last executing test programs: 1.309818953s ago: executing program 2 (id=1065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) 1.057823844s ago: executing program 2 (id=1075): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRESHEX, @ANYRESDEC=r3, @ANYRES32, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYBLOB="1b6a23ae80f655804a68da7f42a10d850bfbf81d16a607093febe72845d86a04bd1ce2367ae74da1d0bf43c830e8924bb38fe70cc0d6a697a394390be8d9c175898efe5f32bd93bf1384aa8f5bfbf3f00d538fdd74815692cd23c8aa6bf1dcdfa37f7ab06a855ccdbb101ba2a8b640df66cbfd0d5c07d9279849850dced4f5060292ff703a4b1185057b480fa436d7161fe283a85be72eda734e23b95713c8ef62335304bfefbd3b6245d3c2f5778c1b06684c667c68f24874c19cad781a7d885e7c9d9ea18840c80b9936138e6f53886460e68a88293e6ef89ad251819fb41c6d289b3b"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) 1.057460124s ago: executing program 3 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x2, 0x4) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) write(r2, 0x0, 0x0) 1.053606634s ago: executing program 2 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0xffffff81, r0}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 863.807362ms ago: executing program 2 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x4c, r1, 0x7, 0x4000, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000100)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x491, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2042, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x141, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 863.575072ms ago: executing program 3 (id=1082): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 786.606326ms ago: executing program 3 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 775.297686ms ago: executing program 1 (id=1085): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r0}, 0x18) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 762.300326ms ago: executing program 3 (id=1086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 635.016182ms ago: executing program 2 (id=1088): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4040000) 598.972644ms ago: executing program 2 (id=1090): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r4) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 566.842855ms ago: executing program 0 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) 566.343635ms ago: executing program 0 (id=1092): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x9}, 0x8) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 565.601735ms ago: executing program 4 (id=1093): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000600)={[], [{@fowner_eq}, {@uid_lt}]}, 0x1, 0x488, &(0x7f0000000d40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 363.752754ms ago: executing program 4 (id=1094): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x80) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x4008051) 363.218104ms ago: executing program 1 (id=1095): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$notify(r0, 0x402, 0xc0000030) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) fcntl$notify(r3, 0x402, 0x21) getdents64(r0, &(0x7f0000001000)=""/164, 0xa4) 356.582304ms ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 299.860817ms ago: executing program 0 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x5c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7724, 0x16, 0x0, 0x13) 299.534647ms ago: executing program 1 (id=1098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 299.032677ms ago: executing program 4 (id=1099): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100203, 0x20, 0xfffffffb, 0x0, 0x0, 0xec, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) uname(&(0x7f0000000340)=""/4096) 280.765447ms ago: executing program 1 (id=1100): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x99f, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='|', 0x1, 0xc010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 274.723978ms ago: executing program 4 (id=1101): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4040000) 246.544909ms ago: executing program 4 (id=1102): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) 185.623862ms ago: executing program 1 (id=1103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 175.463192ms ago: executing program 0 (id=1104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r3, 0x0, 0x80000001}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 152.608153ms ago: executing program 1 (id=1105): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x1) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) fcntl$getown(r0, 0x9) sendfile(r1, r0, 0x0, 0x7ffff000) 113.371225ms ago: executing program 3 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 111.528435ms ago: executing program 0 (id=1116): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 880.75µs ago: executing program 3 (id=1107): unshare(0x22020600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=1118): syz_open_procfs$pagemap(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x10}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) kernel console output (not intermixed with test programs): [ 23.381845][ T29] audit: type=1400 audit(1765402828.530:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.403860][ T29] audit: type=1400 audit(1765402828.530:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.426463][ T29] audit: type=1400 audit(1765402828.530:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.449377][ T29] audit: type=1400 audit(1765402828.530:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.472372][ T29] audit: type=1400 audit(1765402828.530:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. [ 28.440505][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.440523][ T29] audit: type=1400 audit(1765402833.580:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.469620][ T29] audit: type=1400 audit(1765402833.610:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.470747][ T3298] cgroup: Unknown subsys name 'net' [ 28.497597][ T29] audit: type=1400 audit(1765402833.640:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.632428][ T3298] cgroup: Unknown subsys name 'cpuset' [ 28.638703][ T3298] cgroup: Unknown subsys name 'rlimit' [ 28.830571][ T29] audit: type=1400 audit(1765402833.970:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.857144][ T29] audit: type=1400 audit(1765402833.980:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.877933][ T29] audit: type=1400 audit(1765402833.980:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.898561][ T29] audit: type=1400 audit(1765402833.980:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.918947][ T29] audit: type=1400 audit(1765402833.990:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.943789][ T29] audit: type=1400 audit(1765402833.990:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.953174][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.967048][ T29] audit: type=1400 audit(1765402834.000:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.029508][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.949127][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.989325][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.016375][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 31.067360][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.074533][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.081847][ T3316] bridge_slave_0: entered allmulticast mode [ 31.088213][ T3316] bridge_slave_0: entered promiscuous mode [ 31.112085][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.119249][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.126472][ T3316] bridge_slave_1: entered allmulticast mode [ 31.133067][ T3316] bridge_slave_1: entered promiscuous mode [ 31.165535][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.182301][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 31.197560][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.219178][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.226285][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.233556][ T3311] bridge_slave_0: entered allmulticast mode [ 31.239931][ T3311] bridge_slave_0: entered promiscuous mode [ 31.251475][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.269352][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.276468][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.283727][ T3310] bridge_slave_0: entered allmulticast mode [ 31.290265][ T3310] bridge_slave_0: entered promiscuous mode [ 31.296858][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.304005][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.311217][ T3311] bridge_slave_1: entered allmulticast mode [ 31.317769][ T3311] bridge_slave_1: entered promiscuous mode [ 31.340017][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.347252][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.354539][ T3310] bridge_slave_1: entered allmulticast mode [ 31.360920][ T3310] bridge_slave_1: entered promiscuous mode [ 31.373151][ T3316] team0: Port device team_slave_0 added [ 31.395498][ T3316] team0: Port device team_slave_1 added [ 31.414444][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.437440][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.447696][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.470578][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.485549][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.492525][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.518767][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.532205][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.539341][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.546672][ T3319] bridge_slave_0: entered allmulticast mode [ 31.553071][ T3319] bridge_slave_0: entered promiscuous mode [ 31.570326][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.577455][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.603397][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.619583][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.626718][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.633943][ T3319] bridge_slave_1: entered allmulticast mode [ 31.640296][ T3319] bridge_slave_1: entered promiscuous mode [ 31.652931][ T3311] team0: Port device team_slave_0 added [ 31.671210][ T3310] team0: Port device team_slave_0 added [ 31.677841][ T3311] team0: Port device team_slave_1 added [ 31.684408][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.691471][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.698730][ T3315] bridge_slave_0: entered allmulticast mode [ 31.705153][ T3315] bridge_slave_0: entered promiscuous mode [ 31.717689][ T3310] team0: Port device team_slave_1 added [ 31.734058][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.741139][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.748474][ T3315] bridge_slave_1: entered allmulticast mode [ 31.755064][ T3315] bridge_slave_1: entered promiscuous mode [ 31.762844][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.782106][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.789064][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.814994][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.831935][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.851435][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.858459][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.884787][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.906254][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.913255][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.939455][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.952360][ T3316] hsr_slave_0: entered promiscuous mode [ 31.958414][ T3316] hsr_slave_1: entered promiscuous mode [ 31.968130][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.982746][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.989702][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.015714][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.033917][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.043915][ T3319] team0: Port device team_slave_0 added [ 32.069130][ T3319] team0: Port device team_slave_1 added [ 32.109777][ T3315] team0: Port device team_slave_0 added [ 32.122880][ T3311] hsr_slave_0: entered promiscuous mode [ 32.129041][ T3311] hsr_slave_1: entered promiscuous mode [ 32.135158][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.140893][ T3311] Cannot create hsr debugfs directory [ 32.148768][ T3310] hsr_slave_0: entered promiscuous mode [ 32.154950][ T3310] hsr_slave_1: entered promiscuous mode [ 32.160891][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 32.166656][ T3310] Cannot create hsr debugfs directory [ 32.175678][ T3315] team0: Port device team_slave_1 added [ 32.181575][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.188574][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.214653][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.226065][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.233062][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.258985][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.305894][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.312979][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.339100][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.363291][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.370338][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.396487][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.421953][ T3319] hsr_slave_0: entered promiscuous mode [ 32.428022][ T3319] hsr_slave_1: entered promiscuous mode [ 32.433959][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 32.439689][ T3319] Cannot create hsr debugfs directory [ 32.516442][ T3315] hsr_slave_0: entered promiscuous mode [ 32.522566][ T3315] hsr_slave_1: entered promiscuous mode [ 32.528429][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.534206][ T3315] Cannot create hsr debugfs directory [ 32.632238][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.646061][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.659945][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.676732][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.708262][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.718136][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.727956][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.742850][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.768719][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.777772][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.791036][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.802221][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.839989][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.850131][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.859589][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.876334][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.885277][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.896511][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.906516][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.915367][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.948464][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.975943][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.992985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.000060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.009124][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.016283][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.070639][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.085143][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.105248][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.128930][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.140271][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.153337][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.163846][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.176093][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.185459][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.192553][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.202406][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.209481][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.222194][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.229268][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.242403][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.249486][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.258190][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.265396][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.274552][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.281692][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.294272][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.301391][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.319093][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.326198][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.341793][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.379550][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.390005][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.432676][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.534614][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.543636][ T3316] veth0_vlan: entered promiscuous mode [ 33.560997][ T3316] veth1_vlan: entered promiscuous mode [ 33.584940][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.607513][ T3316] veth0_macvtap: entered promiscuous mode [ 33.625442][ T3316] veth1_macvtap: entered promiscuous mode [ 33.633220][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.652697][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.664614][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.682374][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.701664][ T875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.718477][ T875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.755887][ T875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.779640][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 33.779657][ T29] audit: type=1400 audit(1765402838.920:90): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.dvoQl3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.791789][ T875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849297][ T3310] veth0_vlan: entered promiscuous mode [ 33.851983][ T29] audit: type=1400 audit(1765402838.960:91): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.867459][ T3310] veth1_vlan: entered promiscuous mode [ 33.876771][ T29] audit: type=1400 audit(1765402838.960:92): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.dvoQl3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.907600][ T29] audit: type=1400 audit(1765402838.960:93): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.922908][ T3319] veth0_vlan: entered promiscuous mode [ 33.929491][ T29] audit: type=1400 audit(1765402838.960:94): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.dvoQl3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.961546][ T29] audit: type=1400 audit(1765402838.960:95): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.dvoQl3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.980299][ T3310] veth0_macvtap: entered promiscuous mode [ 33.989008][ T29] audit: type=1400 audit(1765402838.960:96): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.003893][ T3319] veth1_vlan: entered promiscuous mode [ 34.014306][ T29] audit: type=1400 audit(1765402838.960:97): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.022182][ T3310] veth1_macvtap: entered promiscuous mode [ 34.042632][ T29] audit: type=1400 audit(1765402838.960:98): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.074776][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.105939][ T3319] veth0_macvtap: entered promiscuous mode [ 34.114067][ T3319] veth1_macvtap: entered promiscuous mode [ 34.134474][ T29] audit: type=1400 audit(1765402839.280:99): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.174838][ T3315] veth0_vlan: entered promiscuous mode [ 34.186082][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.203944][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.215969][ T3315] veth1_vlan: entered promiscuous mode [ 34.236938][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.246196][ T3315] veth0_macvtap: entered promiscuous mode [ 34.262506][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.270000][ T3315] veth1_macvtap: entered promiscuous mode [ 34.282941][ T878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.300715][ T3311] veth0_vlan: entered promiscuous mode [ 34.311454][ T878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.328480][ T878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.342589][ T878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.351359][ T878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.367038][ T878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376808][ T3311] veth1_vlan: entered promiscuous mode [ 