.448784][ T4085] EXT4-fs (loop4): Total free blocks count 0 [ 48.454898][ T4085] EXT4-fs (loop4): Free/Dirty block details [ 48.460899][ T4085] EXT4-fs (loop4): free_blocks=2415919504 [ 48.466721][ T4085] EXT4-fs (loop4): dirty_blocks=1408 [ 48.472087][ T4085] EXT4-fs (loop4): Block reservation details [ 48.478155][ T4085] EXT4-fs (loop4): i_reserved_data_blocks=88 [ 48.552306][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.637852][ T1711] Bluetooth: hci1: Frame reassembly failed (-84) [ 48.984364][ T4112] loop2: detected capacity change from 0 to 1024 [ 49.084730][ T4116] loop0: detected capacity change from 0 to 128 [ 49.116114][ T4116] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.131086][ T4116] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.160296][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.258471][ T3951] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.264663][ T4102] Bluetooth: hci0: command 0x1003 tx timeout [ 49.588967][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 49.589014][ T29] audit: type=1400 audit(1770576864.295:402): avc: denied { create } for pid=4144 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.640015][ T29] audit: type=1400 audit(1770576864.325:403): avc: denied { bind } for pid=4144 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.659464][ T29] audit: type=1400 audit(1770576864.325:404): avc: denied { listen } for pid=4144 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.679071][ T29] audit: type=1400 audit(1770576864.325:405): avc: denied { connect } for pid=4144 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.698605][ T29] audit: type=1400 audit(1770576864.325:406): avc: denied { write } for pid=4144 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.053134][ T4160] loop2: detected capacity change from 0 to 512 [ 50.103094][ T29] audit: type=1400 audit(1770576864.805:407): avc: denied { ioctl } for pid=4163 comm="syz.0.257" path="socket:[6472]" dev="sockfs" ino=6472 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.145724][ T29] audit: type=1400 audit(1770576864.845:408): avc: denied { block_suspend } for pid=4157 comm="syz.1.255" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.197855][ T4169] syzkaller1: entered promiscuous mode [ 50.203435][ T4169] syzkaller1: entered allmulticast mode [ 50.287825][ T29] audit: type=1400 audit(1770576864.985:409): avc: denied { read write } for pid=4173 comm="syz.2.262" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.339289][ T29] audit: type=1400 audit(1770576864.985:410): avc: denied { open } for pid=4173 comm="syz.2.262" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.413504][ T29] audit: type=1400 audit(1770576865.115:411): avc: denied { read write } for pid=4177 comm="syz.3.264" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.712148][ T4007] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 50.718306][ T4102] Bluetooth: hci1: command 0x1003 tx timeout [ 50.824177][ T4199] ip6erspan0: entered promiscuous mode [ 50.953968][ T4209] __nla_validate_parse: 2 callbacks suppressed [ 50.953983][ T4209] netlink: 104 bytes leftover after parsing attributes in process `syz.3.278'. [ 51.273864][ T4227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 51.956720][ T4277] loop0: detected capacity change from 0 to 1024 [ 52.006397][ T4279] loop4: detected capacity change from 0 to 1024 [ 52.018854][ T4277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.038544][ T4285] loop1: detected capacity change from 0 to 256 [ 52.058670][ T4285] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙' [ 52.088599][ T4277] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.178232][ T4291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.308: bg 0: block 112: padding at end of block bitmap is not set [ 52.192757][ T4284] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 52.220278][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.278571][ T4279] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.290193][ T405] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 6) [ 52.368846][ T405] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 52.381206][ T405] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.381206][ T405] [ 52.445953][ T4293] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.308: lblock 0 mapped to illegal pblock 0 (length 1) [ 52.478647][ T4293] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 52.567081][ T4293] EXT4-fs error (device loop0) in ext4_setattr:6035: Corrupt filesystem [ 52.589261][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.710746][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.826346][ T4307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.838719][ T4307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.858104][ T4316] netlink: 'syz.4.321': attribute type 19 has an invalid length. [ 52.865987][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 52.961284][ T4316] netlink: 'syz.4.321': attribute type 19 has an invalid length. [ 52.962317][ T3433] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.969122][ T4316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 53.365526][ T3433] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.401849][ T3433] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.426734][ T3433] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.861162][ T4373] loop1: detected capacity change from 0 to 128 [ 53.895165][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 53.931203][ T4373] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.993066][ T4373] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.062934][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 54.099503][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.147313][ T4396] loop1: detected capacity change from 0 to 512 [ 54.172085][ T4396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.201830][ T4403] loop4: detected capacity change from 0 to 1024 [ 54.229859][ T4403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 54.239265][ T4403] System zones: 