last executing test programs: 1.478312212s ago: executing program 3 (id=897): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 1.403216068s ago: executing program 3 (id=898): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 803.068835ms ago: executing program 0 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 802.628026ms ago: executing program 0 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 738.349081ms ago: executing program 0 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000b00)={0x24, r2, 0x62c21a4ade68aba1, 0x70bd23, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x59}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 682.637905ms ago: executing program 0 (id=907): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 581.477953ms ago: executing program 3 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@fat=@usefree}, {@dots}, {@fat=@check_strict}, {@nodots}, {}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fd}}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f00000005c0)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 492.9745ms ago: executing program 0 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00', @loopback}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 437.303855ms ago: executing program 3 (id=915): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 349.415572ms ago: executing program 3 (id=919): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x8100000, 0x0, 0x0, 0x0, {0x6}, &(0x7f00000004c0)=""/217, 0xd9, &(0x7f0000000b40)=""/4091, &(0x7f00000005c0)}, 0x58) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x12) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 320.672464ms ago: executing program 0 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 282.157237ms ago: executing program 1 (id=926): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdf2}, 0x48) r1 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 255.541789ms ago: executing program 4 (id=929): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x600100a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 252.296129ms ago: executing program 1 (id=930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, 0xffffffffffffffff, 0x0) 200.556063ms ago: executing program 1 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 200.031863ms ago: executing program 1 (id=934): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x10}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x8, 0x0, 0x9, 0x9, 0x0, "fc9e3c1e2fa36bbbb80305c37098baf96cb67e", 0x0, 0x2}) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 199.865014ms ago: executing program 1 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 147.189638ms ago: executing program 2 (id=936): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 146.669518ms ago: executing program 1 (id=937): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 146.228438ms ago: executing program 4 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 145.919018ms ago: executing program 3 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 141.751188ms ago: executing program 4 (id=940): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 115.56639ms ago: executing program 2 (id=941): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) fsopen(0x0, 0x0) 94.625412ms ago: executing program 2 (id=942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) 31.205047ms ago: executing program 2 (id=943): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000002140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x05FY\x1c\x04\x0f\x00\x00\x00\x00\x00\x00z[\xc4\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xee9\xdd\x87\xf1\xc5\xa81\xd4\xfb\x8a8t\xd0\v\xe6\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x8fu\x0fjuX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06D\x83\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xe6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\xf8?=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\t\x00\x00\x00\x00\x00\x00\x00\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x02\xeb6\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x1f\x17\x11$\x88g\xb4\xad\xe5\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0_\xfe7\xd0=5&_\x86m\x8d\x12\x96\xc8\x91\x1dD\x02\x13\xf6r\xa4L\xd3\x93\x8d\x05\x85P\x93\xa9\xc0\xda\x9b\xb9\xafZ\xd7W\xcb\xd7\x1fZq\x86%\x9a\rcb\x96\xfeI\t\x9c\a\xcc+\x9d\n\x18k9\x16y\xf0\xf1\xad\xb4\xdeOR-\x89\xc6%\x06\x05zB\xcc\xe1\xa1\x11P\xd2u\'o\xee\xc3|\xb4\xe3\xc8]\x11\x7f\x17\x8dS\xb4\xd1\x1a\fjF\xab\xcf\"y\f\x85\xb0s\xc8\xec\xa6Y\xe22\x9c_}\aq\xec\xc4\x124\x9e`\xf5\xd1~\xd6x\xa9\x95\v\xac\xea\x0f^\xa3\xc3:\xd6fC\xfc\xf0\xb6\x8c\xf7cF\x9a\x97\x83GMJ\xf2A\x0e\xecrg\xf6\xc039\xb8\b\x85\x9fu\x84Am\xc67\xae\xee\xce-E@4\n\xab9rB\xed\xf7\x86\'\xb3\x04\f\xb5\xc3\x82\xd9WO\xe2\x92\xf9\xb5\x93\xe67\xb1\xc8x\xa3\xf6fs\x88\x81\x80\x1ck\"\xe4\xc3A\xee\xec\x8ea+\xcbFEm\"\xf1\x19/\x1f\x8e\xe2C\xb3\v(\x16\xc8bI\n\x95|\xb8.\x05\x80\xbeu=4\x95\xb9\xa1\x06\x16\xd8.\xd5\xa0\xc5\x7f\x97\xed05\x18\x0f\xf4\f\xcf\x1f\x8b\xa1\xb1<\xe7G\xc6\xb1%\xef\x94\x9e\x1f\x1d\xb4 b\xe8p\xd7c\xb0i\xa0\x19k\xe3\xce\x93\xd9\x03\x95L4\"1\x80\x05\xe3\x03\xfb\x81\xcc\xe6Du\x06\xe6wX0\x16\xc5_=\xe7&\x8eU\xdf\xb0OZ\x02\x19Y\x13\x16:\a\x89PI\x98\xd9\xffxh6\x13\x1co1_F\x02\x9d\xc9\xe4E\xb7\x1a\xa2&H\xef\x06\x89v\x85\xfek*\x91W\x01\x00\x00\x00\x00\x00\x00\x00\x0fX\x139o\x83\xbe\xdb\xa55D\xcbt\xb4y%\xe6j\xeb\xe7H\xe1\xe2\x9c\x7f5a\xb1&\x88\x9c\x98\\{\x8d\xbb\x92\xfa\x96j\xf4T\xd2d-\xf8dIz\x1f\x0eZ\xb5\x120A\xb8\x0f\ne\x19^\xccz\x11\xca\f\xda\x89\x8fuS(G&\xe2\xd0ky\xe7n\xc7\xfcz\x84U\xc1\xf0\xe0\xc5\xbf\xb1\xfa\xd4\xe5)\xad\xcbp\xce\x8b\xddq\xb8E\xe6+\xd2\xea\f\x16\xe1\xc2\xdaN\xce\b\xe21X\xee\x80n\x10\xfd\x03_L=@\xddR\xb5\xa5\"\xcb\xdf\xc5\xd8\n,Go\xa6u\xe0\v\x86\x9da\xda\x11\xd5>\xfea\xa1|\xe5\x7f\xab\x94\xec\x87\x11:$\xf2\x9a\x99', 0x0) write$binfmt_misc(r1, &(0x7f0000000180)="e502", 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 30.763287ms ago: executing program 4 (id=944): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') close_range(r0, 0xffffffffffffffff, 0x400000000000000) 30.542837ms ago: executing program 4 (id=945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000340)='%pB \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 30.209077ms ago: executing program 2 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 19.161328ms ago: executing program 4 (id=947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 0s ago: executing program 2 (id=948): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x18) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. [ 23.902349][ T29] audit: type=1400 audit(1756187306.220:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.903202][ T3291] cgroup: Unknown subsys name 'net' [ 23.925071][ T29] audit: type=1400 audit(1756187306.220:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.952469][ T29] audit: type=1400 audit(1756187306.250:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.071218][ T3291] cgroup: Unknown subsys name 'cpuset' [ 24.077356][ T3291] cgroup: Unknown subsys name 'rlimit' [ 24.206430][ T29] audit: type=1400 audit(1756187306.520:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.229837][ T29] audit: type=1400 audit(1756187306.520:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.250399][ T29] audit: type=1400 audit(1756187306.520:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.270919][ T29] audit: type=1400 audit(1756187306.520:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.277292][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.291183][ T29] audit: type=1400 audit(1756187306.520:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.324572][ T29] audit: type=1400 audit(1756187306.520:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.347812][ T29] audit: type=1400 