last executing test programs: 1.600889566s ago: executing program 3 (id=2828): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) 1.565341136s ago: executing program 3 (id=2830): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 1.512800738s ago: executing program 3 (id=2833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.200720302s ago: executing program 1 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) 891.383976ms ago: executing program 0 (id=2867): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x1, @mcast1, 0x7}, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, r1, 0x2d7e}}, 0x5c) 872.360447ms ago: executing program 0 (id=2869): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 840.435787ms ago: executing program 0 (id=2872): r0 = fsopen(&(0x7f0000000580)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) close(r0) 817.471617ms ago: executing program 0 (id=2873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0xc, 0x8, 0x0, 0x1f, 0x4204, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 769.527548ms ago: executing program 2 (id=2876): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$UHID_INPUT(r0, &(0x7f00000030c0)={0xfc, {"a2e3ad09ed1809f91b5e071887f70e09d09be7ff7fc6e5539b0d430a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b5002895ae7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe67380e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f072ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0528c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58cba1118e32126596e1cd7655b904801784c416b22133d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830053fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279f07000000935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c71552439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e501000000b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00", 0x1000}}, 0x1006) 728.499999ms ago: executing program 2 (id=2877): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r2, r0, 0x0) 669.12954ms ago: executing program 2 (id=2878): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) 668.43535ms ago: executing program 2 (id=2889): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 662.00059ms ago: executing program 3 (id=2879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x840) 641.37024ms ago: executing program 3 (id=2880): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000002b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = io_uring_setup(0x1f38, &(0x7f0000000100)={0x0, 0x631d, 0x800, 0x0, 0x61}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 616.58116ms ago: executing program 0 (id=2882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 616.35552ms ago: executing program 3 (id=2883): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 616.17522ms ago: executing program 2 (id=2884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 581.637831ms ago: executing program 0 (id=2885): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 567.968501ms ago: executing program 4 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}}, 0x8000) 469.162763ms ago: executing program 4 (id=2887): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x605f}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_DIRECT_QLEN={0x1, 0x5, 0xa9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) 468.797423ms ago: executing program 4 (id=2888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 448.144683ms ago: executing program 4 (id=2890): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x2040400) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@nodiscard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@abort}, {@grpquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r0, &(0x7f0000000480)='2', 0x1, 0x8080c64) 423.457184ms ago: executing program 2 (id=2891): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 403.512804ms ago: executing program 4 (id=2901): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 357.070805ms ago: executing program 4 (id=2902): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x1, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000000)) 356.654425ms ago: executing program 1 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 278.871326ms ago: executing program 1 (id=2893): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x22008000, &(0x7f0000000000)={0xa, 0x4e24, 0x10000007, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x2000000}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 171.162647ms ago: executing program 1 (id=2894): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) 4.98129ms ago: executing program 1 (id=2895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES16], 0x48) 0s ago: executing program 1 (id=2896): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) kernel console output (not intermixed with test programs): 5507][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.932238][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.954030][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.962406][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.989796][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.002690][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.012901][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.041121][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.056306][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.076585][ T3314] hsr_slave_0: entered promiscuous mode [ 31.083666][ T3314] hsr_slave_1: entered promiscuous mode [ 31.090862][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.098759][ T3314] Cannot create hsr debugfs directory [ 31.147983][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.159656][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.184707][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.196088][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.223779][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.232419][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.252095][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.267669][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.306668][ T3325] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.319680][ T3325] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.329635][ T3325] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.346427][ T3325] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.386432][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.395720][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.405387][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.418027][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.430081][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.446424][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.466661][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.474450][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.488198][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.505598][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.513407][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.539196][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.560651][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.573062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.581575][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.593829][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.600979][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.631143][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.652154][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.659320][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.680902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.688904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.709564][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.736319][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.759883][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.775420][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.785718][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.802493][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.813628][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.820967][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.836062][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.843827][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.859860][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.870940][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.888249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.895694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.912666][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.919898][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.933177][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.056300][ T3305] veth0_vlan: entered promiscuous mode [ 32.083040][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.101867][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.110404][ T3305] veth1_vlan: entered promiscuous mode [ 32.125118][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.147006][ T3306] veth0_vlan: entered promiscuous mode [ 32.157433][ T3305] veth0_macvtap: entered promiscuous mode [ 32.166047][ T3305] veth1_macvtap: entered promiscuous mode [ 32.180403][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.214552][ T3306] veth1_vlan: entered promiscuous mode [ 32.229722][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.270192][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.279420][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.288263][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.297895][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.309689][ T3306] veth0_macvtap: entered promiscuous mode [ 32.333785][ T3306] veth1_macvtap: entered promiscuous mode [ 32.350106][ T3309] veth0_vlan: entered promiscuous mode [ 32.366388][ T3309] veth1_vlan: entered promiscuous mode [ 32.379879][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.398638][ T3314] veth0_vlan: entered promiscuous mode [ 32.410626][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.427890][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.433073][ T3314] veth1_vlan: entered promiscuous mode [ 32.454809][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.463818][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473252][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.482211][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.513601][ T3325] veth0_vlan: entered promiscuous mode [ 32.534166][ T3325] veth1_vlan: entered promiscuous mode [ 32.556119][ T3309] veth0_macvtap: entered promiscuous mode [ 32.563639][ T3314] veth0_macvtap: entered promiscuous mode [ 32.572864][ T3309] veth1_macvtap: entered promiscuous mode [ 32.590658][ T3325] veth0_macvtap: entered promiscuous mode [ 32.603838][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.612420][ T3325] veth1_macvtap: entered promiscuous mode [ 32.625439][ T3314] veth1_macvtap: entered promiscuous mode [ 32.640629][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.672248][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 32.672261][ T29] audit: type=1400 audit(1752261336.544:99): avc: denied { create } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.682567][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.706362][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715158][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.723943][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.741267][ T29] audit: type=1400 audit(1752261336.574:100): avc: denied { setopt } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.760574][ T29] audit: type=1400 audit(1752261336.574:101): avc: denied { write } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.779716][ T29] audit: type=1400 audit(1752261336.574:102): avc: denied { connect } for pid=3484 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.799050][ T29] audit: type=1400 audit(1752261336.574:103): avc: denied { name_connect } for pid=3484 comm="syz.3.4" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.820891][ T29] audit: type=1400 audit(1752261336.604:104): avc: denied { shutdown } for pid=3484 comm="syz.3.4" laddr=fe80::12 lport=50339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.827072][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.850637][ T3485] syz.3.4 (3485) used greatest stack depth: 9240 bytes left [ 32.859603][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.875563][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.888399][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.904150][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.913155][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.921967][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.930781][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.940746][ T29] audit: type=1400 audit(1752261336.784:105): avc: denied { create } for pid=3486 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.961473][ T29] audit: type=1400 audit(1752261336.784:106): avc: denied { write } for pid=3486 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.993391][ T3325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.002483][ T3325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.011257][ T3325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020006][ T3325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.043191][ T29] audit: type=1400 audit(1752261336.904:107): avc: denied { allowed } for pid=3489 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.062616][ T29] audit: type=1400 audit(1752261336.904:108): avc: denied { create } for pid=3489 comm="syz.3.