34.388068][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.398597][ T878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.409255][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.434607][ T878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.444695][ T3311] veth0_macvtap: entered promiscuous mode [ 34.468785][ T878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.482136][ T3311] veth1_macvtap: entered promiscuous mode [ 34.508769][ T878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.527663][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.543320][ T878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.570682][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.591993][ C1] hrtimer: interrupt took 29645 ns [ 34.612125][ T878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.648118][ T878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.686823][ T878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.706960][ T878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.751402][ T878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.805989][ T3500] loop2: detected capacity change from 0 to 512 [ 34.933744][ T3500] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.10: error while reading EA inode 32 err=-116 [ 34.974771][ T3500] EXT4-fs (loop2): Remounting filesystem read-only [ 34.983084][ T3500] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.997410][ T3500] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 35.046922][ T3500] EXT4-fs (loop2): 1 orphan inode deleted [ 35.075996][ T3500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.161658][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.245554][ T3536] veth1_to_bond: entered allmulticast mode [ 35.265483][ T3536] veth1_to_bond: left allmulticast mode [ 35.441680][ T3610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 35.500740][ T3613] netlink: 96 bytes leftover after parsing attributes in process `syz.0.29'. [ 35.557907][ T3610] syz.4.26 (3610) used greatest stack depth: 10192 bytes left [ 35.602080][ T3618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 35.624711][ T3618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 35.657250][ T3618] Zero length message leads to an empty skb [ 35.824751][ T3632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 36.019109][ T3644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.43'. [ 36.028023][ T3644] netlink: 'syz.4.43': attribute type 7 has an invalid length. [ 36.035636][ T3644] netlink: 'syz.4.43': attribute type 8 has an invalid length. [ 36.043276][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 36.593956][ T3698] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 36.750458][ T3710] netlink: 20 bytes leftover after parsing attributes in process `syz.4.71'. [ 36.800929][ T3712] netlink: 'syz.3.72': attribute type 30 has an invalid length. [ 37.115974][ T3733] loop0: detected capacity change from 0 to 128 [ 37.570348][ T3752] loop0: detected capacity change from 0 to 512 [ 37.673124][ T3752] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.686562][ T3752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.798231][ T3752] EXT4-fs (loop0): 1 truncate cleaned up [ 37.856270][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.055860][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 38.064935][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 38.180143][ T3776] loop2: detected capacity change from 0 to 1024 [ 38.211526][ T3776] EXT4-fs: inline encryption not supported [ 38.217564][ T3776] EXT4-fs: Ignoring removed orlov option [ 38.250079][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.393034][ T3776] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 38.509958][ T3782] ip6t_srh: unknown srh match flags 4000 [ 38.539825][ T3776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 38.548445][ T3776] System zones: 0-1, 3-12 [ 38.556238][ T3776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.649358][ T3786] syz.0.101 uses obsolete (PF_INET,SOCK_PACKET) [ 38.656735][ T3786] capability: warning: `syz.0.101' uses 32-bit capabilities (legacy support in use) [ 38.877639][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 38.877658][ T29] audit: type=1400 audit(1765402844.020:277): avc: denied { connect } for pid=3793 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.947982][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.144327][ T3805] loop1: detected capacity change from 0 to 512 [ 39.170968][ T3805] EXT4-fs: Ignoring removed i_version option [ 39.177203][ T3805] EXT4-fs: Ignoring removed bh option [ 39.294106][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.332392][ T3805] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.390117][ T3815] loop4: detected capacity change from 0 to 128 [ 39.402091][ T29] audit: type=1326 audit(1765402844.550:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.455169][ T29] audit: type=1326 audit(1765402844.600:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.478519][ T29] audit: type=1326 audit(1765402844.600:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.502269][ T29] audit: type=1326 audit(1765402844.600:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ec5af1667 code=0x7ffc0000 [ 39.525671][ T29] audit: type=1326 audit(1765402844.600:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.549021][ T29] audit: type=1326 audit(1765402844.600:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.572723][ T29] audit: type=1326 audit(1765402844.600:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.596121][ T29] audit: type=1326 audit(1765402844.600:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.619406][ T29] audit: type=1326 audit(1765402844.600:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 39.670583][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.839486][ T3833] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 40.574163][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'. [ 40.605445][ T3869] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 40.677072][ T3874] netlink: 'syz.4.137': attribute type 10 has an invalid length. [ 40.685042][ T3874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.137'. [ 40.737564][ T3874] ipvlan2: entered promiscuous mode [ 40.808784][ T3874] bridge0: port 3(ipvlan2) entered blocking state [ 40.815381][ T3874] bridge0: port 3(ipvlan2) entered disabled state [ 40.891817][ T3874] ipvlan2: entered allmulticast mode [ 40.897232][ T3874] bridge0: entered allmulticast mode [ 40.903209][ T3874] ipvlan2: left allmulticast mode [ 40.908307][ T3874] bridge0: left allmulticast mode [ 40.948676][ T3884] netlink: 204 bytes leftover after parsing attributes in process `syz.0.141'. [ 41.165203][ T3901] tmpfs: Bad value for 'mpol' [ 41.512878][ T3915] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 41.578335][ T3920] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 41.586157][ T3920] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 41.593882][ T3920] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.157'. [ 41.631099][ T3920] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 41.638971][ T3920] netlink: 'syz.1.157': attribute type 4 has an invalid length. [ 41.646716][ T3920] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.157'. [ 41.811091][ T3930] loop1: detected capacity change from 0 to 8192 [ 41.832724][ T3930] loop1: p1 p2 p3 p4 [ 41.843407][ T3930] loop1: p3 start 331777 is beyond EOD, truncated [ 41.849946][ T3930] loop1: p4 size 262144 extends beyond EOD, truncated [ 41.857511][ T3933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3933 comm=syz.0.162 [ 41.874937][ T3933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.162'. [ 41.980374][ T3938] process 'syz.2.164' launched './file0' with NULL argv: empty string added [ 42.122729][ T3465] kernel write not supported for file bpf-prog (pid: 3465 comm: kworker/1:6) [ 42.152869][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 42.212831][ T3960] bridge: RTM_NEWNEIGH with invalid ether address [ 42.503351][ T3977] loop3: detected capacity change from 0 to 2048 [ 42.535166][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.594184][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.704989][ T3988] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 42.732239][ T3990] netlink: 96 bytes leftover after parsing attributes in process `syz.0.186'. [ 42.789071][ T3994] veth0_to_batadv: entered promiscuous mode [ 42.801899][ T3994] macvtap1: entered allmulticast mode [ 42.807335][ T3994] veth0_to_batadv: entered allmulticast mode [ 42.827446][ T3994] veth0_to_batadv: left allmulticast mode [ 42.833320][ T3994] veth0_to_batadv: left promiscuous mode [ 43.055093][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 43.064115][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 43.319105][ T4047] tipc: Started in network mode [ 43.324069][ T4047] tipc: Node identity ac14140f, cluster identity 4711 [ 43.331321][ T4047] tipc: New replicast peer: 255.255.255.255 [ 43.337802][ T4047] tipc: Enabled bearer , priority 10 [ 43.357660][ T4050] ip6gre1: entered allmulticast mode [ 43.990850][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 43.990919][ T29] audit: type=1400 audit(1765402849.130:436): avc: denied { load_policy } for pid=4074 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.017723][ T4078] SELinux: failed to load policy [ 44.076678][ T29] audit: type=1400 audit(1765402849.200:437): avc: denied { setopt } for pid=4079 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.147509][ T29] audit: type=1400 audit(1765402849.290:438): avc: denied { create } for pid=4083 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.197382][ T29] audit: type=1400 audit(1765402849.290:439): avc: denied { ioctl } for pid=4083 comm="syz.0.227" path="socket:[6904]" dev="sockfs" ino=6904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.246737][ T4089] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 44.270272][ T29] audit: type=1400 audit(1765402849.410:440): avc: denied { ioctl } for pid=4086 comm="syz.4.228" path="socket:[5764]" dev="sockfs" ino=5764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.319908][ T4089] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.402148][ T4092] bond1 (unregistering): Released all slaves [ 44.464127][ T29] audit: type=1400 audit(1765402849.610:441): avc: denied { module_request } for pid=4098 comm="+}[@" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.485751][ T3791] tipc: Node number set to 2886997007 [ 44.713717][ T29] audit: type=1400 audit(1765402849.860:442): avc: denied { bind } for pid=4112 