audit(1756187306.620:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.384664][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.065298][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.132038][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.139163][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.146366][ T3304] bridge_slave_0: entered allmulticast mode [ 26.152865][ T3304] bridge_slave_0: entered promiscuous mode [ 26.166520][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 26.175107][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.182201][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.189321][ T3304] bridge_slave_1: entered allmulticast mode [ 26.195763][ T3304] bridge_slave_1: entered promiscuous mode [ 26.248595][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.260388][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.276645][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.303767][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.326339][ T3304] team0: Port device team_slave_0 added [ 26.334900][ T3304] team0: Port device team_slave_1 added [ 26.361702][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.368749][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.376390][ T3301] bridge_slave_0: entered allmulticast mode [ 26.382766][ T3301] bridge_slave_0: entered promiscuous mode [ 26.399053][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.407812][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.414913][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.422051][ T3301] bridge_slave_1: entered allmulticast mode [ 26.428362][ T3301] bridge_slave_1: entered promiscuous mode [ 26.441695][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.448663][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.474575][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.485670][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.492693][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.518658][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.560453][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.567559][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.574787][ T3302] bridge_slave_0: entered allmulticast mode [ 26.581188][ T3302] bridge_slave_0: entered promiscuous mode [ 26.588374][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.595502][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.602686][ T3302] bridge_slave_1: entered allmulticast mode [ 26.609139][ T3302] bridge_slave_1: entered promiscuous mode [ 26.622820][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.641926][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.649005][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.656416][ T3309] bridge_slave_0: entered allmulticast mode [ 26.662737][ T3309] bridge_slave_0: entered promiscuous mode [ 26.672051][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.693328][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.700416][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.707488][ T3309] bridge_slave_1: entered allmulticast mode [ 26.714000][ T3309] bridge_slave_1: entered promiscuous mode [ 26.730814][ T3304] hsr_slave_0: entered promiscuous mode [ 26.736616][ T3304] hsr_slave_1: entered promiscuous mode [ 26.743464][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.761976][ T3301] team0: Port device team_slave_0 added [ 26.768892][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.782224][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.789284][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.796418][ T3312] bridge_slave_0: entered allmulticast mode [ 26.803005][ T3312] bridge_slave_0: entered promiscuous mode [ 26.809926][ T3301] team0: Port device team_slave_1 added [ 26.830126][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.839359][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.846527][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.853735][ T3312] bridge_slave_1: entered allmulticast mode [ 26.860039][ T3312] bridge_slave_1: entered promiscuous mode [ 26.880272][ T3302] team0: Port device team_slave_0 added [ 26.886961][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.896586][ T3302] team0: Port device team_slave_1 added [ 26.911354][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.918303][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.944262][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.964246][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.979845][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.986898][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.012833][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.029056][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.038474][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.045484][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.071465][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.082881][ T3309] team0: Port device team_slave_0 added [ 27.098724][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.105713][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.131598][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.142884][ T3309] team0: Port device team_slave_1 added [ 27.162455][ T3312] team0: Port device team_slave_0 added [ 27.168872][ T3312] team0: Port device team_slave_1 added [ 27.209341][ T3301] hsr_slave_0: entered promiscuous mode [ 27.215354][ T3301] hsr_slave_1: entered promiscuous mode [ 27.221304][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 27.227014][ T3301] Cannot create hsr debugfs directory [ 27.234900][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.241869][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.267780][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.279339][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.286309][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.312181][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.323391][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.330473][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.356534][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.371912][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.378842][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.404887][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.444925][ T3302] hsr_slave_0: entered promiscuous mode [ 27.450967][ T3302] hsr_slave_1: entered promiscuous mode [ 27.456692][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.462411][ T3302] Cannot create hsr debugfs directory [ 27.504236][ T3312] hsr_slave_0: entered promiscuous mode [ 27.510278][ T3312] hsr_slave_1: entered promiscuous mode [ 27.516264][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.521982][ T3312] Cannot create hsr debugfs directory [ 27.533860][ T3309] hsr_slave_0: entered promiscuous mode [ 27.539663][ T3309] hsr_slave_1: entered promiscuous mode [ 27.545544][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.551287][ T3309] Cannot create hsr debugfs directory [ 