last executing test programs: 4.919925126s ago: executing program 4 (id=1205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2db, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8000f, 0xa0002f6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 4.81208446s ago: executing program 4 (id=1207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x20000, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x0, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'caif0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c044}, 0x34000884) 4.433475497s ago: executing program 4 (id=1221): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$cdc_ncm(0x3, 0xf3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.927633492s ago: executing program 2 (id=1256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r3, 0x0, 0x400000}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4e, 0x0, 0x0, 0xffffffeffffffffd, 0x1000000000000000}, {0x800, 0x0, 0x7fffffff, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3c0}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001"], 0x254}}, 0x0) 2.926694882s ago: executing program 2 (id=1258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) 2.862894795s ago: executing program 2 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r2, 0x4) 2.777935378s ago: executing program 2 (id=1263): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.05013483s ago: executing program 3 (id=1280): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 1.953753605s ago: executing program 3 (id=1282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) 1.885323408s ago: executing program 2 (id=1284): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) sendmmsg(r0, 0x0, 0x0, 0x0) 1.884655498s ago: executing program 3 (id=1285): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) 1.845870889s ago: executing program 3 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r0, 0x0, 0x4}, 0x18) r2 = syz_io_uring_setup(0xd4, &(0x7f00000005c0)={0x0, 0x445a5, 0x400, 0x0, 0x12d}, &(0x7f0000000580)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d33, 0x0, @fd=r1, 0x0, 0x0, 0x1, 0xb}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.788030202s ago: executing program 3 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.468824716s ago: executing program 3 (id=1289): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 651.392361ms ago: executing program 2 (id=1300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) tee(r3, r5, 0x4e, 0x0) 424.532191ms ago: executing program 1 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f10500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) 418.045681ms ago: executing program 0 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80004000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x1}}, 0x1c}}, 0x20000050) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='children\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x50000563) splice(r0, 0x0, r1, 0x0, 0x39000, 0x3) 381.641103ms ago: executing program 0 (id=1306): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 337.721275ms ago: executing program 1 (id=1307): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="789a", 0x2, 0x4044081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x8, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 311.986856ms ago: executing program 0 (id=1308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 293.272807ms ago: executing program 1 (id=1309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 241.396419ms ago: executing program 1 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f6, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 217.99916ms ago: executing program 4 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0xfff1, 0xd}, {0xffe0, 0xfff1}}}, 0x24}}, 0x40004) 185.578531ms ago: executing program 0 (id=1312): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 106.306865ms ago: executing program 4 (id=1313): syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000200)) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 101.423745ms ago: executing program 1 (id=1314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r3) accept4(r2, 0x0, 0x0, 0x80800) 73.041536ms ago: executing program 1 (id=1315): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xc9bc, 0x8, 0x2, 0x801ef}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 47.916208ms ago: executing program 0 (id=1316): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x400, 0x40206, 0x11e}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 46.791038ms ago: executing program 4 (id=1317): r0 = syz_usb_connect$uac1(0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r3, 0x4) 0s ago: executing program 0 (id=1318): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x1) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) fcntl$getown(r0, 0x9) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 3310] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.313499][ T29] audit: type=1400 audit(1765402829.782:71): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.400478][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.325507][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.416027][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.436938][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.457011][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.464171][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.471308][ T3317] bridge_slave_0: entered allmulticast mode [ 36.478162][ T3317] bridge_slave_0: entered promiscuous mode [ 36.487660][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.494801][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.502072][ T3317] bridge_slave_1: entered allmulticast mode [ 36.508633][ T3317] bridge_slave_1: entered promiscuous mode [ 36.554232][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.577908][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.616509][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.623600][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.630880][ T3319] bridge_slave_0: entered allmulticast mode [ 36.637402][ T3319] bridge_slave_0: entered promiscuous mode [ 36.652322][ T3317] team0: Port device team_slave_0 added [ 36.658083][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.665226][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.672659][ T3319] bridge_slave_1: entered allmulticast mode [ 36.679270][ T3319] bridge_slave_1: entered promiscuous mode [ 36.708866][ T3317] team0: Port device team_slave_1 added [ 36.719527][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.728348][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.735480][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.742725][ T3323] bridge_slave_0: entered allmulticast mode [ 36.749152][ T3323] bridge_slave_0: entered promiscuous mode [ 36.765257][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.781422][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.788556][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.795748][ T3323] bridge_slave_1: entered allmulticast mode [ 36.802128][ T3323] bridge_slave_1: entered promiscuous mode [ 36.814146][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.843376][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.850377][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.876434][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.894518][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.904916][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.914318][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.921295][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.947293][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.969318][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.981935][ T3319] team0: Port device team_slave_0 added [ 37.002864][ T3319] team0: Port device team_slave_1 added [ 37.029034][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.036235][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.043512][ T3318] bridge_slave_0: entered allmulticast mode [ 37.050075][ T3318] bridge_slave_0: entered promiscuous mode [ 37.059146][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.066350][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.073741][ T3318] bridge_slave_1: entered allmulticast mode [ 37.080040][ T3318] bridge_slave_1: entered promiscuous mode [ 37.087152][ T3323] team0: Port device team_slave_0 added [ 37.110835][ T3323] team0: Port device team_slave_1 added [ 37.121800][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.128775][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.154738][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.180118][ T3317] hsr_slave_0: entered promiscuous mode [ 37.186166][ T3317] hsr_slave_1: entered promiscuous mode [ 37.192410][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.199395][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.225401][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.242207][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.265140][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.274579][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.281576][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.307499][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.323853][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.330921][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.338230][ T3324] bridge_slave_0: entered allmulticast mode [ 37.344738][ T3324] bridge_slave_0: entered promiscuous mode [ 37.362058][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.369041][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.394990][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.411783][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.418926][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.426258][ T3324] bridge_slave_1: entered allmulticast mode [ 37.432722][ T3324] bridge_slave_1: entered promiscuous mode [ 37.439943][ T3318] team0: Port device team_slave_0 added [ 37.461395][ T3318] team0: Port device team_slave_1 added [ 37.495295][ T3319] hsr_slave_0: entered promiscuous mode [ 37.501346][ T3319] hsr_slave_1: entered promiscuous mode [ 37.507244][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.512976][ T3319] Cannot create hsr debugfs directory [ 37.521872][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.531411][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.538416][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.564366][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.583435][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.598432][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.605488][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.631462][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.650392][ T3323] hsr_slave_0: entered promiscuous mode [ 37.656507][ T3323] hsr_slave_1: entered promiscuous mode [ 37.662395][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.668166][ T3323] Cannot create hsr debugfs directory [ 37.692672][ T3324] team0: Port device team_slave_0 added [ 37.703358][ T3324] team0: Port device team_slave_1 added [ 37.762382][ T3318] hsr_slave_0: entered promiscuous mode [ 37.768483][ T3318] hsr_slave_1: entered promiscuous mode [ 37.774525][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.780260][ T3318] Cannot create hsr debugfs directory [ 37.788564][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.795583][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.821604][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.841771][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.848763][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.874712][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.956473][ T3324] hsr_slave_0: entered promiscuous mode [ 37.962499][ T3324] hsr_slave_1: entered promiscuous mode [ 37.968482][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.974245][ T3324] Cannot create hsr debugfs directory [ 