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.758108][ T4113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.760796][ T29] audit: type=1400 audit(1765402849.890:443): avc: denied { setopt } for pid=4112 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.855891][ T4113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.871720][ T29] audit: type=1326 audit(1765402849.940:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b06f749 code=0x7ffc0000 [ 44.895106][ T29] audit: type=1326 audit(1765402849.940:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b06f749 code=0x7ffc0000 [ 45.005104][ T4113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.085376][ T4113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.204238][ T3462] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.229033][ T3462] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.267158][ T3462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.303305][ T3462] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.597599][ T4141] loop0: detected capacity change from 0 to 1024 [ 45.612506][ T4141] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.710715][ T4141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.925492][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.945717][ T4152] loop3: detected capacity change from 0 to 1024 [ 46.003759][ T4152] ======================================================= [ 46.003759][ T4152] WARNING: The mand mount option has been deprecated and [ 46.003759][ T4152] and is ignored by this kernel. Remove the mand [ 46.003759][ T4152] option from the mount to silence this warning. [ 46.003759][ T4152] ======================================================= [ 46.051745][ T4152] EXT4-fs: inline encryption not supported [ 46.091969][ T4152] /dev/loop3: Can't open blockdev [ 46.383235][ T4165] ref_ctr_offset mismatch. inode: 0x131 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000180 [ 46.422687][ T4166] bridge: RTM_NEWNEIGH with invalid ether address [ 46.514646][ T4173] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.633988][ T4180] __nla_validate_parse: 2 callbacks suppressed [ 46.634005][ T4180] netlink: 14 bytes leftover after parsing attributes in process `syz.2.264'. [ 46.674049][ T4180] hsr_slave_0: left promiscuous mode [ 46.680163][ T4180] hsr_slave_1: left promiscuous mode [ 46.925363][ T4195] loop1: detected capacity change from 0 to 1024 [ 46.946051][ T4195] EXT4-fs: Ignoring removed nobh option [ 47.005408][ T4195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.019869][ T4205] loop2: detected capacity change from 0 to 1024 [ 47.027608][ T4199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.038915][ T4205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.086862][ T4205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.128822][ T4199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.219008][ T4199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.306073][ T4199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.395559][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.417075][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.439641][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.458160][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.529708][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.863879][ T4237] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.271: Allocating blocks 497-513 which overlap fs metadata [ 47.877886][ T4241] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 47.923228][ T4241] bond1: entered promiscuous mode [ 47.935059][ T4241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.950063][ T4240] infiniband syz!: set active [ 47.954909][ T4240] infiniband syz!: added team_slave_0 [ 47.960738][ T4237] EXT4-fs (loop1): pa ffff88810760e1c0: logic 256, phys. 385, len 8 [ 47.968973][ T4237] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 47.988332][ T4240] RDS/IB: syz!: added [ 48.000145][ T4240] smc: adding ib device syz! with port count 1 [ 48.006706][ T4240] smc: ib device syz! port 1 has no pnetid [ 48.025433][ T4247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.096168][ T4247] bond1: (slave bond2): making interface the new active one [ 48.103556][ T4247] bond2: entered promiscuous mode [ 48.109598][ T4247] bond1: (slave bond2): Enslaving as an active interface with an up link [ 48.118246][ T4246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 48.127272][ T4246] netlink: 196 bytes leftover after parsing attributes in process `syz.2.287'. [ 48.136519][ T4246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 48.145536][ T4246] netlink: 196 bytes leftover after parsing attributes in process `syz.2.287'. [ 48.327412][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.549146][ T4262] bridge0: port 3(gretap0) entered blocking state [ 48.555703][ T4262] bridge0: port 3(gretap0) entered disabled state [ 48.562327][ T4262] gretap0: entered allmulticast mode [ 48.568180][ T4262] gretap0: entered promiscuous mode [ 48.573919][ T4262] bridge0: port 3(gretap0) entered blocking state [ 48.580440][ T4262] bridge0: port 3(gretap0) entered forwarding state [ 48.590564][ T4262] gretap0: left allmulticast mode [ 48.595722][ T4262] gretap0: left promiscuous mode [ 48.600948][ T4262] bridge0: port 3(gretap0) entered disabled state [ 48.834043][ T4255] Set syz1 is full, maxelem 65536 reached [ 48.859723][ T4266] loop4: detected capacity change from 0 to 2048 [ 48.967685][ T4266] loop4: p2 p3 p7 [ 49.312845][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 49.312942][ T29] audit: type=1326 audit(1765402854.460:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.365384][ T29] audit: type=1326 audit(1765402854.460:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.388747][ T29] audit: type=1326 audit(1765402854.490:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.412138][ T29] audit: type=1326 audit(1765402854.490:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.435567][ T29] audit: type=1326 audit(1765402854.490:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.458847][ T29] audit: type=1326 audit(1765402854.490:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.482179][ T29] audit: type=1326 audit(1765402854.490:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.505426][ T29] audit: type=1326 audit(1765402854.490:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.528720][ T29] audit: type=1326 audit(1765402854.490:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.552020][ T29] audit: type=1326 audit(1765402854.490:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4294 comm="syz.1.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 49.689795][ T4305] loop2: detected capacity change from 0 to 164 [ 49.720799][ T4305] isofs_fill_super: root inode is not a directory. Corrupted media? [ 49.799576][ T4313] loop2: detected capacity change from 0 to 128 [ 49.906763][ T4313] syz.2.316: attempt to access beyond end of device [ 49.906763][ T4313] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 50.301084][ T4331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.323'. [ 50.320473][ T4329] loop1: detected capacity change from 0 to 1024 [ 50.338342][ T4329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.383288][ T4329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.446045][ T4341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 50.628706][ T4351] loop2: detected capacity change from 0 to 8192 [ 50.702281][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.142589][ T4382] xt_hashlimit: max too large, truncated to 1048576 [ 51.584185][ T4409] SELinux: ebitmap: truncated map [ 51.589980][ T4409] SELinux: failed to load policy [ 51.673758][ T4414] netlink: 64 bytes leftover after parsing attributes in process `syz.1.353'. [ 52.104557][ T4432] loop2: detected capacity change from 0 to 1024 [ 52.119535][ T4432] EXT4-fs: Ignoring removed nobh option [ 52.245530][ T4432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.268017][ T4436] loop3: detected capacity change from 0 to 8192 [ 52.347280][ T4428] Set syz1 is full, maxelem 65536 reached [ 52.673229][ T4453] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.361: Allocating blocks 497-513 which overlap fs metadata [ 52.696159][ T4453] EXT4-fs (loop2): pa ffff88810760e1c0: logic 256, phys. 385, len 8 [ 52.704290][ T4453] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 52.792991][ T4479] netlink: 'syz.0.380': attribute type 21 has an invalid length. [ 52.811617][ T4479] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 52.819317][ T4479] netlink: 144 bytes leftover after parsing attributes in process `syz.0.380'. [ 52.843579][ T4483] bridge0: port 3(gretap0) entered blocking state [ 52.850078][ T4483] bridge0: port 3(gretap0) entered disabled state [ 52.857068][ T4483] gretap0: entered allmulticast mode [ 52.863093][ T4483] gretap0: entered promiscuous mode [ 52.868514][ T4483] bridge0: port 3(gretap0) entered blocking state [ 52.874997][ T4483] bridge0: port 3(gretap0) entered forwarding state [ 52.884808][ T4483] gretap0: left allmulticast mode [ 52.889886][ T4483] gretap0: left promiscuous mode [ 52.895092][ T4483] bridge0: port 3(gretap0) entered disabled state [ 52.956235][ T4494] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.978194][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.072830][ T4512] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.098418][ T4515] bridge0: port 3(gretap0) entered blocking state [ 53.105249][ T4515] bridge0: port 3(gretap0) entered disabled state [ 53.133513][ T4515] gretap0: entered allmulticast mode [ 53.151779][ T4515] gretap0: entered promiscuous mode [ 53.159912][ T4515] bridge0: port 3(gretap0) entered blocking state [ 53.166434][ T4515] bridge0: port 3(gretap0) entered forwarding state [ 53.187166][ T4512] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.203443][ T4521] gretap0: left allmulticast mode [ 53.208521][ T4521] gretap0: left promiscuous mode [ 53.213806][ T4521] bridge0: port 3(gretap0) entered disabled state [ 53.243396][ T4512] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.267606][ T4531] loop4: detected capacity change from 0 to 1024 [ 53.279101][ T4531] EXT4-fs: Ignoring removed nobh option [ 53.294514][ T4531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.308903][ T4512] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.376008][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.400326][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.426186][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.438928][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.556815][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 