27.587392][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.606512][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.628678][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.650441][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.736299][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.747244][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.756940][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.768248][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.796318][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.813270][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.822168][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.841889][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.853421][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.873729][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.882194][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.891578][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.901023][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.908109][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.918558][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.926098][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.937431][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.946691][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.979630][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.988888][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.998810][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.008606][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.020912][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.068307][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.086598][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.093694][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.102625][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.109683][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.126322][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.143460][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.153858][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.179328][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.195168][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.227104][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.237571][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.250054][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.261694][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.268774][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.278012][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.285122][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.294124][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.305145][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.312296][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.323276][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.330415][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.344780][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.351925][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.372951][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.380004][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.395312][ T3304] veth0_vlan: entered promiscuous mode [ 28.419405][ T3304] veth1_vlan: entered promiscuous mode [ 28.434923][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.452026][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.482864][ T3304] veth0_macvtap: entered promiscuous mode [ 28.499555][ T3304] veth1_macvtap: entered promiscuous mode [ 28.527426][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.545552][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.564702][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.587535][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.605215][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.616710][ T3301] veth0_vlan: entered promiscuous mode [ 28.635737][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.653015][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.670306][ T3301] veth1_vlan: entered promiscuous mode [ 28.686806][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.720812][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.725144][ T3301] veth0_macvtap: entered promiscuous mode [ 28.755711][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.768471][ T3312] veth0_vlan: entered promiscuous mode [ 28.776773][ T3309] veth0_vlan: entered promiscuous mode [ 28.793360][ T3312] veth1_vlan: entered promiscuous mode [ 28.803142][ T3309] veth1_vlan: entered promiscuous mode [ 28.815444][ T3301] veth1_macvtap: entered promiscuous mode [ 28.835862][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.844646][ T3312] veth0_macvtap: entered promiscuous mode [ 28.854397][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.866453][ T3312] veth1_macvtap: entered promiscuous mode [ 28.876813][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.884624][ T3309] veth0_macvtap: entered promiscuous mode [ 28.891366][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.905370][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.914391][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.923675][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.933825][ T3464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.943966][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.952927][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.963387][ T3309] veth1_macvtap: entered promiscuous mode [ 28.974880][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.984765][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.992110][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 28.992127][ T29] audit: type=1400 audit(1756187311.310:99): avc: denied { create } for pid=3472 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.023577][ T3302] veth0_vlan: entered promiscuous mode [ 29.031814][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.048914][ T3302] veth1_vlan: entered promiscuous mode [ 29.059525][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.060257][ T29] audit: type=1400 audit(1756187311.380:100): avc: denied { write } for pid=3472 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.092770][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.124432][ T29] audit: type=1400 audit(1756187311.440:101): avc: denied { read } for pid=3475 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.145212][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.157641][ T3302] veth0_macvtap: entered promiscuous mode [ 29.169216][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.179388][ T3302] veth1_macvtap: entered promiscuous mode [ 29.198484][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.218655][ T29] audit: type=1400 audit(1756187311.530:102): avc: denied { create } for pid=3477 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.222744][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.250572][ T3479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.258272][ T3480] loop0: detected capacity change from 0 to 164 [ 29.259189][ T3479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.280529][ T3480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.292406][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.305101][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.313651][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.352445][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.361910][ T3480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 29.368569][ T29] audit: type=1400 audit(1756187311.570:103): avc: denied { write } for pid=3477 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.390407][ T29] audit: type=1400 audit(1756187311.600:104): avc: denied { mount } for pid=3478 comm="syz.0.8" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 29.417871][ T29] audit: type=1400 audit(1756187311.730:105): avc: denied { setopt } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.423633][ T3480] Symlink component flag not implemented [ 29.442864][ T3480] Symlink component flag not implemented [ 29.456974][ T29] audit: type=1400 audit(1756187311.770:106): avc: denied { create } for pid=3490 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.477450][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.487492][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.525392][ T29] audit: type=1400 audit(1756187311.800:107): avc: denied { create } for pid=3488 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.530528][ T3480] Symlink component flag not implemented (7) [ 29.544713][ T29] audit: type=1400 audit(1756187311.800:108): avc: denied { write } for pid=3490 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.550656][ T3480] Symlink component flag not implemented (116) [ 29.604801][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.617849][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.629522][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.854458][ T3521] syzkaller1: entered promiscuous mode [ 29.859963][ T3521] syzkaller1: entered allmulticast mode [ 30.070774][ T3553] bridge0: entered promiscuous mode [ 30.076093][ T3553] macsec1: entered promiscuous mode [ 30.085856][ T3553] bridge0: port 3(macsec1) entered blocking state [ 30.092479][ T3553] bridge0: port 3(macsec1) entered disabled state [ 30.101801][ T3556] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.114126][ T3553] macsec1: entered allmulticast mode [ 30.117634][ T3556] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 30.119486][ T3553] bridge0: entered allmulticast mode [ 30.144974][ T3553] macsec1: left allmulticast mode [ 30.150136][ T3553] bridge0: left allmulticast mode [ 30.156380][ T3553] bridge0: left promiscuous mode [ 30.166324][ T3560] raw_sendmsg: syz.0.38 forgot to set AF_INET. Fix it! [ 30.417902][ T3583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 30.428500][ T3583] netem: change failed [ 30.525272][ T3594] SELinux: Context Ü is not valid (left unmapped). [ 30.535181][ T3598] loop3: detected capacity change from 0 to 512 [ 30.589387][ T3600] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.611573][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.661029][ T3598] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.733036][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.776530][ T3616] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 30.789309][ T3611] IPVS: stopping master sync thread 3616 ... [ 30.796969][ T3618] mmap: syz.1.64 (3618) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.990125][ T3638] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 31.215176][ T3657] loop3: detected capacity change from 0 to 1024 [ 31.241393][ T3657] EXT4-fs: Ignoring removed bh option [ 31.288829][ T3657] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 31.392553][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.484215][ T3656] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.541547][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.761568][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 31.773285][ T3705] loop2: detected capacity change from 0 to 1024 [ 31.779839][ T3705] ======================================================= [ 31.779839][ T3705] WARNING: The mand mount option has been deprecated and [ 31.779839][ T3705] and is ignored by this kernel. Remove the mand [ 31.779839][ T3705] option from the mount to silence this warning. [ 31.779839][ T3705] ======================================================= [ 31.835496][ T3705] EXT4-fs: inline encryption not supported [ 31.843607][ T3705] EXT4-fs: Ignoring removed bh option [ 31.881761][ T3705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.116423][ T3721] netlink: 84 bytes leftover after parsing attributes in process `syz.0.106'. [ 32.175624][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.585040][ T3736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 32.719231][ T3740] bridge0: entered promiscuous mode [ 32.731371][ T3740] macvtap1: entered allmulticast mode [ 32.736786][ T3740] bridge0: entered allmulticast mode [ 32.758759][ T3740] bridge0: port 3(macvtap1) entered blocking state [ 32.765445][ T3740] bridge0: port 3(macvtap1) entered disabled state [ 32.827920][ T3709] Set syz1 is full, maxelem 65536 reached [ 32.833861][ T3740] bridge0: left allmulticast mode [ 32.838947][ T3740] bridge0: left promiscuous mode [ 32.866013][ T3709] syz.1.101 (3709) used greatest stack depth: 10856 bytes left [ 33.081864][ T3770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.143830][ T3770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.284455][ T3770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.368645][ T3770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.391851][ T3759] syz.4.120 (3759) used greatest stack depth: 10672 bytes left [ 33.428338][ T147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.432216][ T3799] loop1: detected capacity change from 0 to 1024 [ 33.453374][ T147] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.471708][ T147] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.496171][ T147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.517933][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.666375][ T3824] geneve0: entered allmulticast mode [ 33.724428][ T3821] SELinux: failed to load policy [ 33.752960][ T3832] netlink: 'syz.3.147': attribute type 3 has an invalid length. [ 33.780401][ T3834] syz.3.148 uses obsolete (PF_INET,SOCK_PACKET) [ 33.804639][ T3825] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 33.923944][ T3850] IPv6: Can't replace route, no match found [ 34.284544][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 34.284570][ T29] audit: type=1400 audit(1756187316.600:303): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.285186][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.294499][ T29] audit: type=1400 audit(1756187316.610:304): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.343457][ T29] audit: type=1400 audit(1756187316.610:305): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.380624][ T29] audit: type=1400 audit(1756187316.660:306): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.406271][ T29] audit: type=1400 audit(1756187316.690:307): avc: denied { map_create } for pid=3872 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.425245][ T29] audit: type=1400 audit(1756187316.690:308): avc: denied { map_read map_write } for pid=3872 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.445191][ T29] audit: type=1400 audit(1756187316.690:309): avc: denied { prog_load } for pid=3872 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.448123][ T3873] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 34.464518][ T29] audit: type=1400 audit(1756187316.690:310): avc: denied { bpf } for pid=3872 comm="syz.3.166" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.464549][ T29] audit: type=1400 audit(1756187316.690:311): avc: denied { perfmon } for pid=3872 comm="syz.3.166" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.464569][ T29] audit: type=1400 audit(1756187316.690:312): avc: denied { prog_run } for pid=3872 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.569504][ T3877] loop1: detected capacity change from 0 to 8192 [ 34.728917][ T3897] __nla_validate_parse: 5 callbacks suppressed [ 34.728931][ T3897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 34.797904][ T3902] syz.3.178 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.034444][ T3924] loop3: detected capacity change from 0 to 1024 [ 35.072722][ T3924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.122644][ T3931] netlink: 'syz.0.190': attribute type 4 has an invalid length. [ 35.139679][ T3924] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 35.209184][ T67] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 35.222137][ T67] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.222137][ T67] [ 35.231814][ T67] EXT4-fs (loop3): Total free blocks count 0 [ 35.237840][ T67] EXT4-fs (loop3): Free/Dirty block details [ 35.243763][ T67] EXT4-fs (loop3): free_blocks=20480 [ 35.249040][ T67] EXT4-fs (loop3): dirty_blocks=64 [ 35.254760][ T67] EXT4-fs (loop3): Block reservation details [ 35.260755][ T67] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 35.267369][ T3937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.194'. [ 35.280926][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.417940][ T51] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xff [ 35.606656][ T3970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 35.625745][ T3972] Zero length message