0-1, 3-8 [ 54.243989][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.256755][ T4403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.269728][ T4403] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.270744][ T4408] loop0: detected capacity change from 0 to 1024 [ 54.293683][ T4408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.302854][ T4408] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.314122][ T4408] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 54.322447][ T4408] EXT4-fs (loop0): orphan cleanup on readonly fs [ 54.329326][ T4408] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.361: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.343570][ T4408] EXT4-fs (loop0): Remounting filesystem read-only [ 54.350321][ T4408] EXT4-fs (loop0): 1 orphan inode deleted [ 54.356679][ T4408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.419336][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.457757][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.507186][ T4427] loop4: detected capacity change from 0 to 128 [ 54.583830][ T4433] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 54.590353][ T4436] loop0: detected capacity change from 0 to 512 [ 54.601263][ T4436] journal_path: Non-blockdev passed as './bus' [ 54.607493][ T4436] EXT4-fs: error: could not find journal device path [ 54.889756][ T4481] netlink: 168 bytes leftover after parsing attributes in process `syz.0.374'. [ 55.068038][ T4506] loop0: detected capacity change from 0 to 128 [ 55.082489][ T4506] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.106256][ T4506] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.167818][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.224361][ T4527] syzkaller1: entered promiscuous mode [ 55.229955][ T4527] syzkaller1: entered allmulticast mode [ 55.401103][ T4551] syzkaller1: entered promiscuous mode [ 55.406738][ T4551] syzkaller1: entered allmulticast mode [ 55.557376][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.620586][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.637732][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.671315][ T4584] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.740711][ T4584] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 55.748553][ T4584] netlink: 'syz.2.391': attribute type 29 has an invalid length. [ 55.756337][ T4584] netlink: 148 bytes leftover after parsing attributes in process `syz.2.391'. [ 55.765805][ T1711] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.774759][ T1711] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.787541][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 55.787559][ T29] audit: type=1400 audit(1770576870.485:482): avc: denied { cpu } for pid=4591 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.808583][ T1711] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.821740][ T1711] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.858575][ T1711] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.867648][ T1711] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.877758][ T1711] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.886716][ T1711] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.019753][ T29] audit: type=1400 audit(1770576870.725:483): avc: denied { bind } for pid=4611 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.039127][ T29] audit: type=1400 audit(1770576870.725:484): avc: denied { node_bind } for pid=4611 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 56.137808][ T4628] loop4: detected capacity change from 0 to 512 [ 56.146381][ T29] audit: type=1400 audit(1770576870.785:485): avc: denied { create } for pid=4614 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.174253][ T29] audit: type=1400 audit(1770576870.875:486): avc: denied { search } for pid=4629 comm="syz.2.402" name="/" dev="configfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.196395][ T29] audit: type=1400 audit(1770576870.875:487): avc: denied { search } for pid=4629 comm="syz.2.402" name="/" dev="configfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.217420][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.218582][ T29] audit: type=1400 audit(1770576870.875:488): avc: denied { read open } for pid=4629 comm="syz.2.402" path="/" dev="configfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.253788][ T4628] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.297941][ T29] audit: type=1400 audit(1770576870.995:489): avc: denied { add_name } for pid=4627 comm="syz.4.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.323927][ T4628] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.403: corrupted inode contents [ 56.339848][ T4628] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.403: mark_inode_dirty error [ 56.363167][ T29] audit: type=1400 audit(1770576871.065:490): avc: denied { read } for pid=4641 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.386041][ T4628] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.403: corrupted inode contents [ 56.398651][ T4628] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.403: mark_inode_dirty error [ 56.416562][ T29] audit: type=1400 audit(1770576871.125:491): avc: denied { create } for pid=4627 comm="syz.4.