53.565922][ T4547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 53.630736][ T4555] loop1: detected capacity change from 0 to 164 [ 53.654363][ T4555] isofs_fill_super: root inode is not a directory. Corrupted media? [ 53.658704][ T4559] loop3: detected capacity change from 0 to 1024 [ 53.669308][ T4557] bridge0: port 3(gretap0) entered blocking state [ 53.675923][ T4557] bridge0: port 3(gretap0) entered disabled state [ 53.683065][ T4559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.696393][ T4559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.719193][ T4557] gretap0: entered allmulticast mode [ 53.727526][ T4548] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.400: Allocating blocks 497-513 which overlap fs metadata [ 53.735155][ T4557] gretap0: entered promiscuous mode [ 53.742770][ T4548] EXT4-fs (loop4): pa ffff88810763e070: logic 256, phys. 385, len 8 [ 53.754680][ T4548] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 53.764987][ T4557] bridge0: port 3(gretap0) entered blocking state [ 53.771489][ T4557] bridge0: port 3(gretap0) entered forwarding state [ 53.791783][ T4563] gretap0: left allmulticast mode [ 53.796858][ T4563] gretap0: left promiscuous mode [ 53.802069][ T4563] bridge0: port 3(gretap0) entered disabled state [ 53.954411][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.994174][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.330091][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 54.330110][ T29] audit: type=1326 audit(1765402859.470:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.365523][ T29] audit: type=1326 audit(1765402859.510:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.389172][ T29] audit: type=1326 audit(1765402859.530:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.413760][ T29] audit: type=1326 audit(1765402859.560:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.437319][ T29] audit: type=1326 audit(1765402859.580:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.488211][ T29] audit: type=1326 audit(1765402859.600:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.488250][ T29] audit: type=1326 audit(1765402859.610:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.488317][ T29] audit: type=1326 audit(1765402859.620:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.490884][ T29] audit: type=1326 audit(1765402859.630:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.494449][ T4608] loop0: detected capacity change from 0 to 1024 [ 54.494889][ T4608] EXT4-fs: Ignoring removed nobh option [ 54.518113][ T29] audit: type=1326 audit(1765402859.670:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 54.611936][ T4608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.664670][ T4618] netlink: 'syz.4.434': attribute type 12 has an invalid length. [ 54.765974][ T4627] mmap: syz.3.448 (4627) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.974812][ T4635] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.033091][ T4637] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.049739][ T4639] netlink: 204 bytes leftover after parsing attributes in process `syz.4.442'. [ 55.096550][ T4642] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.429: Allocating blocks 497-513 which overlap fs metadata [ 55.111946][ T4642] EXT4-fs (loop0): pa ffff88810760e310: logic 256, phys. 385, len 8 [ 55.120007][ T4642] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 55.410199][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.452447][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'. [ 55.602866][ T4683] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.637524][ T4686] loop0: detected capacity change from 0 to 1024 [ 55.648315][ T4686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.659599][ T4686] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.670583][ T4686] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.685971][ T4683] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.697578][ T4686] JBD2: no valid journal superblock found [ 55.703455][ T4686] EXT4-fs (loop0): Could not load journal inode [ 55.747155][ T4683] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.797880][ T4683] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.873530][ T3462] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.901767][ T3462] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.910094][ T3462] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.918982][ T3462] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.198340][ T4729] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.291070][ T4733] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.350665][ T4733] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.415558][ T4733] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.464940][ T4733] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.583240][ T3587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.599785][ T3587] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.626143][ T3587] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.636596][ T3587] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.765797][ T4771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.823609][ T4771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.883655][ T4771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.943412][ T4771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.999591][ T3544] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.011870][ T3544] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.023560][ T3544] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.035504][ T3544] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.436896][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 57.601503][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 57.775254][ T4803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 57.840539][ T4809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 57.868223][ T4806] loop3: detected capacity change from 0 to 764 [ 57.883233][ T4806] rock: directory entry would overflow storage [ 57.889465][ T4806] rock: sig=0x4f50, size=4, remaining=3 [ 57.895187][ T4806] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 58.318807][ T4837] loop1: detected capacity change from 0 to 1024 [ 58.347702][ T4837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.369965][ T4841] syz.3.521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.394234][ T4837] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.520'. [ 58.404327][ T4837] netlink: zone id is out of range [ 58.409749][ T4837] netlink: zone id is out of range [ 58.416857][ T4837] netlink: zone id is out of range [ 58.422319][ T4837] netlink: del zone limit has 8 unknown bytes [ 58.481508][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.507496][ T4849] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.555715][ T4849] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.613857][ T4849] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.674076][ T4849] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.937837][ T4878] bridge0: port 3(gretap0) entered blocking state [ 58.944458][ T4878] bridge0: port 3(gretap0) entered disabled state [ 58.951098][ T4878] gretap0: entered allmulticast mode [ 58.957274][ T4878] gretap0: entered promiscuous mode [ 58.963009][ T4878] bridge0: port 3(gretap0) entered blocking state [ 58.969448][ T4878] bridge0: port 3(gretap0) entered forwarding state [ 58.978855][ T4878] gretap0: left allmulticast mode [ 58.984153][ T4878] gretap0: left promiscuous mode [ 58.989288][ T4878] bridge0: port 3(gretap0) entered disabled state [ 59.393194][ T4904] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.411569][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 59.417870][ T29] audit: type=1326 audit(1765402864.550:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 59.442154][ T29] audit: type=1326 audit(1765402864.550:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 59.465149][ T29] audit: type=1326 audit(1765402864.560:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 59.488313][ T29] audit: type=1326 audit(1765402864.560:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 59.511576][ T29] audit: type=1326 audit(1765402864.560:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 59.534749][ T29] audit: type=1326 audit(1765402864.560:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4905 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 59.557884][ T29] audit: type=1400 audit(1765402864.680:1106): avc: denied { bind } for pid=4907 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.557935][ T4909] veth0_to_team: entered promiscuous mode [ 59.587112][ T29] audit: type=1400 audit(1765402864.730:1107): avc: denied { listen } for pid=4907 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.612553][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 59.631722][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.554'. [ 59.651550][ T3544] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.663945][ T3544] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.675516][ T3544] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.697333][ T3544] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.706021][ T3420] IPVS: starting estimator thread 0... [ 59.724263][ T29] audit: type=1400 audit(1765402864.870:1108): avc: denied { write } for pid=4918 comm="syz.4.