leads to an empty skb [ 35.822681][ T4001] wireguard0: entered promiscuous mode [ 35.828169][ T4001] wireguard0: entered allmulticast mode [ 35.963472][ T4011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 35.973888][ T4011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 36.009084][ T4013] loop1: detected capacity change from 0 to 128 [ 36.031436][ T4013] FAT-fs (loop1): Directory bread(block 162) failed [ 36.048334][ T4019] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 36.051141][ T4013] FAT-fs (loop1): Directory bread(block 163) failed [ 36.056150][ T4019] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.226'. [ 36.065400][ T4013] FAT-fs (loop1): Directory bread(block 164) failed [ 36.081744][ T4013] FAT-fs (loop1): Directory bread(block 165) failed [ 36.094749][ T4013] FAT-fs (loop1): Directory bread(block 166) failed [ 36.098500][ T4021] netlink: zone id is out of range [ 36.104133][ T4013] FAT-fs (loop1): Directory bread(block 167) failed [ 36.107056][ T4021] netlink: zone id is out of range [ 36.114794][ T4013] FAT-fs (loop1): Directory bread(block 168) failed [ 36.125856][ T4021] netlink: zone id is out of range [ 36.126492][ C0] hrtimer: interrupt took 51583 ns [ 36.128353][ T4013] FAT-fs (loop1): Directory bread(block 169) failed [ 36.191924][ T4013] FAT-fs (loop1): Directory bread(block 162) failed [ 36.214902][ T4013] FAT-fs (loop1): Directory bread(block 163) failed [ 36.225554][ T4013] syz.1.223: attempt to access beyond end of device [ 36.225554][ T4013] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 36.239580][ T4030] process 'syz.0.231' launched './file0' with NULL argv: empty string added [ 36.246478][ T4013] syz.1.223: attempt to access beyond end of device [ 36.246478][ T4013] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 36.542457][ T4062] loop4: detected capacity change from 0 to 512 [ 36.586490][ T4068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 36.595516][ T4068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 36.604445][ T4068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 36.625499][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.626333][ T4068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.250'. [ 36.647057][ T4068] netlink: 'syz.0.250': attribute type 6 has an invalid length. [ 36.654883][ T4062] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.723195][ T4062] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 36.751269][ T4062] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 36.763553][ T4062] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.763553][ T4062] [ 36.773689][ T4062] EXT4-fs (loop4): Total free blocks count 0 [ 36.779698][ T4062] EXT4-fs (loop4): Free/Dirty block details [ 36.785750][ T4062] EXT4-fs (loop4): free_blocks=65280 [ 36.791076][ T4062] EXT4-fs (loop4): dirty_blocks=1 [ 36.796104][ T4062] EXT4-fs (loop4): Block reservation details [ 36.802136][ T4062] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 36.810876][ T4062] syz.4.246 (4062) used greatest stack depth: 9864 bytes left [ 36.841242][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.926280][ T4110] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 36.956440][ T4110] team0: Port device dummy0 added [ 36.966617][ T4114] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 36.978737][ T4114] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 37.011297][ T4110] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 37.029176][ T4110] team0: Port device dummy0 removed [ 37.075619][ T4110] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 37.309333][ T4160] syz.4.291 (4160) used greatest stack depth: 9520 bytes left [ 37.320183][ T4167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.430096][ T4178] loop3: detected capacity change from 0 to 128 [ 37.438250][ T4178] EXT4-fs: Ignoring removed nobh option [ 37.488533][ T4178] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.504358][ T4178] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.616133][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.787463][ T4221] syzkaller1: entered promiscuous mode [ 37.793050][ T4221] syzkaller1: entered allmulticast mode [ 37.921297][ T4232] loop2: detected capacity change from 0 to 512 [ 37.960915][ T4232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.982040][ T4225] hsr_slave_0: left promiscuous mode [ 37.987768][ T4232] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.992986][ T4225] hsr_slave_1: left promiscuous mode [ 38.036800][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.078354][ T4241] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 38.089498][ T4238] IPVS: stopping master sync thread 4241 ... [ 38.135537][ T4246] loop2: detected capacity change from 0 to 1024 [ 38.163086][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.256478][ T4257] loop4: detected capacity change from 0 to 512 [ 38.290214][ T4257] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.303447][ T4257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.348143][ T4257] EXT4-fs (loop4): 1 truncate cleaned up [ 38.371996][ T4257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.404172][ T4246] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 38.420263][ T4246] EXT4-fs (loop2): Remounting filesystem read-only [ 38.429040][ T4270] atomic_op ffff8881003dbd28 conn xmit_atomic 0000000000000000 [ 38.473528][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.496962][ T4275] hub 2-0:1.0: USB hub found [ 38.501991][ T4275] hub 2-0:1.0: 8 ports detected [ 38.626617][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.746782][ T4305] vlan2: entered allmulticast mode [ 38.867813][ T4320] loop4: detected capacity change from 0 to 512 [ 38.922496][ T4320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.934394][ T4320] EXT4-fs (loop4): 1 truncate cleaned up [ 38.941341][ T4320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.978955][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.098741][ T4359] loop4: detected capacity change from 0 to 2048 [ 39.117399][ T4361] netlink: 'syz.3.366': attribute type 27 has an invalid length. [ 39.168287][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.203986][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.211214][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.224533][ T4359] GUP no longer grows the stack in syz.4.362 (4359): 200000005000-200000008000 (200000001000) [ 39.234906][ T4359] CPU: 1 UID: 0 PID: 4359 Comm: syz.4.362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.234931][ T4359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.234941][ T4359] Call Trace: [ 39.234948][ T4359] [ 39.234957][ T4359] __dump_stack+0x1d/0x30 [ 39.234975][ T4359] dump_stack_lvl+0xe8/0x140 [ 39.234991][ T4359] dump_stack+0x15/0x1b [ 39.235036][ T4359] __get_user_pages+0x198d/0x1fa0 [ 39.235061][ T4359] ? __sbitmap_queue_get+0x15/0x20 [ 39.235083][ T4359] ? __blk_mq_get_tag+0x104/0x260 [ 39.235147][ T4359] __gup_longterm_locked+0x8f4/0xe60 [ 39.235172][ T4359] ? __rcu_read_unlock+0x34/0x70 [ 39.235193][ T4359] ? try_get_folio+0x379/0x3c0 [ 39.235294][ T4359] ? mod_node_page_state+0x1c/0xa0 [ 39.235315][ T4359] gup_fast_fallback+0x1f5/0x1420 [ 39.235347][ T4359] pin_user_pages_fast+0x5f/0x90 [ 39.235370][ T4359] iov_iter_extract_pages+0x253/0x420 [ 39.235426][ T4359] bio_iov_iter_get_pages+0x2ad/0xab0 [ 39.235448][ T4359] ? bio_associate_blkg+0xc7/0xe0 [ 39.235616][ T4359] ? bio_alloc_bioset+0x906/0xac0 [ 39.235653][ T4359] iomap_dio_bio_iter+0x829/0xd20 [ 39.235681][ T4359] __iomap_dio_rw+0x985/0x1250 [ 39.235778][ T4359] ? ext4_journal_check_start+0x11a/0x1b0 [ 39.235797][ T4359] iomap_dio_rw+0x40/0x90 [ 39.235815][ T4359] ext4_file_write_iter+0xad9/0xf00 [ 39.235847][ T4359] do_iter_readv_writev+0x499/0x540 [ 39.235888][ T4359] vfs_writev+0x2df/0x8b0 [ 39.235916][ T4359] __se_sys_pwritev2+0xfc/0x1c0 [ 39.236000][ T4359] __x64_sys_pwritev2+0x67/0x80 [ 39.236020][ T4359] x64_sys_call+0x2c55/0x2ff0 [ 39.236040][ T4359] do_syscall_64+0xd2/0x200 [ 39.236139][ T4359] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.236159][ T4359] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.236183][ T4359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.236214][ T4359] RIP: 0033:0x7f4a1671ebe9 [ 39.236230][ T4359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.236243][ T4359] RSP: 002b:00007f4a1517f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 39.236336][ T4359] RAX: ffffffffffffffda RBX: 00007f4a16945fa0 RCX: 00007f4a1671ebe9 [ 39.236349][ T4359] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 39.236362][ T4359] RBP: 00007f4a167a1e19 R08: 0000000000000000 R09: 0000000000000000 [ 39.236372][ T4359] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000000 [ 39.236382][ T4359] R13: 00007f4a16946038 R14: 00007f4a16945fa0 R15: 00007fffb8111ff8 [ 39.236397][ T4359] [ 39.506514][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.544273][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.565967][ T4378] loop4: detected capacity change from 0 to 512 [ 39.575427][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.608273][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 39.608288][ T29] audit: type=1400 audit(39.586:842): avc: denied { read write } for pid=4381 comm="syz.0.373" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.638412][ T29] audit: type=1400 audit(39.586:843): avc: denied { open } for pid=4381 comm="syz.0.373" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 39.692224][ T4361] geneve0: left allmulticast mode [ 39.714526][ T4378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.764469][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.772479][ T4368] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.784358][ T4378] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.371: corrupted inode contents [ 39.795267][ T29] audit: type=1400 audit(39.766:844): avc: denied { setattr } for pid=4377 comm="syz.4.371" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.797016][ T4378] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.371: mark_inode_dirty error [ 39.828882][ T4378] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.371: corrupted inode contents [ 39.841404][ T4368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.862619][ T67] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.871280][ T67] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.886509][ T147] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.886688][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.371: corrupted inode contents [ 39.898838][ T147] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.911934][ T4386] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.371: mark_inode_dirty error [ 39.979921][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.371: corrupted inode contents [ 40.046527][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.058720][ T4392] Falling back ldisc for ttyS3. [ 40.086661][ T29] audit: type=1400 audit(40.066:845): avc: denied { name_bind } for pid=4394 comm="syz.4.377" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.108061][ T29] audit: type=1400 audit(40.066:846): avc: denied { node_bind } for pid=4394 comm="syz.4.377" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.262143][ T4402] ALSA: seq fatal error: cannot create timer (-22) [ 40.309996][ T4406] batadv0: entered allmulticast mode [ 40.519248][ T4421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.537329][ T4421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.590735][ T29] audit: type=1400 audit(40.496:847): avc: denied { create } for pid=4420 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.609905][ T29] audit: type=1400 audit(40.526:848): avc: denied { mount } for pid=4422 comm="syz.0.390" name="/" dev="ramfs" ino=7575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.645462][ T29] audit: type=1400 audit(40.626:849): avc: denied { bind } for pid=4420 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.912611][ T29] audit: type=1400 audit(40.896:850): avc: denied { read write } for pid=4436 comm="syz.0.395" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 40.936090][ T29] audit: type=1400 audit(40.896:851): avc: denied { open } for pid=4436 comm="syz.0.395" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 41.074137][ T4453] sctp: [Deprecated]: syz.2.403 (pid 4453) Use of int in maxseg socket option. [ 41.074137][ T4453] Use struct sctp_assoc_value instead [ 41.125648][ T4459] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.148871][ T4461] netlink: 'syz.1.407': attribute type 3 has an invalid length. [ 41.345078][ T4492] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.606001][ T4536] __nla_validate_parse: 7 callbacks suppressed [ 41.606015][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 42.111879][ T4576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4576 comm=syz.4.457 [ 42.113641][ T4575] sctp: [Deprecated]: syz.3.456 (pid 4575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.113641][ T4575] Use struct sctp_sack_info instead [ 42.250536][ T4592] loop3: detected capacity change from 0 to 2048 [ 42.282856][ T4592] loop3: p1 < > p4 [ 42.287362][ T4592] loop3: p4 size 8388608 extends beyond EOD, truncated [ 42.440671][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.441411][ T3487] udevd[3487]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 42.657130][ T4627] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 42.725796][ T4635] netlink: 'syz.0.486': attribute type 27 has an invalid length. [ 42.757883][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.765231][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.808276][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.818689][ T4635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.836216][ T4642] loop4: detected capacity change from 0 to 1024 [ 42.845311][ T4642] EXT4-fs: Ignoring removed bh option [ 42.851906][ T4642] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.873836][ T4642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.879361][ T4638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.895188][ T4638] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.911877][ T4638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.929284][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.942847][ T67] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.957995][ T67] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.972920][ T67] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.982877][ T67] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.012714][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 43.045629][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 43.203876][ T4676] vhci_hcd: invalid port number 96 [ 43.209050][ T4676] vhci_hcd: default hub control req: 0352 vf7fa i0060 l0 [ 43.243790][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 43.262472][ T4683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 43.378839][ T4698] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 43.748813][ T4777] loop4: detected capacity change from 0 to 512 [ 43.770909][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.792939][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 43.805697][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 43.846910][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.998498][ T4819] netlink: 360 bytes leftover after parsing attributes in process `syz.2.544'. [ 44.786337][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 44.786350][ T29] audit: type=1326 audit(44.766:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.816262][ T29] audit: type=1326 audit(44.776:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.838842][ T29] audit: type=1326 