38.006736][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.023576][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.037821][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.046541][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.105694][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.124906][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.139274][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.152920][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.183293][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.194832][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.209952][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.219318][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.243328][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.255724][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.275809][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.290164][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.307003][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.317665][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.328819][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.338092][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.389648][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.399860][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.422011][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.436167][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.453478][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.460563][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.473837][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.480917][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.489570][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.496637][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.515927][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.523213][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.535966][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.569766][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.585448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.592593][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.608578][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.615718][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.630058][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.653376][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.663582][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.691760][ T2428] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.698966][ T2428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.721199][ T2428] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.728432][ T2428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.738227][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.763039][ T2428] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.770172][ T2428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.791865][ T2428] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.799168][ T2428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.809583][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.836120][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.892965][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.962553][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.038874][ T3319] veth0_vlan: entered promiscuous mode [ 39.062837][ T3319] veth1_vlan: entered promiscuous mode [ 39.074505][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.087411][ T3317] veth0_vlan: entered promiscuous mode [ 39.093959][ T3323] veth0_vlan: entered promiscuous mode [ 39.106022][ T3323] veth1_vlan: entered promiscuous mode [ 39.113981][ T3317] veth1_vlan: entered promiscuous mode [ 39.149471][ T3323] veth0_macvtap: entered promiscuous mode [ 39.161889][ T3319] veth0_macvtap: entered promiscuous mode [ 39.169842][ T3323] veth1_macvtap: entered promiscuous mode [ 39.179326][ T3319] veth1_macvtap: entered promiscuous mode [ 39.186613][ T3324] veth0_vlan: entered promiscuous mode [ 39.209693][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.218134][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.225914][ T3324] veth1_vlan: entered promiscuous mode [ 39.246760][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.255448][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.262938][ T3317] veth0_macvtap: entered promiscuous mode [ 39.276299][ T3317] veth1_macvtap: entered promiscuous mode [ 39.294746][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.310851][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.319783][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.331105][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.345456][ T361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.354529][ T3324] veth0_macvtap: entered promiscuous mode [ 39.362143][ T3324] veth1_macvtap: entered promiscuous mode [ 39.375528][ T361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.386785][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.398367][ T361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.413953][ T361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.424676][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.441397][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.457773][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 39.457789][ T29] audit: type=1400 audit(1765402835.042:87): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.xxpNPh/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.465582][ T3318] veth0_vlan: entered promiscuous mode [ 39.494092][ T29] audit: type=1400 audit(1765402835.042:88): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.516076][ T29] audit: type=1400 audit(1765402835.042:89): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.xxpNPh/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.541310][ T29] audit: type=1400 audit(1765402835.042:90): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.563184][ T29] audit: type=1400 audit(1765402835.042:91): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.xxpNPh/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.589889][ T29] audit: type=1400 audit(1765402835.042:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.xxpNPh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.617410][ T29] audit: type=1400 audit(1765402835.042:93): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.638181][ T29] audit: type=1400 audit(1765402835.092:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.638970][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.660942][ T29] audit: type=1400 audit(1765402835.092:95): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.702198][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.721983][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.730890][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.740512][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.754306][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.768133][ T29] audit: type=1400 audit(1765402835.352:96): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.802685][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.812357][ T3318] veth1_vlan: entered promiscuous mode [ 39.824582][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.839661][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.862577][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903934][ T3318] veth0_macvtap: entered promiscuous mode [ 39.915702][ T3318] veth1_macvtap: entered promiscuous mode [ 39.940991][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.971171][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.069991][ T1735] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.079690][ T1735] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.104508][ T1735] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.114036][ T1735] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.427262][ T3523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 40.436175][ T3523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8'. [ 40.453107][ T3527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.609050][ T3539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 40.637952][ T3539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 40.670793][ T3539] Zero length message leads to an empty skb [ 40.729668][ T3548] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19'. [ 40.819804][ T3557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 41.050193][ T3577] netlink: 204 bytes leftover after parsing attributes in process `syz.1.31'. [ 41.060052][ T3576] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 41.188437][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.36'. [ 41.197744][ T3590] netlink: 'syz.0.36': attribute type 7 has an invalid length. [ 41.205756][ T3590] netlink: 'syz.0.36': attribute type 8 has an invalid length. [ 41.213407][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 41.356446][ T3595] netlink: 'syz.1.38': attribute type 10 has an invalid length. [ 41.364180][ T3595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.38'. [ 41.367072][ C0] hrtimer: interrupt took 55106 ns [ 41.382219][ T3595] ipvlan2: entered promiscuous mode [ 41.395128][ T3595] bridge0: port 3(ipvlan2) entered blocking state [ 41.401725][ T3595] bridge0: port 3(ipvlan2) entered disabled state [ 41.422228][ T3595] ipvlan2: entered allmulticast mode [ 41.427713][ T3595] bridge0: entered allmulticast mode [ 41.446050][ T3595] ipvlan2: left allmulticast mode [ 41.451146][ T3595] bridge0: left allmulticast mode [ 41.815134][ T3609] loop3: detected capacity change from 0 to 512 [ 41.816060][ T3606] netlink: 'syz.1.44': attribute type 27 has an invalid length. [ 41.851633][ T3609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.865524][ T3609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.995840][ T3609] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.069618][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.077160][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.105444][ T3609] EXT4-fs (loop3): 1 truncate cleaned up [ 42.114339][ T3609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.234567][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.278388][ T3606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.310546][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.507586][ T53] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.529428][ T53] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.592077][ T53] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.652135][ T53] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.919185][ T3637] Set syz1 is full, maxelem 65536 reached [ 43.092001][ T3665] tmpfs: Bad value for 'mpol' [ 44.115273][ T3707] veth1_to_bond: entered allmulticast mode [ 44.179191][ T3706] veth1_to_bond: left allmulticast mode [ 44.314427][ T3718] loop4: detected capacity change from 0 to 1024 [ 44.358111][ T3718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.416296][ T3718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.508123][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 44.508143][ T29] audit: type=1400 audit(1765402840.092:213): avc: denied { map } for pid=3717 comm="syz.4.84" path="/14/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.537340][ T29] audit: type=1400 audit(1765402840.092:214): avc: denied { execute } for pid=3717 comm="syz.4.84" path="/14/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.816652][ T29] audit: type=1400 audit(1765402840.232:215): avc: denied { shutdown } for pid=3727 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.836507][ T29] audit: type=1400 audit(1765402840.232:216): avc: denied { write } for pid=3727 comm="syz.0.87" lport=56264 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 44.875174][ T3732] netlink: 'syz.0.88': attribute type 3 has an invalid length. [ 44.933378][ T29] audit: type=1400 audit(1765402840.512:217): avc: denied { bind } for pid=3733 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.218170][ T29] audit: type=1400 audit(1765402840.802:218): avc: denied { mount } for pid=3741 comm="syz.3.93" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 45.286104][ T29] audit: type=1400 audit(1765402840.852:219): avc: denied { read write } for pid=3745 comm="syz.3.96" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.311194][ T29] audit: type=1400 audit(1765402840.852:220): avc: denied { open } for pid=3745 comm="syz.3.96" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.335090][ T29] audit: type=1400 audit(1765402840.852:221): avc: denied { create } for pid=3745 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.354351][ T29] audit: type=1400 audit(1765402840.852:222): avc: denied { write } for pid=3745 