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.753217][ T4922] loop0: detected capacity change from 0 to 1024 [ 59.774932][ T4922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.797756][ T4922] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.557'. [ 59.801761][ T4917] IPVS: using max 1728 ests per chain, 86400 per kthread [ 59.822711][ T4922] netlink: zone id is out of range [ 59.827876][ T4922] netlink: zone id is out of range [ 59.841718][ T4922] netlink: zone id is out of range [ 59.848259][ T4922] netlink: del zone limit has 8 unknown bytes [ 59.922082][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.949895][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 60.035015][ T29] audit: type=1400 audit(1765402865.180:1109): avc: denied { getopt } for pid=4946 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.148938][ T4962] loop3: detected capacity change from 0 to 1024 [ 60.163454][ T4962] EXT4-fs: Ignoring removed nobh option [ 60.197722][ T4962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.481700][ T4979] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.572: Allocating blocks 497-513 which overlap fs metadata [ 60.511438][ T4979] EXT4-fs (loop3): pa ffff88810763e0e0: logic 256, phys. 385, len 8 [ 60.519564][ T4979] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 60.746729][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.756626][ T4989] netlink: 228 bytes leftover after parsing attributes in process `syz.2.585'. [ 60.765803][ T4989] unsupported nla_type 55437 [ 60.792086][ T4991] loop3: detected capacity change from 0 to 1024 [ 60.798972][ T4991] EXT4-fs: Ignoring removed nobh option [ 60.804709][ T4991] EXT4-fs: Ignoring removed bh option [ 60.811435][ T4993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.823633][ T4991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.839132][ T4991] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.584: Allocating blocks 385-513 which overlap fs metadata [ 60.855126][ T4991] EXT4-fs (loop3): pa ffff88810760e310: logic 16, phys. 129, len 24 [ 60.863359][ T4991] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 60.875092][ T4993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.899254][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.934263][ T4993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.983832][ T4993] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.052034][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.079272][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.095904][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.105652][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.297468][ T5025] IPVS: Error connecting to the multicast addr [ 61.325307][ T5026] loop0: detected capacity change from 0 to 1024 [ 61.342879][ T5026] EXT4-fs: Ignoring removed nobh option [ 61.354560][ T5031] netlink: 'syz.2.596': attribute type 1 has an invalid length. [ 61.369875][ T5026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.440708][ T5031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.523034][ T5040] bond1 (unregistering): Released all slaves [ 61.551038][ T5046] loop3: detected capacity change from 0 to 1024 [ 61.566421][ T5046] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.600952][ T5046] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.599: Invalid block bitmap block 0 in block_group 0 [ 61.632201][ T5046] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.599: Failed to acquire dquot type 0 [ 61.666823][ T5046] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.599: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.724951][ T5046] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.599: Invalid inode bitmap blk 0 in block_group 0 [ 61.738979][ T5046] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 61.747738][ T3544] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 61.747757][ T5046] EXT4-fs (loop3): 1 orphan inode deleted [ 61.748437][ T5046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.786730][ T5046] syz.3.599 (5046) used greatest stack depth: 9216 bytes left [ 61.818044][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.023346][ T5068] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.595: Allocating blocks 497-513 which overlap fs metadata [ 62.102112][ T5068] EXT4-fs (loop0): pa ffff88810763e5b0: logic 256, phys. 385, len 8 [ 62.110320][ T5068] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 62.249507][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.286868][ T5091] loop4: detected capacity change from 0 to 1024 [ 62.324739][ T5091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.342530][ T5097] @0Ù: renamed from bond_slave_1 (while UP) [ 62.354995][ T5091] netlink: zone id is out of range [ 62.360178][ T5091] netlink: zone id is out of range [ 62.412602][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.440230][ T5102] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 62.469920][ T5107] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 62.486244][ T5107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.499989][ T5107] __nla_validate_parse: 6 callbacks suppressed [ 62.500008][ T5107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 62.517975][ T5107] bond3 (unregistering): Released all slaves [ 62.616594][ T5113] tipc: New replicast peer: 255.255.255.255 [ 62.622799][ T5113] tipc: Enabled bearer , priority 10 [ 62.636003][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 62.645170][ T5113] tipc: Disabling bearer [ 62.677280][ T5118] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.724984][ T5118] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.783823][ T5118] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.853407][ T5118] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.923480][ T5128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'. [ 62.958693][ T3544] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.973561][ T3544] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.990307][ T3544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.006303][ T3544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.257116][ T5153] loop0: detected capacity change from 0 to 256 [ 63.268796][ T5153] netlink: 68 bytes leftover after parsing attributes in process `syz.0.641'. [ 63.976015][ T5173] loop4: detected capacity change from 0 to 512 [ 63.983167][ T5173] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.003505][ T5173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.021528][ T5173] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.650: lblock 23 mapped to illegal pblock 18 (length 1) [ 64.046749][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.635900][ T5208] loop1: detected capacity change from 0 to 512 [ 64.648071][ T5208] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.683356][ T5208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.713892][ T5208] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.663: lblock 23 mapped to illegal pblock 18 (length 1) [ 64.750316][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.767763][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 64.767781][ T29] audit: type=1326 audit(1765402869.910:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.0.672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b9b06f749 code=0x0 [ 64.935460][ T29] audit: type=1400 audit(1765402870.080:1725): avc: denied { write } for pid=5220 comm="syz.4.668" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.053072][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 65.072128][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 65.098270][ T29] audit: type=1400 audit(1765402870.240:1726): avc: denied { shutdown } for pid=5238 comm="syz.4.687" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.119245][ T29] audit: type=1400 audit(1765402870.240:1727): avc: denied { read } for pid=5238 comm="syz.4.687" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.219797][ T29] audit: type=1326 audit(1765402870.360:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 65.251072][ T5249] loop4: detected capacity change from 0 to 512 [ 65.258336][ T5249] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.269635][ T29] audit: type=1326 audit(1765402870.360:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 65.293450][ T29] audit: type=1326 audit(1765402870.390:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 65.316823][ T29] audit: type=1326 audit(1765402870.390:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 65.340216][ T29] audit: type=1326 audit(1765402870.390:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 65.363607][ T29] audit: type=1326 audit(1765402870.390:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5247 comm="syz.4.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1256f749 code=0x7ffc0000 [ 65.385628][ T5249] EXT4-fs (loop4): 1 truncate cleaned up [ 65.393791][ T5249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.401878][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 65.416787][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 65.425690][ T5249] netlink: 44 bytes leftover after parsing attributes in process `syz.4.682'. [ 65.455849][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.684'. [ 65.465571][ T5249] bridge2: entered promiscuous mode [ 65.470843][ T5249] bridge2: entered allmulticast mode [ 65.494891][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.701158][ T5283] loop1: detected capacity change from 0 to 164 [ 65.738087][ T5283] ISOFS: unable to read i-node block [ 65.764883][ T5283] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 66.252069][ T5353] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.293871][ T5353] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.343880][ T5353] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.403794][ T5353] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.480107][ T3559] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.494810][ T3559] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510126][ T3559] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.535348][ T3559] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725679][ T5420] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 67.805230][ T5429] __nla_validate_parse: 6 callbacks suppressed [ 67.805249][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 67.865769][ T5429] team0: Port device team_slave_1 removed [ 68.399864][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 68.422658][ T5467] loop4: detected capacity change from 0 to 128 [ 68.438489][ T5465] team1: entered promiscuous mode [ 68.443648][ T5465] team1: entered allmulticast mode [ 68.457009][ T5465] 8021q: adding VLAN 0 to HW filter on device team1 [ 68.493839][ T5471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.112742][ T5513] loop3: detected capacity change from 0 to 512 [ 69.142037][ T5513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.192343][ T5513] EXT4-fs (loop3): 1 truncate cleaned up [ 69.202817][ T5513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.400172][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.838979][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 69.853149][ T5566] team0: Port device team_slave_1 removed [ 69.879864][ T5574] netlink: 'syz.1.791': attribute type 29 has an invalid length. [ 69.889816][ T5574] netlink: 'syz.1.791': attribute type 29 has an invalid length. [ 69.900588][ T5574] netlink: 500 bytes leftover after parsing attributes in process `syz.1.791'. [ 69.991732][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 69.991751][ T29] audit: type=1326 audit(1765402875.140:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.031683][ T29] audit: type=1326 audit(1765402875.140:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.055101][ T29] audit: type=1326 audit(1765402875.140:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.078626][ T29] audit: type=1326 audit(1765402875.140:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.102074][ T29] audit: type=1326 audit(1765402875.140:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.125525][ T29] audit: type=1326 audit(1765402875.140:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.148894][ T29] audit: type=1326 audit(1765402875.140:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.172239][ T29] audit: type=1326 audit(1765402875.140:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.195615][ T29] audit: type=1326 audit(1765402875.140:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.219045][ T29] audit: type=1326 audit(1765402875.140:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5591 comm="syz.1.