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.200721][ T3500] xt_connbytes: Forcing CT accounting to be enabled [ 33.226522][ T3502] loop3: detected capacity change from 0 to 512 [ 33.237451][ T3500] Cannot find set identified by id 0 to match [ 33.280772][ T3502] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.296907][ T3502] EXT4-fs (loop3): mount failed [ 33.306313][ T3511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 33.456336][ T3530] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 33.626941][ T3542] loop4: detected capacity change from 0 to 256 [ 33.647951][ T3542] FAT-fs (loop4): bogus number of FAT sectors [ 33.654355][ T3542] FAT-fs (loop4): Can't find a valid FAT filesystem [ 33.897629][ T3575] netlink: 348 bytes leftover after parsing attributes in process `syz.0.34'. [ 33.906987][ T3575] Zero length message leads to an empty skb [ 34.036006][ T3587] loop0: detected capacity change from 0 to 512 [ 34.047075][ T3587] EXT4-fs: Ignoring removed orlov option [ 34.061324][ T3587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.074506][ T3587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.095555][ T3587] EXT4-fs (loop0): 1 orphan inode deleted [ 34.101401][ T3587] EXT4-fs (loop0): 1 truncate cleaned up [ 34.116497][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.149470][ T3587] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.177083][ T3587] EXT4-fs (loop0): Remounting filesystem read-only [ 34.186754][ T3587] EXT4-fs warning (device loop0): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.0.38: cleanup dec ref error -28 [ 34.224519][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.344653][ T3608] loop3: detected capacity change from 0 to 512 [ 34.354378][ T3608] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.48: iget: bad i_size value: 38620345925642 [ 34.375468][ T3608] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.48: couldn't read orphan inode 15 (err -117) [ 34.391552][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.443867][ T3613] binfmt_misc: register: failed to install interpreter file ./file2 [ 34.486530][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.604344][ T3621] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 35.069853][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 35.077725][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 35.116202][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.124144][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.131903][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.139610][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.147385][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.155169][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.162887][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.170598][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.178482][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.186248][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.194067][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.201955][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.209669][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.217529][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 35.224711][ T3737] netlink: 80 bytes leftover after parsing attributes in process `syz.2.72'. [ 35.238759][ T3737] netlink: 80 bytes leftover after parsing attributes in process `syz.2.72'. [ 35.282181][ T3741] loop2: detected capacity change from 0 to 128 [ 35.299323][ T36] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.327423][ T2997] udevd[2997]: worker [3297] terminated by signal 33 (Unknown signal 33) [ 35.347277][ T2997] udevd[2997]: worker [3297] failed while handling '/devices/virtual/misc/uhid/0000:3000000:0000.0001/hidraw/hidraw0' [ 35.590081][ T3767] loop1: detected capacity change from 0 to 2048 [ 35.599516][ T3762] loop2: detected capacity change from 0 to 1024 [ 35.616998][ T3762] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.78: Failed to acquire dquot type 0 [ 35.650352][ T3767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.674177][ T3762] EXT4-fs (loop2): 1 truncate cleaned up [ 35.680349][ T3762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.710943][ T3789] loop0: detected capacity change from 0 to 512 [ 35.719921][ T3762] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 35.746079][ T3762] SELinux: failed to load policy [ 35.753846][ T3789] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #12: comm syz.0.82: corrupted in-inode xattr: invalid ea_ino [ 35.779950][ T3767] SELinux: Context @ is not valid (left unmapped). [ 35.783924][ T3789] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.82: couldn't read orphan inode 12 (err -117) [ 35.802180][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.820170][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.832546][ T3789] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.845860][ T3796] loop3: detected capacity change from 0 to 2048 [ 35.852769][ T3798] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 35.997706][ T3305] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 36.135443][ T3828] loop1: detected capacity change from 0 to 512 [ 36.172279][ T3828] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.197388][ T3834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 36.212449][ T3828] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.239553][ T3828] EXT4-fs (loop1): 1 truncate cleaned up [ 36.265659][ T3828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.307341][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.359917][ T3848] loop1: detected capacity change from 0 to 512 [ 36.367813][ T3848] ======================================================= [ 36.367813][ T3848] WARNING: The mand mount option has been deprecated and [ 36.367813][ T3848] and is ignored by this kernel. Remove the mand [ 36.367813][ T3848] option from the mount to silence this warning. [ 36.367813][ T3848] ======================================================= [ 36.406858][ T3848] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 36.422407][ T3848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 36.436058][ T3848] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.442609][ T3848] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.107: bad orphan inode 267 [ 36.456381][ T3848] EXT4-fs (loop1): Remounting filesystem read-only [ 36.471502][ T3848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 36.489319][ T3848] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.107: dx entry: limit 0 != root limit 125 [ 36.501091][ T3848] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.107: Corrupt directory, running e2fsck is recommended [ 36.546299][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 36.602036][ T3875] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.635296][ T3875] netlink: 'syz.0.115': attribute type 12 has an invalid length. [ 