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 45.488843][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.824858][ T3780] __nla_validate_parse: 1 callbacks suppressed [ 45.824874][ T3780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.110'. [ 45.831302][ T3777] loop1: detected capacity change from 0 to 1024 [ 45.988003][ T3777] EXT4-fs: inline encryption not supported [ 45.993897][ T3777] EXT4-fs: Ignoring removed orlov option [ 46.014905][ T3777] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 46.263832][ T3789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 46.480751][ T3777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 46.490801][ T3777] System zones: 0-1, 3-12 [ 46.505185][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.515323][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.535719][ T3777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.624282][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.098532][ T3844] SELinux: failed to load policy [ 47.183598][ T3862] loop0: detected capacity change from 0 to 512 [ 47.200380][ T3862] EXT4-fs: Ignoring removed i_version option [ 47.206496][ T3862] EXT4-fs: Ignoring removed bh option [ 47.279590][ T3862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.319315][ T3873] loop2: detected capacity change from 0 to 128 [ 47.401263][ T3862] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.556041][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.671425][ T3884] netlink: 'syz.0.152': attribute type 1 has an invalid length. [ 47.706398][ T3884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.732096][ T3887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 47.773148][ T3887] bond1 (unregistering): Released all slaves [ 48.154108][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 48.353036][ T3984] bridge: RTM_NEWNEIGH with invalid ether address [ 48.650492][ T3997] 9p: Bad value for 'wfdno' [ 48.787838][ T4001] loop2: detected capacity change from 0 to 164 [ 48.826695][ T4001] isofs_fill_super: root inode is not a directory. Corrupted media? [ 49.035899][ T4008] ip6t_srh: unknown srh match flags 4000 [ 49.046042][ T4010] netlink: 'syz.1.184': attribute type 30 has an invalid length. [ 49.402062][ T4028] loop1: detected capacity change from 0 to 128 [ 49.558063][ T4035] netlink: 204 bytes leftover after parsing attributes in process `syz.4.194'. [ 49.795291][ T4047] syz.1.199 uses obsolete (PF_INET,SOCK_PACKET) [ 49.804272][ T4047] capability: warning: `syz.1.199' uses 32-bit capabilities (legacy support in use) [ 49.833974][ T4050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4050 comm=syz.4.200 [ 49.853708][ T4050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 50.242533][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 50.242549][ T29] audit: type=1326 audit(1765402845.822:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.276279][ T29] audit: type=1326 audit(1765402845.822:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.299639][ T29] audit: type=1326 audit(1765402845.822:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.322990][ T29] audit: type=1326 audit(1765402845.822:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.346839][ T29] audit: type=1326 audit(1765402845.822:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.370149][ T29] audit: type=1326 audit(1765402845.822:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.393512][ T29] audit: type=1326 audit(1765402845.842:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.422425][ T29] audit: type=1326 audit(1765402846.012:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.445791][ T29] audit: type=1326 audit(1765402846.012:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.520178][ T29] audit: type=1326 audit(1765402846.102:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 50.552602][ T4064] loop1: detected capacity change from 0 to 2048 [ 50.590391][ T4064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.684913][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.750959][ T4080] ip6gre1: entered promiscuous mode [ 50.989914][ T4084] loop1: detected capacity change from 0 to 512 [ 51.129731][ T4084] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.212: error while reading EA inode 32 err=-116 [ 51.251334][ T4084] EXT4-fs (loop1): Remounting filesystem read-only [ 51.265412][ T4084] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 51.396738][ T4084] EXT4-fs (loop1): 1 orphan inode deleted [ 51.433579][ T4084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.506984][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.575556][ T4114] tipc: Started in network mode [ 51.580600][ T4114] tipc: Node identity ac14140f, cluster identity 4711 [ 51.587913][ T4114] tipc: New replicast peer: 255.255.255.255 [ 51.594072][ T4114] tipc: Enabled bearer , priority 10 [ 51.604774][ T4116] loop2: detected capacity change from 0 to 128 [ 51.648145][ T4119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'. [ 51.681935][ T4124] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 51.737963][ T4116] syz.2.227: attempt to access beyond end of device [ 51.737963][ T4116] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 51.764255][ T4121] loop4: detected capacity change from 0 to 2048 [ 51.808555][ T3309] loop4: p2 p3 p7 [ 51.844011][ T4121] loop4: p2 p3 p7 [ 51.982862][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 51.983078][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.005683][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 52.077663][ T4146] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 52.097935][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 52.098286][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 52.110693][ T4143] udevd[4143]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.177026][ T4142] loop4: detected capacity change from 0 to 8192 [ 52.213570][ T4151] netlink: 'syz.1.241': attribute type 15 has an invalid length. [ 52.221468][ T4151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'. [ 52.246132][ T4142] loop4: p1 p2 p3 p4 [ 52.251900][ T4142] loop4: p3 start 331777 is beyond EOD, truncated [ 52.259292][ T4142] loop4: p4 size 262144 extends beyond EOD, truncated [ 52.407728][ T4160] loop1: detected capacity change from 0 to 1024 [ 52.445954][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.448630][ T3572] udevd[3572]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 52.461702][ T4143] udevd[4143]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 52.496841][ T4160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.533065][ T4168] vlan2: entered allmulticast mode [ 52.541969][ T4160] netlink: 14 bytes leftover after parsing attributes in process `syz.1.246'. [ 52.733950][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.809167][ T3392] tipc: Node number set to 2886997007 [ 53.250655][ T4199] veth0_to_batadv: entered promiscuous mode [ 53.258406][ T4199] macvtap1: entered allmulticast mode [ 53.263899][ T4199] veth0_to_batadv: entered allmulticast mode [ 53.290349][ T4199] veth0_to_batadv: left allmulticast mode [ 53.296209][ T4199] veth0_to_batadv: left promiscuous mode [ 53.381818][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 53.615862][ T4217] ip6gre1: entered allmulticast mode [ 53.950547][ T4230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.006282][ T4230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.072167][ T4230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.089743][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 54.122584][ T4230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.230937][ T4237] syz.1.279 (4237) used greatest stack depth: 10192 bytes left [ 54.249702][ T3957] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.287494][ T3957] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.310380][ T3957] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.342719][ T3957] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.353066][ T4243] loop3: detected capacity change from 0 to 1024 [ 54.367101][ T4243] ======================================================= [ 54.367101][ T4243] WARNING: The mand mount option has been deprecated and [ 54.367101][ T4243] and is ignored by this kernel. Remove the mand [ 54.367101][ T4243] option from the mount to silence this warning. [ 54.367101][ T4243] ======================================================= [ 54.402558][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 54.406220][ T4243] EXT4-fs: Ignoring removed nobh option [ 54.411408][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 54.453227][ T4243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.528267][ T4259] syz.2.289 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.798434][ T4280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'. [ 54.909505][ T4264] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.282: Allocating blocks 497-513 which overlap fs metadata [ 54.924675][ T4281] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 54.932447][ T4281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.297'. [ 54.951825][ T4281] veth1_vlan: left promiscuous mode [ 54.958439][ T4281] batman_adv: batadv0: Adding interface: veth1_vlan [ 54.965208][ T4281] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.992474][ T4264] EXT4-fs (loop3): pa ffff888107ab00e0: logic 256, phys. 385, len 8 [ 55.000631][ T4264] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 55.009859][ T4281] batman_adv: batadv0: Interface activated: veth1_vlan [ 55.121902][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.165766][ T4299] process 'syz.4.305' launched '/dev/fd/6' with NULL argv: empty string added [ 55.279629][ T4311] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 55.302684][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 55.302703][ T29] audit: type=1400 audit(1765402850.882:472): avc: denied { block_suspend } for pid=4310 comm="syz.4.309" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.449847][ T29] audit: type=1400 audit(1765402851.032:473): avc: denied { create } for pid=4321 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.473462][ T29] audit: type=1400 audit(1765402851.052:474): avc: denied { write } for pid=4321 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.533911][ T4322] infiniband syz!: set active [ 55.538673][ T4322] infiniband syz!: added team_slave_0 [ 55.579674][ T4322] RDS/IB: syz!: added [ 55.586522][ T4322] smc: adding ib device syz! with port count 1 [ 55.592882][ T4322] smc: ib device syz! port 1 has no pnetid [ 55.644556][ T4329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 55.703428][ T29] audit: type=1326 audit(1765402851.282:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1295c365e7 code=0x7ffc0000 [ 55.726203][ T29] audit: type=1326 audit(1765402851.282:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1295bdb829 code=0x7ffc0000 [ 55.748996][ T29] audit: type=1326 audit(1765402851.282:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1295c365e7 code=0x7ffc0000 [ 55.772482][ T29] audit: type=1326 audit(1765402851.282:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1295bdb829 code=0x7ffc0000 [ 55.795340][ T29] audit: type=1326 audit(1765402851.282:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1295c365e7 code=0x7ffc0000 [ 55.818075][ T29] audit: type=1326 audit(1765402851.282:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1295bdb829 code=0x7ffc0000 [ 55.840913][ T29] audit: type=1326 audit(1765402851.282:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1295c365e7 code=0x7ffc0000 [ 56.171079][ T4356] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 56.219577][ T4356] bond1: entered promiscuous mode [ 56.231469][ T4356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.304317][ T4355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.378254][ T4355] bond1: (slave bond2): making interface the new active one [ 56.385729][ T4355] bond2: entered promiscuous mode [ 56.414575][ T4355] bond1: (slave bond2): Enslaving as an active interface with an up link [ 56.579522][ T4374] veth0_to_batadv: entered promiscuous mode [ 56.608910][ T4374] macvtap1: entered allmulticast mode [ 56.614433][ T4374] veth0_to_batadv: entered allmulticast mode [ 56.621623][ T4379] loop0: detected capacity change from 0 to 1024 [ 56.640459][ T4379] EXT4-fs: inline encryption not supported [ 56.675842][ T4374] veth0_to_batadv: left allmulticast mode [ 56.681740][ T4374] veth0_to_batadv: left promiscuous mode [ 56.778521][ T4379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.948600][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.958624][ T4389] bridge0: port 3(gretap0) entered blocking state [ 56.965226][ T4389] bridge0: port 3(gretap0) entered disabled state [ 56.971927][ T4389] gretap0: entered allmulticast mode [ 56.983785][ T4389] gretap0: entered promiscuous mode [ 56.989376][ T4389] bridge0: port 3(gretap0) entered blocking state [ 56.995870][ T4389] bridge0: port 3(gretap0) entered forwarding state [ 57.007388][ T4389] gretap0: left allmulticast mode [ 57.012525][ T4389] gretap0: left promiscuous mode [ 57.017792][ T4389] bridge0: port 3(gretap0) entered disabled state [ 57.119766][ T4397] __nla_validate_parse: 4 callbacks suppressed [ 57.119785][ T4397] netlink: 14 bytes leftover after parsing attributes in process `syz.3.346'. [ 57.192880][ T4397] hsr_slave_0: left promiscuous mode [ 57.212376][ T4397] hsr_slave_1: left promiscuous mode [ 57.420806][ T4413] ref_ctr_offset mismatch. inode: 0x16f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000180 [ 57.493502][ T4418] loop4: detected capacity change from 0 to 1024 [ 57.507230][ T4418] EXT4-fs: inline encryption not supported [ 57.531796][ T4418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.606130][ T4433] loop1: detected capacity change from 0 to 1024 [ 57.613242][ T4433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.625088][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.654387][ T4433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.007394][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.228804][ T4473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 58.237904][ T4473] netlink: 196 bytes leftover after parsing attributes in process `syz.3.375'. [ 58.254593][ T4469] loop0: detected capacity change from 0 to 8192 [ 58.264123][ T4473] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 58.284888][ T4473] netlink: 196 bytes leftover after parsing attributes in process `syz.3.375'. [ 58.329941][ T4476] loop2: detected capacity change from 0 to 1024 [ 58.337422][ T4476] EXT4-fs: Ignoring removed nobh option [ 58.362922][ T4476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.958958][ T4506] bridge0: port 3(gretap0) entered blocking state [ 58.965768][ T4506] bridge0: port 3(gretap0) entered disabled state [ 58.972504][ T4506] gretap0: entered allmulticast mode [ 58.979270][ T4506] gretap0: entered promiscuous mode [ 58.997733][ T4506] bridge0: port 3(gretap0) entered blocking state [ 59.000497][ T4509] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.004261][ T4506] bridge0: port 3(gretap0) entered listening state [ 59.024695][ T4512] gretap0: left allmulticast mode [ 59.029892][ T4512] gretap0: left promiscuous mode [ 59.035409][ T4512] bridge0: port 3(gretap0) entered disabled state [ 59.103081][ T4492] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.376: Allocating blocks 497-513 which overlap fs metadata [ 59.126835][ T4517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.198014][ T4521] loop1: detected capacity change from 0 to 2048 [ 59.208932][ T4517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.265496][ T4521] loop1: p2 p3 p7 [ 59.274403][ T4492] EXT4-fs (loop2): pa ffff8881079db150: logic 256, phys. 385, len 8 [ 59.282465][ T4492] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 59.317309][ T4517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.378092][ T4517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.440621][ T3958] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.459905][ T3958] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.481409][ T3958] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.493843][ T3958] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.529888][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.706752][ T4547] SELinux: ebitmap: truncated map [ 59.712433][ T4547] SELinux: failed to load policy [ 59.922177][ T4557] loop3: detected capacity change from 0 to 2048 [ 60.007872][ T4557] loop3: p2 p3 p7 [ 60.076734][ T4560] loop3: detected capacity change from 0 to 164 [ 60.098336][ T4560] isofs_fill_super: root inode is not a directory. Corrupted media? [ 60.135920][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 60.201114][ T4566] loop1: detected capacity change from 0 to 1024 [ 60.208683][ T4566] EXT4-fs: Ignoring removed nobh option [ 60.235839][ T4566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.250659][ T4565] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.251446][ T4570] xt_hashlimit: max too large, truncated to 1048576 [ 60.291270][ T4572] loop4: detected capacity change from 0 to 128 [ 60.314937][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 60.314955][ T29] audit: type=1326 audit(1765402855.902:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.355892][ T4565] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.361009][ T4572] syz.4.413: attempt to access beyond end of device [ 60.361009][ T4572] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 60.393658][ T29] audit: type=1326 audit(1765402855.902:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.416898][ T29] audit: type=1326 audit(1765402855.902:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.440224][ T29] audit: type=1326 audit(1765402855.902:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.463503][ T29] audit: type=1326 audit(1765402855.912:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.486773][ T29] audit: type=1326 audit(1765402855.912:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.510021][ T29] audit: type=1326 audit(1765402855.922:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.533396][ T29] audit: type=1326 audit(1765402855.922:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.556792][ T29] audit: type=1326 audit(1765402855.922:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.580017][ T29] audit: type=1326 audit(1765402855.922:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4571 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 60.653550][ T4565] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.686643][ T4580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.425'. [ 60.726938][ T4565] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.788173][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.811794][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.833607][ T4581] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.411: Allocating blocks 497-513 which overlap fs metadata [ 60.850526][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.869096][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.881245][ T4581] EXT4-fs (loop1): pa ffff888107ab01c0: logic 256, phys. 385, len 8 [ 60.889391][ T4581] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 60.938642][ T4591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 61.087926][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.108238][ T4598] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 61.122311][ T4598] bond1: entered promiscuous mode [ 61.127772][ T4598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.173042][ T4598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.182074][ T4598] bond1: (slave bond2): making interface the new active one [ 61.189465][ T4598] bond2: entered promiscuous mode [ 61.195895][ T4598] bond1: (slave bond2): Enslaving as an active interface with an up link [ 61.313989][ T4622] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.356381][ T4622] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.405872][ T4622] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.510672][ T4622] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.541042][ T4643] netlink: 'syz.3.453': attribute type 21 has an invalid length. [ 61.541136][ T4648] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 61.553939][ T4643] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 61.564428][ T4643] netlink: 144 bytes leftover after parsing attributes in process `syz.3.453'. [ 61.596161][ T4648] bond1: entered promiscuous mode [ 61.603928][ T4648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.649268][ T4648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.658013][ T4648] bond1: (slave bond2): making interface the new active one [ 61.665560][ T4648] bond2: entered promiscuous mode [ 61.695179][ T4648] bond1: (slave bond2): Enslaving as an active interface with an up link [ 61.761219][ T4657] bridge0: port 3(gretap0) entered blocking state [ 61.767804][ T4657] bridge0: port 3(gretap0) entered disabled state [ 61.779281][ T4657] gretap0: entered allmulticast mode [ 61.809690][ T4657] gretap0: entered promiscuous mode [ 61.816642][ T4657] bridge0: port 3(gretap0) entered blocking state [ 61.823155][ T4657] bridge0: port 3(gretap0) entered forwarding state [ 61.831650][ T4660] gretap0: left allmulticast mode [ 61.839222][ T4660] gretap0: left promiscuous mode [ 61.844406][ T4660] bridge0: port 3(gretap0) entered disabled state [ 62.068287][ T4675] loop1: detected capacity change from 0 to 512 [ 62.096527][ T4675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.109661][ T4675] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.161198][ T4675] EXT4-fs (loop1): shut down requested (0) [ 62.169149][ T4675] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 62.178937][ T4675] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 62.187849][ T4675] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 62.207741][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.602886][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 62.611961][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'. [ 62.919836][ T4696] Set syz1 is full, maxelem 65536 reached [ 63.028454][ T4702] loop1: detected capacity change from 0 to 8192 [ 63.179133][ T4723] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 63.594441][ T4757] netlink: 'syz.3.484': attribute type 12 has an invalid length. [ 63.803663][ T4771] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.866874][ T4773] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.881753][ T4771] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.965871][ T4771] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.986386][ T3920] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.002888][ T3920] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.020162][ T3920] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.030754][ T4771] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.072607][ T3920] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.199563][ T4793] mmap: syz.0.502 (4793) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.512343][ T3920] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.532434][ T3920] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.553929][ T3920] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.562177][ T3920] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.616629][ T4813] bridge0: port 3(gretap0) entered blocking state [ 64.623171][ T4813] bridge0: port 3(gretap0) entered disabled state [ 64.656571][ T4813] gretap0: entered allmulticast mode [ 64.672802][ T4813] gretap0: entered promiscuous mode [ 64.681646][ T4816] gretap0: left allmulticast mode [ 64.686783][ T4816] gretap0: left promiscuous mode [ 64.692622][ T4816] bridge0: port 3(gretap0) entered disabled state [ 65.011799][ T4828] netlink: 'syz.2.516': attribute type 12 has an invalid length. [ 65.210534][ T4845] netlink: 204 bytes leftover after parsing attributes in process `syz.4.521'. [ 65.239006][ T4847] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.650986][ T4887] loop4: detected capacity change from 0 to 1024 [ 65.658435][ T4887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.668738][ T4887] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.679741][ T4887] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.694604][ T4887] JBD2: no valid journal superblock found [ 65.700366][ T4887] EXT4-fs (loop4): Could not load journal inode [ 65.746292][ T4895] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.805133][ T4900] loop0: detected capacity change from 0 to 764 [ 65.813286][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 65.813302][ T29] audit: type=1400 audit(1765402861.392:809): avc: denied { mount } for pid=4899 comm="syz.0.541" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 65.820151][ T4895] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.856809][ T4900] rock: directory entry would overflow storage [ 65.863041][ T4900] rock: sig=0x4f50, size=4, remaining=3 [ 65.868716][ T4900] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 65.890750][ T29] audit: type=1400 audit(1765402861.472:810): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 65.926790][ T29] audit: type=1326 audit(1765402861.512:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 65.955905][ T29] audit: type=1326 audit(1765402861.542:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 65.979280][ T29] audit: type=1326 audit(1765402861.542:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 66.002753][ T29] audit: type=1326 audit(1765402861.542:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 66.026009][ T29] audit: type=1326 audit(1765402861.542:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 66.049297][ T29] audit: type=1326 audit(1765402861.542:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 66.072586][ T29] audit: type=1326 audit(1765402861.542:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 66.095957][ T29] audit: type=1326 audit(1765402861.542:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4904 comm="syz.0.