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 70.518120][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.807'. [ 70.551268][ T5650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.570693][ T5650] macvlan2: entered promiscuous mode [ 70.576158][ T5650] macvlan2: entered allmulticast mode [ 70.582971][ T5650] bond1: (slave macvlan2): Opening slave failed [ 70.887339][ T5712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.819'. [ 70.935403][ T3420] kernel write not supported for file bpf-prog (pid: 3420 comm: kworker/1:5) [ 71.009577][ T5729] serio: Serial port ptm0 [ 71.021675][ T5732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 71.145429][ T5743] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 71.155045][ T5743] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 71.165169][ T5743] netlink: 500 bytes leftover after parsing attributes in process `syz.3.832'. [ 71.364711][ T5770] ip6gre1: entered allmulticast mode [ 71.374208][ T5772] loop4: detected capacity change from 0 to 512 [ 71.393985][ T5772] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.405912][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 71.419160][ T5772] EXT4-fs (loop4): 1 truncate cleaned up [ 71.432922][ T5772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.453827][ T5774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.511172][ T5774] macvlan2: entered promiscuous mode [ 71.516577][ T5774] macvlan2: entered allmulticast mode [ 71.533878][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.542065][ T5774] bond1: (slave macvlan2): Opening slave failed [ 71.790513][ T5804] loop1: detected capacity change from 0 to 4096 [ 71.799673][ T5804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.833952][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.228214][ T5827] ref_ctr_offset mismatch. inode: 0x383 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000380 [ 72.368114][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 72.543504][ T5835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.608870][ T5835] macvlan2: entered promiscuous mode [ 72.614326][ T5835] macvlan2: entered allmulticast mode [ 72.622868][ T5835] bond1: (slave macvlan2): Opening slave failed [ 72.903049][ T5855] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 72.919360][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.926694][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.129193][ T5871] loop2: detected capacity change from 0 to 512 [ 73.145926][ T5871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.163800][ T5871] EXT4-fs (loop2): 1 truncate cleaned up [ 73.170114][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.229167][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.246082][ T5875] ip6gre1: entered allmulticast mode [ 73.442299][ T5883] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 73.461149][ T5883] bond1: entered promiscuous mode [ 73.466783][ T5883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.489839][ T5883] bond1: (slave bridge1): making interface the new active one [ 73.497403][ T5883] bridge1: entered promiscuous mode [ 73.504328][ T5883] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 73.675687][ T5892] __nla_validate_parse: 1 callbacks suppressed [ 73.675781][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.891'. [ 73.750303][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.757653][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.908126][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.949701][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.150387][ T5897] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 74.169266][ T3587] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.189396][ T3587] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.216287][ T3587] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.241923][ T3587] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.578071][ T5908] netlink: 96 bytes leftover after parsing attributes in process `syz.3.899'. [ 74.603985][ T5910] loop1: detected capacity change from 0 to 1024 [ 74.611076][ T5910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.629039][ T5910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 74.637502][ T5910] System zones: 0-1, 3-36 [ 74.644589][ T5910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.782803][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.115112][ T5922] lo speed is unknown, defaulting to 1000 [ 75.122058][ T5922] lo speed is unknown, defaulting to 1000 [ 75.128124][ T5922] lo speed is unknown, defaulting to 1000 [ 75.219759][ T5922] infiniband syz1: set active [ 75.224623][ T5922] infiniband syz1: added lo [ 75.229698][ T3490] lo speed is unknown, defaulting to 1000 [ 75.244205][ T5922] RDS/IB: syz1: added [ 75.248766][ T5922] smc: adding ib device syz1 with port count 1 [ 75.255630][ T5922] smc: ib device syz1 port 1 has no pnetid [ 75.261863][ T3490] lo speed is unknown, defaulting to 1000 [ 75.268287][ T5922] lo speed is unknown, defaulting to 1000 [ 75.423470][ T5922] lo speed is unknown, defaulting to 1000 [ 75.436215][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 75.436234][ T29] audit: type=1400 audit(1765402880.560:2153): avc: denied { relabelfrom } for pid=5932 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 75.462314][ T29] audit: type=1400 audit(1765402880.560:2154): avc: denied { relabelto } for pid=5932 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 75.492749][ T5922] lo speed is unknown, defaulting to 1000 [ 75.539954][ T5922] lo speed is unknown, defaulting to 1000 [ 75.584386][ T5922] lo speed is unknown, defaulting to 1000 [ 75.688738][ T5952] net_ratelimit: 2 callbacks suppressed [ 75.688817][ T5952] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 75.723761][ T5954] netlink: 72 bytes leftover after parsing attributes in process `syz.3.918'. [ 75.979463][ T5966] ip6gre2: entered allmulticast mode [ 76.028744][ T29] audit: type=1326 audit(1765402881.170:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 76.057529][ T5968] loop2: detected capacity change from 0 to 1024 [ 76.068176][ T5968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.082276][ T29] audit: type=1326 audit(1765402881.200:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ec5aef749 code=0x7ffc0000 [ 76.105684][ T29] audit: type=1326 audit(1765402881.200:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ec5aef783 code=0x7ffc0000 [ 76.129006][ T29] audit: type=1326 audit(1765402881.200:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ec5aee1ff code=0x7ffc0000 [ 76.152504][ T29] audit: type=1326 audit(1765402881.200:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6ec5aef7d7 code=0x7ffc0000 [ 76.175867][ T29] audit: type=1326 audit(1765402881.200:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ec5aedf90 code=0x7ffc0000 [ 76.199252][ T29] audit: type=1326 audit(1765402881.200:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ec5aef34b code=0x7ffc0000 [ 76.222597][ T29] audit: type=1326 audit(1765402881.210:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.2.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ec5aee3aa code=0x7ffc0000 [ 76.246065][ T5968] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 76.256295][ T5968] System zones: 0-1, 3-36 [ 76.262013][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.321163][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.384528][ T5983] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 76.445036][ T6000] loop1: detected capacity change from 0 to 512 [ 76.467316][ T6000] ext2: Bad value for 'max_batch_time' [ 76.563520][ T6010] loop0: detected capacity change from 0 to 1024 [ 76.571367][ T6010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.580021][ T6010] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 76.624757][ T6010] System zones: 0-1, 3-36 [ 76.651068][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.777614][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.839119][ T6028] bridge: RTM_NEWNEIGH with invalid ether address [ 76.861050][ T6018] lo speed is unknown, defaulting to 1000 [ 76.915720][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.928419][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.957351][ T6033] loop1: detected capacity change from 0 to 2048 [ 76.995791][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 77.139247][ T6047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.191535][ T6047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.204674][ T6033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.251779][ T6033] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 848 with error 28 [ 77.264272][ T6033] EXT4-fs (loop1): This should not happen!! Data will be lost [ 77.264272][ T6033] [ 77.274100][ T6033] EXT4-fs (loop1): Total free blocks count 0 [ 77.280113][ T6033] EXT4-fs (loop1): Free/Dirty block details [ 77.286118][ T6033] EXT4-fs (loop1): free_blocks=2415919104 [ 77.291922][ T6033] EXT4-fs (loop1): dirty_blocks=864 [ 77.297228][ T6033] EXT4-fs (loop1): Block reservation details [ 77.303315][ T6033] EXT4-fs (loop1): i_reserved_data_blocks=54 [ 77.324529][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.463290][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 20 with max blocks 828 with error 28 [ 77.573164][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 77.583601][ T6067] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 77.588978][ T6066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.610918][ T6066] macvlan2: entered promiscuous mode [ 77.616340][ T6066] macvlan2: entered allmulticast mode [ 77.622999][ T6066] bond3: (slave macvlan2): Opening slave failed [ 77.636224][ T6067] macvlan2: entered promiscuous mode [ 77.641712][ T6067] macvlan2: entered allmulticast mode [ 77.649676][ T6067] bond2: entered promiscuous mode [ 77.655236][ T6067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.663960][ T6067] bond2: left promiscuous mode [ 77.766814][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 77.851500][ T6082] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 77.883637][ T6083] netlink: 72 bytes leftover after parsing attributes in process `syz.2.971'. [ 78.533876][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'. [ 78.693998][ T6106] loop3: detected capacity change from 0 to 1024 [ 78.764496][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.833133][ T6110] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.3.982: path /208/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 79.012376][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.112171][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 79.121060][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 79.129921][ T6112] netlink: 'syz.1.984': attribute type 6 has an invalid length. [ 79.138551][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.984'. [ 79.147622][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 79.156464][ T6112] netlink: 'syz.1.984': attribute type 6 has an invalid length. [ 79.402238][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 79.408445][ T3602] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.558515][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 79.593325][ T6117] loop1: detected capacity change from 0 to 256 [ 79.743273][ T6127] loop4: detected capacity change from 0 to 512 [ 79.832177][ T6127] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.989: couldn't read orphan inode 26 (err -116) [ 79.844954][ T6127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.857790][ T6127] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.564357][ T6075] Set syz1 is full, maxelem 65536 reached [ 80.576557][ T6093] Set syz1 is full, maxelem 6117 reached [ 80.597640][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.634763][ T6142] loop2: detected capacity change from 0 to 1024 [ 80.644626][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 80.654684][ T6146] netlink: 182 bytes leftover after parsing attributes in process `syz.4.992'. [ 80.677274][ T6142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.699375][ T6142] EXT4-fs error (device loop2): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.2.995: path /159/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 80.746265][ T6154] netlink: 'syz.0.1000': attribute type 30 has an invalid length. [ 80.774007][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.859247][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 80.868256][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 80.924717][ T6165] loop1: detected capacity change from 0 to 1024 [ 80.932362][ T6165] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.943363][ T6165] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.976436][ T6165] JBD2: no valid journal superblock found [ 80.982272][ T6165] EXT4-fs (loop1): Could not load journal inode [ 81.003464][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 81.040390][ T6165] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 81.043944][ T6186] loop4: detected capacity change from 0 to 1024 [ 81.124351][ T6186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.155806][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.207926][ T6192] vlan2: entered allmulticast mode [ 81.242676][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 81.242694][ T29] audit: type=1326 audit(1765402886.390:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 81.325754][ T29] audit: type=1326 audit(1765402886.390:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df943f749 code=0x7ffc0000 [ 81.349298][ T29] audit: type=1326 audit(1765402886.390:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df943f749 code=0x7ffc0000 [ 81.352669][ T6213] loop2: detected capacity change from 0 to 1024 [ 81.372957][ T29] audit: type=1326 audit(1765402886.390:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df943f749 code=0x7ffc0000 [ 81.402771][ T29] audit: type=1326 audit(1765402886.390:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df943f749 code=0x7ffc0000 [ 81.426407][ T29] audit: type=1326 audit(1765402886.390:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5df943f749 code=0x7ffc0000 [ 81.449940][ T29] audit: type=1326 audit(1765402886.390:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6203 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df943f749 code=0x7ffc0000 [ 81.473489][ T29] audit: type=1326 audit(1765402886.420:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 81.497149][ T29] audit: type=1326 audit(1765402886.420:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 81.520993][ T29] audit: type=1326 audit(1765402886.420:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f5f749 code=0x7ffc0000 [ 81.567168][ T6213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.651425][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.804609][ T6253] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 81.947246][ T6276] loop1: detected capacity change from 0 to 1024 [ 81.963410][ T6276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.982791][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.990580][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.014590][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.088899][ T6300] batman_adv: batadv0: Adding interface: dummy0 [ 82.095280][ T6300] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.121017][ T6300] batman_adv: batadv0: Interface activated: dummy0 [ 82.142245][ T6300] batadv0: mtu less than device minimum [ 82.148333][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.159323][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.170189][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.181347][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.192491][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.203537][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.214794][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.225930][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.236993][ T6300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 82.286009][ T6313] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 82.367321][ T6322] loop3: detected capacity change from 0 to 1024 [ 82.388834][ T6322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.460748][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.558804][ T6343] vlan2: entered allmulticast mode [ 82.725197][ T6360] loop2: detected capacity change from 0 to 512 [ 82.752162][ T6360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.765113][ T6360] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.916536][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.996236][ T6387] loop4: detected capacity change from 0 to 512 [ 83.022501][ T6387] ext4: Unknown parameter 'fowner' [ 83.369605][ T6414] IPVS: Error connecting to the multicast addr [ 83.410458][ T6420] loop1: detected capacity change from 0 to 1024 [ 83.417776][ T6420] EXT4-fs: Ignoring removed orlov option [ 83.448851][ T6420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.801900][ T6420] ================================================================== [ 83.810063][ T6420] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 83.817251][ T6420] [ 83.819604][ T6420] write to 0xffff88811a0746f4 of 4 bytes by task 6426 on cpu 1: [ 83.827253][ T6420] xas_set_mark+0x12b/0x140 [ 83.831806][ T6420] __folio_start_writeback+0x155/0x340 [ 83.837312][ T6420] ext4_bio_write_folio+0x5ad/0x9f0 [ 83.842564][ T6420] mpage_process_page_bufs+0x4a1/0x620 [ 83.848062][ T6420] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 83.853908][ T6420] ext4_do_writepages+0x9f6/0x27e0 [ 83.859165][ T6420] ext4_writepages+0x179/0x300 [ 83.863962][ T6420] do_writepages+0x1c6/0x310 [ 83.868598][ T6420] file_write_and_wait_range+0x156/0x2c0 [ 83.874268][ T6420] generic_buffers_fsync_noflush+0x45/0x130 [ 83.880204][ T6420] ext4_sync_file+0x1ab/0x690 [ 83.884909][ T6420] vfs_fsync_range+0x10d/0x130 [ 83.889705][ T6420] ext4_buffered_write_iter+0x34f/0x3c0 [ 83.895338][ T6420] ext4_file_write_iter+0x387/0xf60 [ 83.900623][ T6420] iter_file_splice_write+0x66b/0xa20 [ 83.906034][ T6420] direct_splice_actor+0x156/0x2a0 [ 83.911266][ T6420] splice_direct_to_actor+0x312/0x680 [ 83.916666][ T6420] do_splice_direct+0xda/0x150 [ 83.921455][ T6420] do_sendfile+0x380/0x650 [ 83.925912][ T6420] __x64_sys_sendfile64+0x105/0x150 [ 83.931150][ T6420] x64_sys_call+0x2db1/0x3000 [ 83.935864][ T6420] do_syscall_64+0xd8/0x2a0 [ 83.940416][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.946328][ T6420] [ 83.948674][ T6420] read to 0xffff88811a0746f4 of 4 bytes by task 6420 on cpu 0: [ 83.956676][ T6420] xas_find_marked+0x5dc/0x620 [ 83.961484][ T6420] find_get_entry+0x5d/0x380 [ 83.966107][ T6420] filemap_get_folios_tag+0x92/0x210 [ 83.971414][ T6420] mpage_prepare_extent_to_map+0x308/0xc20 [ 83.977257][ T6420] ext4_do_writepages+0x9f6/0x27e0 [ 83.982407][ T6420] ext4_writepages+0x179/0x300 [ 83.987202][ T6420] do_writepages+0x1c6/0x310 [ 83.991836][ T6420] file_write_and_wait_range+0x156/0x2c0 [ 83.997495][ T6420] generic_buffers_fsync_noflush+0x45/0x130 [ 84.003436][ T6420] ext4_sync_file+0x1ab/0x690 [ 84.008234][ T6420] vfs_fsync_range+0x10d/0x130 [ 84.013111][ T6420] ext4_buffered_write_iter+0x34f/0x3c0 [ 84.018690][ T6420] ext4_file_write_iter+0x387/0xf60 [ 84.023924][ T6420] iter_file_splice_write+0x66b/0xa20 [ 84.029322][ T6420] direct_splice_actor+0x156/0x2a0 [ 84.034459][ T6420] splice_direct_to_actor+0x312/0x680 [ 84.039857][ T6420] do_splice_direct+0xda/0x150 [ 84.044654][ T6420] do_sendfile+0x380/0x650 [ 84.049106][ T6420] __x64_sys_sendfile64+0x105/0x150 [ 84.054330][ T6420] x64_sys_call+0x2db1/0x3000 [ 84.059033][ T6420] do_syscall_64+0xd8/0x2a0 [ 84.063575][ T6420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.069489][ T6420] [ 84.071827][ T6420] value changed: 0x0a000021 -> 0x04000021 [ 84.077562][ T6420] [ 84.079900][ T6420] Reported by Kernel Concurrency Sanitizer on: [ 84.086095][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.095837][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.105997][ T6420] ================================================================== [ 84.389401][ T6420] syz.1.1105 (6420) used greatest stack depth: 9048 bytes left [ 84.398626][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.