audit(44.776:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.861977][ T29] audit: type=1326 audit(44.776:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.884567][ T29] audit: type=1326 audit(44.776:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.907271][ T29] audit: type=1326 audit(44.796:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.931291][ T29] audit: type=1326 audit(44.796:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.954030][ T29] audit: type=1326 audit(44.796:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.976642][ T29] audit: type=1326 audit(44.796:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 44.999455][ T29] audit: type=1326 audit(44.796:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4896 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3f6c2febe9 code=0x7ffc0000 [ 45.075380][ T4910] loop4: detected capacity change from 0 to 128 [ 45.237737][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.237737][ T1815] loop4: rw=1, sector=145, nr_sectors = 32 limit=128 [ 45.256100][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.256100][ T1815] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 45.270974][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.270974][ T1815] loop4: rw=1, sector=201, nr_sectors = 24 limit=128 [ 45.284512][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.284512][ T1815] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 45.298989][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.298989][ T1815] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 45.312569][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.312569][ T1815] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 45.326843][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.326843][ T1815] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 45.340599][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.340599][ T1815] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 45.350253][ T4926] loop2: detected capacity change from 0 to 8192 [ 45.357440][ T4930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.556'. [ 45.392825][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.392825][ T1815] loop4: rw=1, sector=313, nr_sectors = 8 limit=128 [ 45.406987][ T1815] kworker/u8:6: attempt to access beyond end of device [ 45.406987][ T1815] loop4: rw=1, sector=329, nr_sectors = 8 limit=128 [ 45.743734][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 46.172707][ T4993] loop3: detected capacity change from 0 to 1024 [ 46.195288][ T4993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.217146][ T4992] syzkaller0: entered promiscuous mode [ 46.222834][ T4992] syzkaller0: entered allmulticast mode [ 46.382695][ T5022] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 46.492177][ T5020] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 46.798385][ T5068] loop4: detected capacity change from 0 to 8192 [ 46.848054][ T5082] loop2: detected capacity change from 0 to 512 [ 46.860874][ T5082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.870801][ T5082] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 46.999917][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.293692][ T5133] __nla_validate_parse: 6 callbacks suppressed [ 47.293705][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 47.798518][ T5185] loop4: detected capacity change from 0 to 512 [ 47.807662][ T5187] loop3: detected capacity change from 0 to 128 [ 47.815647][ T5187] EXT4-fs: Ignoring removed nobh option [ 47.823660][ T5185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.844465][ T5187] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.877022][ T5185] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.668: corrupted inode contents [ 47.903542][ T5185] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.668: mark_inode_dirty error [ 47.918443][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.929125][ T5185] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.668: corrupted inode contents [ 47.953312][ T5185] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.668: mark_inode_dirty error [ 47.974585][ T5200] loop3: detected capacity change from 0 to 8192 [ 48.002889][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.065587][ T5207] rdma_op ffff8881286d3d80 conn xmit_rdma 0000000000000000 [ 48.235127][ T5213] syzkaller0: entered promiscuous mode [ 48.240691][ T5213] syzkaller0: entered allmulticast mode [ 48.270596][ T5219] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 48.278349][ T5219] netlink: 'syz.4.681': attribute type 4 has an invalid length. [ 48.286026][ T5219] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.681'. [ 48.339641][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 48.364471][ T5226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 48.529801][ T5252] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 48.537486][ T5252] netlink: 'syz.1.695': attribute type 4 has an invalid length. [ 48.545153][ T5252] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.695'. [ 48.614244][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 48.628332][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 48.852627][ T67] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 48.861976][ T5297] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 48.868575][ T5297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 48.876260][ T5297] vhci_hcd vhci_hcd.0: Device attached [ 48.891916][ T5296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.717'. [ 49.160464][ T3390] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 49.170827][ T5319] loop3: detected capacity change from 0 to 512 [ 49.177482][ T5319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.210816][ T5319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.224566][ T5319] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.723: Failed to acquire dquot type 1 [ 49.243961][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.296482][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'. [ 49.305462][ T5329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.737'. [ 49.315071][ T5329] netlink: 'syz.2.737': attribute type 6 has an invalid length. [ 49.377996][ T5341] syz_tun: entered allmulticast mode [ 49.384243][ T5340] syz_tun: left allmulticast mode [ 49.538834][ T5351] Driver unsupported XDP return value 0 on prog (id 585) dev N/A, expect packet loss! [ 49.594616][ T5298] vhci_hcd: connection reset by peer [ 49.600638][ T147] vhci_hcd: stop threads [ 49.604934][ T147] vhci_hcd: release socket [ 49.609362][ T147] vhci_hcd: disconnect device [ 49.780144][ T5381] loop4: detected capacity change from 0 to 8192 [ 49.893625][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 49.893639][ T29] audit: type=1400 audit(49.876:1589): avc: denied { prog_load } for pid=5385 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.918194][ T29] audit: type=1400 audit(49.876:1590): avc: denied { bpf } for pid=5385 comm="syz.2.765" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.937942][ T29] audit: type=1400 audit(49.876:1591): avc: denied { perfmon } for pid=5385 comm="syz.2.765" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.992392][ T29] audit: type=1400 audit(49.946:1592): avc: denied { read write } for pid=5383 comm="syz.1.754" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.015162][ T29] audit: type=1400 audit(49.946:1593): avc: denied { open } for pid=5383 comm="syz.1.754" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.037711][ T29] audit: type=1400 audit(49.946:1594): avc: denied { prog_run } for pid=5385 comm="syz.2.