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 66.121269][ T4895] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.185405][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 66.217688][ T4895] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.276056][ T4916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.547'. [ 66.342821][ T3958] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.370027][ T3958] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.397873][ T3958] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.440569][ T3958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.610757][ T4927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.660205][ T4935] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.805647][ T4948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.560'. [ 66.866248][ T4955] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.905808][ T4955] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.965592][ T4955] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.006003][ T4955] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.587804][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 68.729032][ T3506] IPVS: starting estimator thread 0... [ 68.742472][ T5033] loop3: detected capacity change from 0 to 1024 [ 68.756050][ T5033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.773365][ T5033] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.599'. [ 68.785101][ T5033] netlink: zone id is out of range [ 68.790272][ T5033] netlink: zone id is out of range [ 68.795563][ T5033] netlink: zone id is out of range [ 68.800785][ T5033] netlink: del zone limit has 8 unknown bytes [ 68.843859][ T5032] IPVS: using max 1776 ests per chain, 88800 per kthread [ 68.859316][ T5047] loop4: detected capacity change from 0 to 1024 [ 68.866314][ T5047] EXT4-fs: Ignoring removed nobh option [ 68.877870][ T5047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.891470][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.298860][ T5056] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.604: Allocating blocks 497-513 which overlap fs metadata [ 69.313672][ T5056] EXT4-fs (loop4): pa ffff888107ab0070: logic 256, phys. 385, len 8 [ 69.321710][ T5056] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 69.475647][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.602248][ T5115] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.628141][ T5117] bridge0: port 3(gretap0) entered blocking state [ 69.634772][ T5117] bridge0: port 3(gretap0) entered disabled state [ 69.641444][ T5117] gretap0: entered allmulticast mode [ 69.647389][ T5117] gretap0: entered promiscuous mode [ 69.653065][ T5117] bridge0: port 3(gretap0) entered blocking state [ 69.659556][ T5117] bridge0: port 3(gretap0) entered forwarding state [ 69.671819][ T5117] gretap0: left allmulticast mode [ 69.676943][ T5117] gretap0: left promiscuous mode [ 69.682049][ T5117] bridge0: port 3(gretap0) entered disabled state [ 69.713633][ T5122] netlink: 228 bytes leftover after parsing attributes in process `syz.4.628'. [ 69.722706][ T5122] unsupported nla_type 55437 [ 69.732224][ T5124] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 69.747266][ T5124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.760961][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 69.772491][ T5124] bond3 (unregistering): Released all slaves [ 69.948350][ T5139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 69.957775][ T5139] IPVS: Error connecting to the multicast addr [ 70.092898][ T5147] veth0_to_team: entered promiscuous mode [ 70.108782][ T5149] bridge0: port 3(gretap0) entered blocking state [ 70.115516][ T5149] bridge0: port 3(gretap0) entered disabled state [ 70.122240][ T5149] gretap0: entered allmulticast mode [ 70.128352][ T5149] gretap0: entered promiscuous mode [ 70.135602][ T5149] bridge0: port 3(gretap0) entered blocking state [ 70.142114][ T5149] bridge0: port 3(gretap0) entered listening state [ 70.152981][ T5149] gretap0: left allmulticast mode [ 70.158351][ T5149] gretap0: left promiscuous mode [ 70.163445][ T5149] bridge0: port 3(gretap0) entered disabled state [ 70.271885][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 70.283401][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'. [ 70.336106][ T5163] loop4: detected capacity change from 0 to 1024 [ 70.356440][ T5163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.371738][ T5163] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.645'. [ 70.381183][ T5163] netlink: zone id is out of range [ 70.386379][ T5163] netlink: zone id is out of range [ 70.391584][ T5163] netlink: zone id is out of range [ 70.396779][ T5163] netlink: del zone limit has 8 unknown bytes [ 70.453510][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.498041][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.649'. [ 70.590733][ T3920] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.610298][ T3920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.625922][ T3920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.634773][ T3920] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.834554][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 70.834570][ T29] audit: type=1326 audit(1765402866.422:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 70.877977][ T29] audit: type=1326 audit(1765402866.442:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 70.901433][ T29] audit: type=1326 audit(1765402866.442:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5191 comm="syz.1.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee9c5f749 code=0x7ffc0000 [ 70.924819][ T29] audit: type=1326 audit(1765402866.462:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 70.979433][ T29] audit: type=1326 audit(1765402866.492:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 71.002983][ T29] audit: type=1326 audit(1765402866.492:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 71.100434][ T5206] loop4: detected capacity change from 0 to 1024 [ 71.107315][ T5206] EXT4-fs: Ignoring removed nobh option [ 71.112918][ T5206] EXT4-fs: Ignoring removed bh option [ 71.130907][ T5206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.149765][ T5206] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.662: Allocating blocks 385-513 which overlap fs metadata [ 71.154110][ T29] audit: type=1326 audit(1765402866.732:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 71.193366][ T5206] EXT4-fs (loop4): pa ffff8881079db5b0: logic 16, phys. 129, len 24 [ 71.201489][ T5206] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 71.211696][ T29] audit: type=1326 audit(1765402866.782:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 71.235240][ T29] audit: type=1326 audit(1765402866.782:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 71.258623][ T29] audit: type=1326 audit(1765402866.782:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5210 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdcb91ef749 code=0x7ffc0000 [ 71.296086][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.318016][ T5215] @0Ù: renamed from bond_slave_1 (while UP) [ 71.344252][ T5219] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 71.386293][ T5219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.398620][ T5227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 71.485071][ T5227] bond1 (unregistering): Released all slaves [ 71.506184][ T5238] tipc: New replicast peer: 255.255.255.255 [ 71.512275][ T5238] tipc: Enabled bearer , priority 10 [ 71.519199][ T5238] tipc: Disabling bearer [ 71.758196][ T5244] debugfs: 'netdev@ffff88811c97e558' already exists in 'ref_tracker' [ 71.914483][ T5261] loop1: detected capacity change from 0 to 1024 [ 71.922130][ T5261] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.934920][ T5261] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.681: Invalid block bitmap block 0 in block_group 0 [ 71.949815][ T5261] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.681: Failed to acquire dquot type 0 [ 71.962490][ T5261] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.681: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.976625][ T5261] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.681: Invalid inode bitmap blk 0 in block_group 0 [ 71.989790][ T5261] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 71.998616][ T3958] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:50: Failed to release dquot type 0 [ 72.010312][ T5261] EXT4-fs (loop1): 1 orphan inode deleted [ 72.019984][ T5261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.054437][ T5261] syz.1.681 (5261) used greatest stack depth: 9216 bytes left [ 72.074064][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.532581][ T5303] loop0: detected capacity change from 0 to 1024 [ 72.549390][ T5303] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.562638][ T5303] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.699: Invalid block bitmap block 0 in block_group 0 [ 72.578075][ T5303] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.699: Failed to acquire dquot type 0 [ 72.590078][ T5303] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.699: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.604694][ T5303] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.699: Invalid inode bitmap blk 0 in block_group 0 [ 72.617752][ T5303] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 72.626638][ T3943] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 0 [ 72.626967][ T5303] EXT4-fs (loop0): 1 orphan inode deleted [ 72.638421][ T5307] loop1: detected capacity change from 0 to 512 [ 72.651270][ T5307] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.663368][ T5303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.678364][ T5307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.703109][ T5307] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.701: lblock 23 mapped to illegal pblock 18 (length 1) [ 72.743508][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.753382][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.795375][ T5319] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.845770][ T5319] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.891846][ T5327] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.904406][ T5331] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.917844][ T5319] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.016304][ T5331] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.030189][ T5319] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.068540][ T5331] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.098432][ T3958] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.114842][ T3958] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.126091][ T3958] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.136071][ T5331] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.150554][ T3958] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.204861][ T3958] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.242376][ T3958] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.279785][ T3958] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.293810][ T3958] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.360353][ T5341] loop3: detected capacity change from 0 to 1024 [ 73.371232][ T5341] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.385769][ T5341] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.714: Invalid block bitmap block 0 in block_group 0 [ 73.399670][ T5341] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.714: Failed to acquire dquot type 0 [ 73.411383][ T5341] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.714: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.425383][ T5341] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.714: Invalid inode bitmap blk 0 in block_group 0 [ 73.438230][ T5341] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 73.447721][ T3958] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:50: Failed to release dquot type 0 [ 73.459858][ T5341] EXT4-fs (loop3): 1 orphan inode deleted [ 73.466365][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.499490][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.558331][ T5354] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 73.569121][ T5352] loop0: detected capacity change from 0 to 1024 [ 73.569562][ T5356] loop4: detected capacity change from 0 to 256 [ 73.580892][ T5352] EXT4-fs: Ignoring removed nobh option [ 73.590344][ T5354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.599967][ T5356] __nla_validate_parse: 7 callbacks suppressed [ 73.599986][ T5356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.720'. [ 73.605223][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 73.634254][ T5352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.635997][ T5354] bond3 (unregistering): Released all slaves [ 73.670124][ T5361] tipc: Started in network mode [ 73.675109][ T5361] tipc: Node identity ac14140f, cluster identity 4711 [ 73.700684][ T5361] tipc: New replicast peer: 255.255.255.255 [ 73.706929][ T5361] tipc: Enabled bearer , priority 10 [ 73.734053][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.721'. [ 73.742975][ T5361] tipc: Disabling bearer [ 73.924465][ T5363] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.719: Allocating blocks 497-513 which overlap fs metadata [ 73.949985][ T5363] EXT4-fs (loop0): pa ffff8881079db5b0: logic 256, phys. 385, len 8 [ 73.958091][ T5363] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 74.089938][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.202217][ T5375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'. [ 74.295223][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 74.326161][ T5384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.730'. [ 74.657559][ T5409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.695961][ T5409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.735689][ T5409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.826947][ T5409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.895071][ T3957] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.907856][ T3957] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.920231][ T3957] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.931783][ T3957] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.099921][ T5428] loop0: detected capacity change from 0 to 128 [ 75.210168][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 75.329893][ T5439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 75.836943][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 75.871859][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.763'. [ 76.154928][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 76.154947][ T29] audit: type=1326 audit(1765402871.742:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.160787][ T5514] loop0: detected capacity change from 0 to 164 [ 76.161253][ T29] audit: type=1326 audit(1765402871.742:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.161283][ T29] audit: type=1326 audit(1765402871.742:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.161359][ T29] audit: type=1326 audit(1765402871.742:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.261169][ T29] audit: type=1326 audit(1765402871.742:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.284588][ T29] audit: type=1326 audit(1765402871.742:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.307965][ T29] audit: type=1326 audit(1765402871.742:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.331374][ T29] audit: type=1326 audit(1765402871.742:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.354833][ T29] audit: type=1326 audit(1765402871.742:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.378301][ T29] audit: type=1326 audit(1765402871.742:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5513 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 76.378549][ T5514] ISOFS: unable to read i-node block [ 76.407186][ T5514] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 76.923881][ T5605] netlink: 'syz.1.789': attribute type 1 has an invalid length. [ 77.820710][ T5731] team0: Port device team_slave_1 removed [ 77.848556][ T5735] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.895819][ T5735] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.959806][ T5735] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.036445][ T5735] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.103889][ T3962] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.136945][ T3962] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.153654][ T3962] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.169499][ T3962] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.428675][ T5778] team1: entered promiscuous mode [ 78.433842][ T5778] team1: entered allmulticast mode [ 78.439499][ T5778] 8021q: adding VLAN 0 to HW filter on device team1 [ 79.391587][ T5835] __nla_validate_parse: 3 callbacks suppressed [ 79.391605][ T5835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 79.424444][ T5835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.465685][ T5835] macvlan2: entered promiscuous mode [ 79.471131][ T5835] macvlan2: entered allmulticast mode [ 79.478793][ T5835] bond1: (slave macvlan2): Opening slave failed [ 79.731588][ T5852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 79.876601][ T5866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 79.910945][ T5870] loop1: detected capacity change from 0 to 512 [ 79.926612][ T5870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.944452][ T5870] EXT4-fs (loop1): 1 truncate cleaned up [ 79.950635][ T5870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.035552][ T5876] serio: Serial port ptm0 [ 80.113051][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.158845][ T1044] kernel write not supported for file bpf-prog (pid: 1044 comm: kworker/0:2) [ 80.296952][ T5902] netlink: 'syz.3.890': attribute type 29 has an invalid length. [ 80.347026][ T5911] netlink: 'syz.3.890': attribute type 29 has an invalid length. [ 80.359586][ T5910] loop2: detected capacity change from 0 to 512 [ 80.373764][ T5911] netlink: 500 bytes leftover after parsing attributes in process `syz.3.890'. [ 80.393326][ T5910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.446885][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 80.482392][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.499995][ T5921] macvlan2: entered promiscuous mode [ 80.503113][ T5910] EXT4-fs (loop2): 1 truncate cleaned up [ 80.505381][ T5921] macvlan2: entered allmulticast mode [ 80.517879][ T5921] bond1: (slave macvlan2): Opening slave failed [ 80.521683][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.767599][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.972217][ T5892] Set syz1 is full, maxelem 65536 reached [ 81.066364][ T5943] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 81.074193][ T5943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.906'. [ 81.141104][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.910'. [ 81.188927][ T5949] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 81.200557][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.207787][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.220827][ T5955] ref_ctr_offset mismatch. inode: 0x433 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000380 [ 81.240222][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 81.264201][ T5958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 81.295974][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 81.359679][ T5958] macvlan2: entered promiscuous mode [ 81.365173][ T5958] macvlan2: entered allmulticast mode [ 81.371910][ T5958] bond3: (slave macvlan2): Opening slave failed [ 81.388861][ T5962] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 81.410053][ T5962] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 81.499343][ T5962] netlink: 500 bytes leftover after parsing attributes in process `syz.2.913'. [ 81.510746][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 81.510761][ T29] audit: type=1400 audit(1765402877.102:1866): avc: denied { write } for pid=5970 comm="syz.3.916" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 81.574754][ T29] audit: type=1400 audit(1765402877.162:1867): avc: denied { write } for pid=5970 comm="syz.3.916" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 81.861971][ T5991] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 81.943979][ T5991] bond3: entered promiscuous mode [ 81.953507][ T29] audit: type=1326 audit(1765402877.532:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 81.983908][ T5991] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.055921][ T29] audit: type=1326 audit(1765402877.572:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 82.079559][ T29] audit: type=1326 audit(1765402877.572:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 82.102912][ T29] audit: type=1326 audit(1765402877.572:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 82.126325][ T29] audit: type=1326 audit(1765402877.572:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.0.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 82.134956][ T5991] bond3: (slave bridge1): making interface the new active one [ 82.157216][ T5991] bridge1: entered promiscuous mode [ 82.205233][ T5991] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 82.398576][ T6007] ip6gre1: entered allmulticast mode [ 82.427924][ T6003] lo speed is unknown, defaulting to 1000 [ 82.455200][ T6003] lo speed is unknown, defaulting to 1000 [ 82.468691][ T6003] lo speed is unknown, defaulting to 1000 [ 82.525791][ T29] audit: type=1400 audit(1765402878.112:1873): avc: denied { relabelfrom } for pid=6014 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 82.545793][ T29] audit: type=1400 audit(1765402878.112:1874): avc: denied { relabelto } for pid=6014 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 82.565822][ T6011] loop3: detected capacity change from 0 to 4096 [ 82.585100][ T6003] infiniband syz1: set active [ 82.589855][ T6003] infiniband syz1: added lo [ 82.594427][ T3510] lo speed is unknown, defaulting to 1000 [ 82.610199][ T6003] RDS/IB: syz1: added [ 82.614520][ T6003] smc: adding ib device syz1 with port count 1 [ 82.620855][ T6003] smc: ib device syz1 port 1 has no pnetid [ 82.627028][ T3510] lo speed is unknown, defaulting to 1000 [ 82.633420][ T6003] lo speed is unknown, defaulting to 1000 [ 82.633751][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.673946][ T6019] loop0: detected capacity change from 0 to 1024 [ 82.681002][ T6019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.692838][ T29] audit: type=1326 audit(1765402878.252:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6018 comm="syz.0.