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.444810][ T4628] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #18: comm syz.4.403: directory missing '.' [ 56.504043][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.996916][ T4699] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 57.014108][ T4699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.048897][ T4699] bond1: (slave gretap1): making interface the new active one [ 57.057663][ T4699] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.075526][ T4699] syz.2.422 (4699) used greatest stack depth: 9952 bytes left [ 57.360771][ T4720] batadv_slave_1: entered promiscuous mode [ 57.367799][ T4719] batadv_slave_1: left promiscuous mode [ 57.848690][ T4759] loop1: detected capacity change from 0 to 1024 [ 57.865571][ T4759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.906915][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.000418][ T4772] netlink: 'syz.1.451': attribute type 39 has an invalid length. [ 58.022556][ T4772] hsr_slave_1 (unregistering): left promiscuous mode [ 58.178019][ T4793] loop0: detected capacity change from 0 to 512 [ 58.185930][ T4793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.199178][ T4793] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.208234][ T4793] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 58.250920][ T4793] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 58.273449][ T4793] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 58.281796][ T4793] System zones: [ 58.281793][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 58.285539][ T4793] 0-2, 18-18, 34-35 [ 58.301249][ T4793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.336615][ T4799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.346942][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.378646][ T4803] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 58.387609][ T407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.442096][ T407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.480841][ T407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527825][ T4812] loop3: detected capacity change from 0 to 1024 [ 58.533914][ T407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.602648][ T4812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.636905][ T4812] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.722511][ T407] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.762957][ T407] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 58.775436][ T407] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.775436][ T407] [ 58.799635][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.870271][ T4824] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 58.878324][ T4824] netlink: 76 bytes leftover after parsing attributes in process `syz.0.472'. [ 58.937157][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 58.978914][ T4838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 58.988141][ T4838] netlink: 'syz.0.476': attribute type 7 has an invalid length. [ 58.996521][ T4838] netlink: 'syz.0.476': attribute type 8 has an invalid length. [ 59.004657][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 59.018298][ T4838] erspan0: entered promiscuous mode [ 59.025459][ T4838] gretap0: entered promiscuous mode [ 59.068123][ T4839] loop4: detected capacity change from 0 to 512 [ 59.099142][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 59.134032][ T4839] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.474: corrupted inode contents [ 59.200684][ T4839] EXT4-fs (loop4): Remounting filesystem read-only [ 59.207425][ T4839] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 59.216731][ T4839] EXT4-fs (loop4): 1 orphan inode deleted [ 59.223218][ T4839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.278290][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 59.429164][ T4867] loop0: detected capacity change from 0 to 512 [ 59.438094][ T4867] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.471758][ T4867] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.488: Allocating blocks 41-42 which overlap fs metadata [ 59.488689][ T4867] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.488: Allocating blocks 41-42 which overlap fs metadata [ 59.513424][ T4867] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.488: Failed to acquire dquot type 1 [ 59.514375][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.567110][ T4867] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 59.619054][ T4867] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.488: corrupted inode contents [ 59.658689][ T4867] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.488: mark_inode_dirty error [ 59.670533][ T4867] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.488: corrupted inode contents [ 59.684103][ T4867] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.488: mark_inode_dirty error [ 59.695885][ T4867] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.488: corrupted inode contents [ 59.741200][ T4867] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 59.770183][ T4867] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.488: corrupted inode contents [ 59.806030][ T4867] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.488: mark_inode_dirty error [ 59.825450][ T4867] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 59.836516][ T4867] EXT4-fs (loop0): 1 truncate cleaned up [ 59.842858][ T4867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.942369][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.105444][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 60.119459][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.194786][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.224943][ T36] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 60.685235][ T4915] batadv_slave_1: entered promiscuous mode [ 60.694569][ T4914] batadv_slave_1: left promiscuous mode [ 60.768869][ T4917] Illegal XDP return value 4294967282 on prog (id 86) dev syz_tun, expect packet loss! [ 60.839479][ T4919] loop4: detected capacity change from 0 to 2048 [ 60.874433][ T4919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.918702][ T4933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4933 comm=syz.3.513 [ 60.937818][ T4933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4933 comm=syz.3.513 [ 60.939641][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 60.939683][ T29] audit: type=1400 audit(1770576875.645:1024): avc: denied { read } for pid=4930 comm="syz.1.514" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 60.979985][ T29] audit: type=1400 audit(1770576875.645:1025): avc: denied { open } for pid=4930 comm="syz.1.514" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.020982][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.051601][ T4942] loop4: detected capacity change from 0 to 256 [ 61.076021][ T4942] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.122158][ T4942] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.198208][ T29] audit: type=1400 audit(1770576875.895:1026): avc: denied { watch_reads } for pid=4950 comm="syz.4.522" path="/97" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.229876][ T4953] loop3: detected capacity change from 0 to 256 [ 61.441866][ T4967] netlink: 'syz.3.530': attribute type 21 has an invalid length. [ 61.449811][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 61.459102][ T4967] netlink: 'syz.3.530': attribute type 21 has an invalid length. [ 61.466868][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 61.505372][ T4969] team0: Port device syz_tun added [ 61.558262][ T4969] team0: Port device syz_tun removed [ 61.581026][ T4969] bridge_slave_0: left allmulticast mode [ 61.586755][ T4969] bridge_slave_0: left promiscuous mode [ 61.592698][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.604874][ T4969] bridge_slave_1: left allmulticast mode [ 61.610713][ T4969] bridge_slave_1: left promiscuous mode [ 61.616531][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.626700][ T4969] bond0: (slave bond_slave_0): Releasing backup interface [ 61.645547][ T4969] bond0: (slave bond_slave_1): Releasing backup interface [ 61.659371][ T4969] team0: Port device team_slave_0 removed [ 61.668262][ T4969] team0: Port device team_slave_1 removed [ 61.675719][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.683248][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.699593][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.707057][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.724555][ T4987] netlink: 304 bytes leftover after parsing attributes in process `syz.3.533'. [ 61.726732][ T4969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.891306][ T5003] loop0: detected capacity change from 0 to 512 [ 61.920616][ T5003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.933586][ T5003] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.029881][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.099471][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.442513][ T29] audit: type=1400 audit(1770576877.145:1027): avc: denied { mount } for pid=5014 comm="syz.2.548" name="/" dev="hugetlbfs" ino=8608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 62.466681][ T29] audit: type=1400 audit(1770576877.145:1028): avc: denied { execute } for pid=5014 comm="syz.2.548" path="/file1" dev="hugetlbfs" ino=8609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 62.659456][ T29] audit: type=1400 audit(1770576877.365:1029): avc: denied { create } for pid=5024 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.695692][ T29] audit: type=1400 audit(1770576877.385:1030): avc: denied { bind } for pid=5024 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.723639][ T29] audit: type=1400 audit(1770576877.395:1031): avc: denied { setopt } for pid=5026 comm="syz.2.554" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.744067][ T29] audit: type=1400 audit(1770576877.395:1032): avc: denied { connect } for pid=5026 comm="syz.2.554" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.922005][ T29] audit: type=1400 audit(1770576877.625:1033): avc: denied { allowed } for pid=5044 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 63.149929][ T5070] loop1: detected capacity change from 0 to 1024 [ 63.156790][ T5070] EXT4-fs: Ignoring removed nobh option [ 63.162628][ T5070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.193164][ T5070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.364931][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.466141][ T5084] netlink: 'syz.2.578': attribute type 29 has an invalid length. [ 63.475023][ T5084] netlink: 'syz.2.578': attribute type 29 has an invalid length. [ 63.484823][ T5084] netlink: 500 bytes leftover after parsing attributes in process `syz.2.578'. [ 63.532129][ T407] Bluetooth: hci1: Frame reassembly failed (-84) [ 63.924706][ T5103] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20004 [ 63.931699][ T5102] ================================================================== [ 63.939836][ T5102] BUG: KCSAN: data-race in smc_poll / smc_setsockopt [ 63.946570][ T5102] [ 63.948912][ T5102] write to 0xffff88810a7b011c of 4 bytes by task 5103 on cpu 0: [ 63.956653][ T5102] smc_setsockopt+0x1d6/0x750 [ 63.961376][ T5102] __sys_setsockopt+0x184/0x200 [ 63.966265][ T5102] __x64_sys_setsockopt+0x64/0x80 [ 63.971326][ T5102] x64_sys_call+0x21d5/0x3000 [ 63.976032][ T5102] do_syscall_64+0xc0/0x2a0 [ 63.980572][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.986491][ T5102] [ 63.988830][ T5102] read to 0xffff88810a7b011c of 4 bytes by task 5102 on cpu 1: [ 63.996475][ T5102] smc_poll+0x188/0x530 [ 64.000669][ T5102] sock_poll+0x21c/0x240 [ 64.004945][ T5102] __io_arm_poll_handler+0x1ee/0xb80 [ 64.010266][ T5102] io_arm_apoll+0x2eb/0x410 [ 64.014808][ T5102] io_arm_poll_handler+0x131/0x160 [ 64.019954][ T5102] io_queue_async+0x25d/0x2d0 [ 64.024663][ T5102] io_submit_sqes+0xb8f/0x11b0 [ 64.029456][ T5102] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 64.035065][ T5102] __x64_sys_io_uring_enter+0x78/0x90 [ 64.040468][ T5102] x64_sys_call+0x27e4/0x3000 [ 64.045350][ T5102] do_syscall_64+0xc0/0x2a0 [ 64.049884][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.055851][ T5102] [ 64.058196][ T5102] value changed: 0x00000000 -> 0x0000006f [ 64.063937][ T5102] [ 64.066285][ T5102] Reported by Kernel Concurrency Sanitizer on: [ 64.072474][ T5102] CPU: 1 UID: 0 PID: 5102 Comm: syz.1.586 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.082228][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 64.092307][ T5102] ================================================================== [ 64.138499][ T3951] Bluetooth: hci0: command 0x1003 tx timeout [ 64.144563][ T4007] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.578507][ T4102] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 65.580368][ T4007] Bluetooth: hci1: command 0x1003 tx timeout