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.055920][ T29] audit: type=1400 audit(49.956:1595): avc: denied { map_create } for pid=5386 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.074421][ T29] audit: type=1400 audit(49.956:1596): avc: denied { map_read map_write } for pid=5386 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 50.093576][ T29] audit: type=1400 audit(49.966:1597): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.117141][ T29] audit: type=1400 audit(49.966:1598): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.334703][ T5411] syz_tun: entered allmulticast mode [ 50.346838][ T5410] syz_tun: left allmulticast mode [ 51.390863][ T5504] netlink: 'syz.3.811': attribute type 15 has an invalid length. [ 51.403560][ T5504] vxlan0: entered promiscuous mode [ 51.409429][ T147] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.419284][ T147] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.430916][ T147] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.439182][ T147] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.259667][ T5589] netlink: 'syz.0.856': attribute type 15 has an invalid length. [ 52.267597][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 52.279817][ T5591] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 52.281621][ T5589] vxlan0: entered promiscuous mode [ 52.286339][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.299295][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 52.302243][ T67] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.314008][ T67] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.323371][ T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.337316][ T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.470038][ T5612] loop4: detected capacity change from 0 to 4096 [ 52.482069][ T5612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.497842][ T5612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.523109][ T5616] __nla_validate_parse: 10 callbacks suppressed [ 52.523122][ T5616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 52.550421][ T10] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 53.039797][ T5594] vhci_hcd: connection reset by peer [ 53.045499][ T147] vhci_hcd: stop threads [ 53.049804][ T147] vhci_hcd: release socket [ 53.054253][ T147] vhci_hcd: disconnect device [ 53.600040][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.607343][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.652186][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.663095][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.689005][ T1815] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.700103][ T1815] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.709672][ T1815] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.742659][ T1815] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.880041][ T5667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.876'. [ 54.280384][ T3390] vhci_hcd: vhci_device speed not set [ 54.371161][ T5677] openvswitch: netlink: Message has 6 unknown bytes. [ 54.584722][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 54.598007][ T5708] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 54.604595][ T5708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.612253][ T5708] vhci_hcd vhci_hcd.0: Device attached [ 54.849902][ T5719] netlink: 'syz.3.897': attribute type 5 has an invalid length. [ 54.857875][ T9] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 54.889267][ T5722] vxlan0: left promiscuous mode [ 54.895382][ T3434] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.904039][ T3434] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.912742][ T3434] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 54.921493][ T3434] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.353944][ T5725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.899'. [ 55.362967][ T5725] unsupported nlmsg_type 40 [ 55.372165][ T5709] vhci_hcd: connection reset by peer [ 55.391376][ T51] vhci_hcd: stop threads [ 55.395657][ T51] vhci_hcd: release socket [ 55.400082][ T51] vhci_hcd: disconnect device [ 55.496441][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 55.496454][ T29] audit: type=1400 audit(55.476:2022): avc: denied { create } for pid=5734 comm="syz.0.904" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.526186][ T5735] block device autoloading is deprecated and will be removed. [ 55.536823][ T29] audit: type=1400 audit(55.506:2023): avc: denied { write } for pid=5734 comm="syz.0.904" name="file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.558530][ T29] audit: type=1400 audit(55.506:2024): avc: denied { open } for pid=5734 comm="syz.0.904" path="/158/file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.580566][ T29] audit: type=1400 audit(55.516:2025): avc: denied { ioctl } for pid=5734 comm="syz.0.904" path="/158/file0" dev="tmpfs" ino=827 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.605518][ T29] audit: type=1400 audit(55.516:2026): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 55.652936][ T5741] geneve2: entered promiscuous mode [ 55.658299][ T5741] geneve2: entered allmulticast mode [ 55.660815][ T29] audit: type=1400 audit(55.646:2027): avc: denied { read write } for pid=5744 comm="syz.1.908" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.686875][ T29] audit: type=1400 audit(55.646:2028): avc: denied { open } for pid=5744 comm="syz.1.908" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.687199][ T5745] program syz.1.908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.728524][ T5743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 55.737215][ T29] audit: type=1400 audit(55.666:2029): avc: denied { ioctl } for pid=5744 comm="syz.1.908" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.761853][ T5745] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.806109][ T29] audit: type=1400 audit(55.786:2030): avc: denied { write } for pid=5746 comm="syz.3.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.904131][ T29] audit: type=1400 audit(55.886:2031): avc: denied { create } for pid=5756 comm="syz.3.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.979857][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 56.103364][ T5794] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.148208][ T5804] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.157527][ T5802] IPv4: Oversized IP packet from 127.202.26.0 [ 56.334547][ T5846] netlink: 96 bytes leftover after parsing attributes in process `syz.2.948'. [ 56.382945][ T2992] ================================================================== [ 56.391071][ T2992] BUG: KCSAN: data-race in dont_mount / step_into [ 56.397499][ T2992] [ 56.399840][ T2992] read-write to 0xffff88810b5fb0c0 of 4 bytes by task 3487 on cpu 1: [ 56.407902][ T2992] dont_mount+0x2a/0x40 [ 56.412046][ T2992] vfs_unlink+0x28f/0x420 [ 56.416358][ T2992] do_unlinkat+0x24e/0x480 [ 56.420756][ T2992] __x64_sys_unlink+0x2e/0x40 [ 56.425436][ T2992] x64_sys_call+0x2dc0/0x2ff0 [ 56.430094][ T2992] do_syscall_64+0xd2/0x200 [ 56.434584][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.440456][ T2992] [ 56.442762][ T2992] read to 0xffff88810b5fb0c0 of 4 bytes by task 2992 on cpu 0: [ 56.450283][ T2992] step_into+0xe3/0x820 [ 56.454424][ T2992] walk_component+0x162/0x220 [ 56.459087][ T2992] path_lookupat+0xfe/0x2a0 [ 56.463577][ T2992] filename_lookup+0x147/0x340 [ 56.468327][ T2992] do_readlinkat+0x7d/0x320 [ 56.472807][ T2992] __x64_sys_readlink+0x47/0x60 [ 56.477644][ T2992] x64_sys_call+0x28da/0x2ff0 [ 56.482310][ T2992] do_syscall_64+0xd2/0x200 [ 56.486803][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.492675][ T2992] [ 56.494978][ T2992] value changed: 0x00300080 -> 0x00004080 [ 56.500677][ T2992] [ 56.502979][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 56.509106][ T2992] CPU: 0 UID: 0 PID: 2992 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.518376][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.528409][ T2992] ================================================================== [ 57.640416][ T10] vhci_hcd: vhci_device speed not set [ 59.960388][ T9] vhci_hcd: vhci_device speed not set