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 82.716756][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.726121][ T6019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 82.735569][ T6019] System zones: 0-1, 3-36 [ 82.743479][ T6019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.773032][ T6003] lo speed is unknown, defaulting to 1000 [ 82.838114][ T6003] lo speed is unknown, defaulting to 1000 [ 82.857513][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.877706][ T6003] lo speed is unknown, defaulting to 1000 [ 82.957662][ T6003] lo speed is unknown, defaulting to 1000 [ 83.187214][ T6073] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 84.124904][ T6145] ip6gre1: entered allmulticast mode [ 84.190161][ T6155] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 84.233592][ T6155] macvlan2: entered promiscuous mode [ 84.238973][ T6155] macvlan2: entered allmulticast mode [ 84.255106][ T6155] bond4: entered promiscuous mode [ 84.269787][ T6155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.282684][ T6155] bond4: left promiscuous mode [ 84.360668][ T6176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 84.418848][ T6176] macvlan2: entered promiscuous mode [ 84.424339][ T6176] macvlan2: entered allmulticast mode [ 84.451861][ T6176] bond5: (slave macvlan2): Opening slave failed [ 84.874465][ T6239] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.063570][ T6247] lo speed is unknown, defaulting to 1000 [ 86.333752][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.334209][ T6167] Bluetooth: hci0: command 0x1003 tx timeout [ 86.373696][ T6261] __nla_validate_parse: 3 callbacks suppressed [ 86.373715][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 86.460629][ T6261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.484168][ T6273] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 86.497714][ T6261] macvlan2: entered promiscuous mode [ 86.503078][ T6261] macvlan2: entered allmulticast mode [ 86.510361][ T6261] bond3: (slave macvlan2): Opening slave failed [ 86.527660][ T6273] bond2: entered promiscuous mode [ 86.533172][ T6273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.566013][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 86.566031][ T29] audit: type=1326 audit(1765402882.152:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.652706][ T6273] bond2: (slave bridge1): making interface the new active one [ 86.660384][ T6273] bridge1: entered promiscuous mode [ 86.699718][ T29] audit: type=1326 audit(1765402882.192:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.723210][ T29] audit: type=1326 audit(1765402882.192:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.746796][ T29] audit: type=1326 audit(1765402882.192:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.766414][ T6273] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 86.770232][ T29] audit: type=1326 audit(1765402882.192:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.802289][ T29] audit: type=1326 audit(1765402882.192:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.825863][ T29] audit: type=1326 audit(1765402882.192:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.849193][ T29] audit: type=1326 audit(1765402882.202:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.873032][ T29] audit: type=1326 audit(1765402882.202:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.897265][ T29] audit: type=1326 audit(1765402882.202:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 86.924669][ T6282] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 87.042722][ T6294] loop2: detected capacity change from 0 to 512 [ 87.049594][ T6294] ext2: Bad value for 'max_batch_time' [ 87.158564][ T6303] loop0: detected capacity change from 0 to 1024 [ 87.215926][ T6303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.252471][ T6303] EXT4-fs error (device loop0): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.0.995: path /220/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 87.369751][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.509570][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 87.565002][ T6337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 87.577823][ T6341] macvlan2: entered promiscuous mode [ 87.583346][ T6341] macvlan2: entered allmulticast mode [ 87.608643][ T6341] bond6: (slave macvlan2): Opening slave failed [ 87.682298][ T6345] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 87.753007][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.775126][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.794016][ T6345] macvlan2: entered promiscuous mode [ 87.799366][ T6345] macvlan2: entered allmulticast mode [ 87.824166][ T6345] bond4: entered promiscuous mode [ 87.841583][ T6345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 87.877641][ T6345] bond4: left promiscuous mode [ 88.397246][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'. [ 88.460839][ T6363] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1020'. [ 88.704336][ T6361] lo speed is unknown, defaulting to 1000 [ 88.819333][ T6378] loop1: detected capacity change from 0 to 1024 [ 88.832707][ T6378] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.843697][ T6378] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 88.916141][ T6378] JBD2: no valid journal superblock found [ 88.921975][ T6378] EXT4-fs (loop1): Could not load journal inode [ 88.951687][ T6376] lo speed is unknown, defaulting to 1000 [ 88.961666][ T6378] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 89.140648][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 89.263799][ T6381] netlink: 'syz.3.1027': attribute type 30 has an invalid length. [ 89.316537][ T6396] bridge: RTM_NEWNEIGH with invalid ether address [ 89.371814][ T6398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.394291][ T6398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.508588][ T6413] loop1: detected capacity change from 0 to 2048 [ 89.519199][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 89.528195][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 89.537173][ T6415] netlink: 'syz.4.1043': attribute type 6 has an invalid length. [ 89.545879][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 89.554986][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 89.563994][ T6415] netlink: 'syz.4.1043': attribute type 6 has an invalid length. [ 89.583422][ T6413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 89.719865][ T6413] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.736633][ T6413] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 682 with error 28 [ 89.749265][ T6413] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.749265][ T6413] [ 89.758964][ T6413] EXT4-fs (loop1): Total free blocks count 0 [ 89.765009][ T6413] EXT4-fs (loop1): Free/Dirty block details [ 89.770993][ T6413] EXT4-fs (loop1): free_blocks=2415919104 [ 89.776814][ T6413] EXT4-fs (loop1): dirty_blocks=688 [ 89.782073][ T6413] EXT4-fs (loop1): Block reservation details [ 89.788143][ T6413] EXT4-fs (loop1): i_reserved_data_blocks=43 [ 89.841971][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 89.973969][ T6436] loop0: detected capacity change from 0 to 256 [ 90.036724][ T3962] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 54 with max blocks 628 with error 28 [ 90.297982][ T6453] vlan2: entered allmulticast mode [ 90.345729][ T6462] loop4: detected capacity change from 0 to 1024 [ 90.355789][ T6462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.421510][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.502814][ T6477] loop1: detected capacity change from 0 to 1024 [ 90.510635][ T6476] loop4: detected capacity change from 0 to 512 [ 90.536131][ T6476] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1062: couldn't read orphan inode 26 (err -116) [ 90.537260][ T6477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.562498][ T6476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.575802][ T6476] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.619836][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.646181][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.100869][ T6506] loop1: detected capacity change from 0 to 256 [ 91.247592][ T6519] loop2: detected capacity change from 0 to 1024 [ 91.295699][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.343299][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.477790][ T6535] Set syz1 is full, maxelem 6117 reached [ 91.695972][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 91.695987][ T29] audit: type=1400 audit(1765402887.282:2248): avc: denied { setopt } for pid=6543 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.801457][ T6551] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.870373][ T29] audit: type=1400 audit(1765402887.442:2249): avc: denied { getopt } for pid=6554 comm="syz.4.1099" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.006707][ T6561] __nla_validate_parse: 7 callbacks suppressed [ 92.006723][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 92.196954][ T29] audit: type=1400 audit(1765402887.782:2250): avc: denied { mounton } for pid=6571 comm="syz.2.1107" path="/202/file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 92.278400][ T6578] batman_adv: batadv0: Adding interface: dummy0 [ 92.284843][ T6578] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.334811][ T6578] batman_adv: batadv0: Interface activated: dummy0 [ 92.344018][ T29] audit: type=1400 audit(1765402887.922:2251): avc: denied { ioctl } for pid=6577 comm="syz.2.1109" path="socket:[16269]" dev="sockfs" ino=16269 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.373788][ T6581] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.380143][ T6580] batadv0: mtu less than device minimum [ 92.386798][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.397934][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.402231][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 92.408990][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.428418][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.439512][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.450417][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.461558][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.472672][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.483865][ T6580] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.516848][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.541850][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.564335][ T6586] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 92.571440][ T6586] batman_adv: batadv0: Removing interface: veth1_vlan [ 92.932843][ T29] audit: type=1326 audit(1765402888.512:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 92.958669][ T29] audit: type=1326 audit(1765402888.512:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 92.982159][ T29] audit: type=1326 audit(1765402888.512:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 93.005669][ T29] audit: type=1326 audit(1765402888.512:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 93.029156][ T29] audit: type=1326 audit(1765402888.512:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 93.052569][ T29] audit: type=1326 audit(1765402888.512:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1295c3f749 code=0x7ffc0000 [ 93.460025][ T6643] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 94.039593][ T6671] netlink: 'syz.4.1141': attribute type 30 has an invalid length. [ 95.203416][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 95.212437][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 95.223278][ T6690] batman_adv: batadv0: Adding interface: dummy0 [ 95.229588][ T6690] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.257494][ T6690] batman_adv: batadv0: Interface activated: dummy0 [ 95.305136][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1152'. [ 95.317211][ T6696] IPVS: Error connecting to the multicast addr [ 95.709538][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 96.579239][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 96.593636][ T6731] team2: entered promiscuous mode [ 96.598744][ T6731] team2: entered allmulticast mode [ 97.111600][ T6734] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1162'. [ 97.320602][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 97.320620][ T29] audit: type=1400 audit(1765402892.902:2292): avc: denied { bind } for pid=6739 comm="syz.0.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.411840][ T6744] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 97.419663][ T6744] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 97.427421][ T6744] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1168'. [ 97.447351][ T6744] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 97.455166][ T6744] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 97.462901][ T6744] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1168'. [ 97.653976][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 97.659502][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 97.682427][ T29] audit: type=1326 audit(1765402893.262:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682460][ T29] audit: type=1326 audit(1765402893.262:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682511][ T29] audit: type=1326 audit(1765402893.262:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682537][ T29] audit: type=1326 audit(1765402893.262:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682580][ T29] audit: type=1326 audit(1765402893.262:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682613][ T29] audit: type=1326 audit(1765402893.262:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682706][ T29] audit: type=1326 audit(1765402893.262:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682747][ T29] audit: type=1326 audit(1765402893.262:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.682779][ T29] audit: type=1326 audit(1765402893.262:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6757 comm="syz.4.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc75cbbf749 code=0x7ffc0000 [ 97.934784][ T6767] loop4: detected capacity change from 0 to 1024 [ 98.023828][ T6768] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.030884][ T6767] EXT4-fs: Ignoring removed orlov option [ 98.040164][ T6770] lo speed is unknown, defaulting to 1000 [ 98.050464][ T6770] lo speed is unknown, defaulting to 1000 [ 98.056797][ T6770] lo speed is unknown, defaulting to 1000 [ 98.057104][ T6770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.057652][ T6770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.081757][ T6767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.085175][ T6767] SELinux: failed to load policy [ 98.101810][ T6770] lo speed is unknown, defaulting to 1000 [ 98.108029][ T6770] lo speed is unknown, defaulting to 1000 [ 98.114247][ T6770] lo speed is unknown, defaulting to 1000 [ 98.120409][ T6770] lo speed is unknown, defaulting to 1000 [ 98.126859][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.126991][ T6770] lo speed is unknown, defaulting to 1000 [ 98.230311][ T6778] netlink: 'syz.2.1181': attribute type 30 has an invalid length. [ 98.414579][ T6794] loop1: detected capacity change from 0 to 128 [ 98.510126][ T6800] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1191'. [ 98.599230][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'. [ 98.615314][ T6803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.684234][ T6809] loop2: detected capacity change from 0 to 512 [ 98.716572][ T6809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.764455][ T6809] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.859245][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.977427][ T6845] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.046058][ T6845] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.103192][ T6855] loop1: detected capacity change from 0 to 256 [ 99.110409][ T6855] vfat: Unknown parameter 'uni_xl1' [ 99.117551][ T6845] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.174374][ T6845] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.270670][ T3920] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.282758][ T3920] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.306032][ T3920] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.326131][ T3920] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.345971][ T6875] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.385262][ T6875] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.435512][ T6875] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.496218][ T6875] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.978849][ T6921] loop2: detected capacity change from 0 to 512 [ 100.004812][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1235'. [ 100.013948][ T6921] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1235'. [ 100.044867][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1235'. [ 100.295917][ T6965] ref_ctr_offset mismatch. inode: 0x4cb offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 100.348521][ T6976] netlink: 'syz.2.1243': attribute type 7 has an invalid length. [ 100.433206][ T6991] veth1_to_bond: entered allmulticast mode [ 100.439247][ T6988] loop1: detected capacity change from 0 to 512 [ 100.439762][ T6991] veth1_to_bond: left allmulticast mode [ 100.469675][ T6988] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 100.478629][ T6988] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.1245: iget: bad i_size value: 12154757448730 [ 100.492318][ T6988] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1245: couldn't read orphan inode 13 (err -117) [ 100.505139][ T6988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.527407][ T6988] ip6t_srh: unknown srh match flags 4000 [ 100.549634][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.630398][ T7022] netlink: 'syz.1.1251': attribute type 30 has an invalid length. [ 100.849046][ T7059] veth2: entered promiscuous mode [ 100.854236][ T7059] veth2: entered allmulticast mode [ 101.021203][ T7089] loop1: detected capacity change from 0 to 1024 [ 101.034799][ T7089] EXT4-fs: inline encryption not supported [ 101.040703][ T7089] EXT4-fs: Ignoring removed orlov option [ 101.060292][ T7089] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.085769][ T7089] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 101.102904][ T7089] System zones: 0-1, 3-12 [ 101.110549][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.162490][ T7104] SELinux: ebitmap: truncated map [ 101.170088][ T7089] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.177710][ T7089] vhci_hcd vhci_hcd.2: invalid port number 96 [ 101.183894][ T7089] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 101.192510][ T7104] SELinux: failed to load policy [ 101.263472][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.767852][ T7141] veth4: entered promiscuous mode [ 101.773042][ T7141] veth4: entered allmulticast mode [ 101.896171][ T7149] net_ratelimit: 31 callbacks suppressed [ 101.896185][ T7149] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 102.104757][ T7157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.112219][ T7157] batadv0: mtu less than device minimum [ 102.118576][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.129814][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.140917][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.151906][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.162937][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.173818][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.184675][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.195715][ T7157] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.214840][ T7157] batadv_slave_0: entered promiscuous mode [ 102.393945][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 102.393962][ T29] audit: type=1400 audit(1765402897.982:2799): avc: denied { read } for pid=7158 comm="syz.0.1299" path="socket:[17354]" dev="sockfs" ino=17354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.505841][ T29] audit: type=1400 audit(1765402898.092:2800): avc: denied { open } for pid=7170 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.527280][ T7176] __nla_validate_parse: 7 callbacks suppressed [ 102.527297][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'. [ 102.564983][ T29] audit: type=1400 audit(1765402898.092:2801): avc: denied { kernel } for pid=7170 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.625069][ T29] audit: type=1400 audit(1765402898.182:2802): avc: denied { read } for pid=7170 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.645473][ T29] audit: type=1400 audit(1765402898.182:2803): avc: denied { firmware_load } for pid=7170 comm="syz.1.1290" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 102.933316][ T29] audit: type=1400 audit(1765402898.512:2804): avc: denied { create } for pid=7218 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.954085][ T29] audit: type=1400 audit(1765402898.532:2805): avc: denied { setopt } for pid=7218 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.974053][ T29] audit: type=1400 audit(1765402898.532:2806): avc: denied { bind } for pid=7218 comm="syz.1.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.045873][ T29] audit: type=1400 audit(1765402898.602:2807): avc: denied { create } for pid=7225 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.065603][ T29] audit: type=1400 audit(1765402898.602:2808): avc: denied { connect } for pid=7225 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.271386][ T7252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7252 comm=syz.0.1301 [ 103.307334][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 103.364617][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1304'. [ 103.393579][ T7266] gtp0: entered promiscuous mode [ 103.401522][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 103.491998][ T3943] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.516530][ T3943] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.534285][ T3943] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.548958][ T3943] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.943290][ T7346] ================================================================== [ 103.951430][ T7346] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 103.960080][ T7346] [ 103.962420][ T7346] write to 0xffff88810afa85e8 of 8 bytes by task 7337 on cpu 1: [ 103.970066][ T7346] shmem_file_splice_read+0x470/0x600 [ 103.975463][ T7346] splice_direct_to_actor+0x26f/0x680 [ 103.980840][ T7346] do_splice_direct+0xda/0x150 [ 103.985618][ T7346] do_sendfile+0x380/0x650 [ 103.990064][ T7346] __x64_sys_sendfile64+0x105/0x150 [ 103.995292][ T7346] x64_sys_call+0x2db1/0x3000 [ 103.999981][ T7346] do_syscall_64+0xd8/0x2a0 [ 104.004519][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.010434][ T7346] [ 104.012761][ T7346] write to 0xffff88810afa85e8 of 8 bytes by task 7346 on cpu 0: [ 104.020404][ T7346] shmem_file_splice_read+0x470/0x600 [ 104.025818][ T7346] splice_direct_to_actor+0x26f/0x680 [ 104.031235][ T7346] do_splice_direct+0xda/0x150 [ 104.036022][ T7346] do_sendfile+0x380/0x650 [ 104.040464][ T7346] __x64_sys_sendfile64+0x105/0x150 [ 104.045689][ T7346] x64_sys_call+0x2db1/0x3000 [ 104.050394][ T7346] do_syscall_64+0xd8/0x2a0 [ 104.054926][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.060841][ T7346] [ 104.063169][ T7346] value changed: 0x0000000000002376 -> 0x0000000000002377 [ 104.070291][ T7346] [ 104.072621][ T7346] Reported by Kernel Concurrency Sanitizer on: [ 104.078807][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.0.1318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.088543][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.098609][ T7346] ================================================================== [ 104.133126][ T7329] lo speed is unknown, defaulting to 1000 [ 104.173380][ T7329] lo speed is unknown, defaulting to 1000 [ 104.223743][ T7337] ================================================================== [ 104.231883][ T7337] BUG: KCSAN: data-race in touch_atime / touch_atime [ 104.238597][ T7337] [ 104.240936][ T7337] write to 0xffff88811fb70c90 of 4 bytes by task 7346 on cpu 0: [ 104.248585][ T7337] touch_atime+0x1e8/0x340 [ 104.253024][ T7337] shmem_file_splice_read+0x5b1/0x600 [ 104.258436][ T7337] splice_direct_to_actor+0x26f/0x680 [ 104.263840][ T7337] do_splice_direct+0xda/0x150 [ 104.268627][ T7337] do_sendfile+0x380/0x650 [ 104.273063][ T7337] __x64_sys_sendfile64+0x105/0x150 [ 104.278280][ T7337] x64_sys_call+0x2db1/0x3000 [ 104.282983][ T7337] do_syscall_64+0xd8/0x2a0 [ 104.287512][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.293429][ T7337] [ 104.295758][ T7337] read to 0xffff88811fb70c90 of 4 bytes by task 7337 on cpu 1: [ 104.303311][ T7337] touch_atime+0x194/0x340 [ 104.307753][ T7337] shmem_file_splice_read+0x5b1/0x600 [ 104.313150][ T7337] splice_direct_to_actor+0x26f/0x680 [ 104.318538][ T7337] do_splice_direct+0xda/0x150 [ 104.323334][ T7337] do_sendfile+0x380/0x650 [ 104.327768][ T7337] __x64_sys_sendfile64+0x105/0x150 [ 104.332982][ T7337] x64_sys_call+0x2db1/0x3000 [ 104.337671][ T7337] do_syscall_64+0xd8/0x2a0 [ 104.342215][ T7337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.348120][ T7337] [ 104.350444][ T7337] value changed: 0x2fd7de03 -> 0x30707484 [ 104.356158][ T7337] [ 104.358484][ T7337] Reported by Kernel Concurrency Sanitizer on: [ 104.364637][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.0.1318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.374362][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.384444][ T7337] ==================================================================