36.643302][ T3875] netlink: 'syz.0.115': attribute type 29 has an invalid length. [ 36.651097][ T3875] netlink: 148 bytes leftover after parsing attributes in process `syz.0.115'. [ 36.660081][ T3875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 36.729199][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 36.738135][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 36.746988][ T3880] netlink: 2 bytes leftover after parsing attributes in process `syz.0.118'. [ 36.757130][ T3882] loop4: detected capacity change from 0 to 128 [ 36.937916][ T3899] loop2: detected capacity change from 0 to 8192 [ 36.953461][ T3899] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.004756][ T3906] cgroup: fork rejected by pids controller in /syz0 [ 37.017697][ T3899] process 'syz.2.126' launched '/dev/fd/6' with NULL argv: empty string added [ 37.119497][ T3915] SELinux: ebitmap: truncated map [ 37.146695][ T3915] SELinux: failed to load policy [ 37.225307][ T3921] loop4: detected capacity change from 0 to 1024 [ 37.265936][ T3921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.370240][ T3921] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.4.136: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 37.390366][ T3921] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem [ 37.405383][ T3921] EXT4-fs warning (device loop4): ext4_rename_delete:3726: inode #2: comm syz.4.136: Deleting old file: nlink 4, error=-117 [ 37.445883][ T3660] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.485667][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.514123][ T3660] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.544180][ T3660] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.584511][ T3660] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.657090][ T3660] bridge_slave_1: left allmulticast mode [ 37.662833][ T3660] bridge_slave_1: left promiscuous mode [ 37.668579][ T3660] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.692545][ T3660] bridge_slave_0: left allmulticast mode [ 37.698287][ T3660] bridge_slave_0: left promiscuous mode [ 37.704187][ T3660] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.737041][ T3959] loop1: detected capacity change from 0 to 512 [ 37.744277][ T3959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.757944][ T3959] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 37.775154][ T3959] EXT4-fs (loop1): 1 truncate cleaned up [ 37.781788][ T3959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.799470][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 37.799484][ T29] audit: type=1400 audit(1752261341.664:275): avc: denied { ioctl } for pid=3958 comm="syz.1.147" path="/22/bus/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.835659][ T3660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.846105][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.857984][ T3660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.868677][ T3660] bond0 (unregistering): Released all slaves [ 37.880528][ T29] audit: type=1400 audit(1752261341.744:276): avc: denied { read } for pid=3963 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.929228][ T3660] hsr_slave_0: left promiscuous mode [ 37.935272][ T3660] hsr_slave_1: left promiscuous mode [ 37.945336][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.952848][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.971242][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.978811][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.999196][ T3660] veth1_macvtap: left promiscuous mode [ 38.005171][ T3660] veth0_macvtap: left promiscuous mode [ 38.010817][ T3660] veth1_vlan: left promiscuous mode [ 38.016245][ T3660] veth0_vlan: left promiscuous mode [ 38.035709][ T29] audit: type=1400 audit(1752261341.904:277): avc: denied { compute_member } for pid=3975 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.095549][ T29] audit: type=1400 audit(1752261341.964:278): avc: denied { setattr } for pid=3978 comm="syz.1.154" name="secretmem" dev="secretmem" ino=5097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.150870][ T3660] team0 (unregistering): Port device team_slave_1 removed [ 38.158649][ T3983] SELinux: failed to load policy [ 38.165878][ T3660] team0 (unregistering): Port device team_slave_0 removed [ 38.319810][ T3937] chnl_net:caif_netlink_parms(): no params data found [ 38.407419][ T4014] loop2: detected capacity change from 0 to 512 [ 38.430841][ T3937] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.438363][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.446532][ T4014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.456379][ T3937] bridge_slave_0: entered allmulticast mode [ 38.463968][ T3937] bridge_slave_0: entered promiscuous mode [ 38.474869][ T4018] pim6reg: entered allmulticast mode [ 38.481181][ T3937] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.488462][ T3937] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.496966][ T3937] bridge_slave_1: entered allmulticast mode [ 38.504350][ T3937] bridge_slave_1: entered promiscuous mode [ 38.512077][ T4014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.525905][ T4014] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.542713][ T4018] pim6reg: left allmulticast mode [ 38.548445][ T29] audit: type=1400 audit(1752261342.414:279): avc: denied { read write } for pid=4000 comm="syz.2.162" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.572052][ T29] audit: type=1400 audit(1752261342.414:280): avc: denied { open } for pid=4000 comm="syz.2.162" path="/29/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.615006][ T3937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.626482][ T3937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.638950][ T29] audit: type=1400 audit(1752261342.514:281): avc: denied { create } for pid=4028 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.659269][ T29] audit: type=1400 audit(1752261342.514:282): avc: denied { connect } for pid=4028 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 38.709195][ T3937] team0: Port device team_slave_0 added [ 38.718893][ T3937] team0: Port device team_slave_1 added [ 38.762913][ T29] audit: type=1400 audit(1752261342.634:283): avc: denied { create } for pid=4036 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.798671][ T3937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.806809][ T3937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.808859][ T29] audit: type=1400 audit(1752261342.664:284): avc: denied { setopt } for pid=4036 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.835511][ T3937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.871047][ T3937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.878198][ T3937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.905865][ T3937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.002033][ T3937] hsr_slave_0: entered promiscuous mode [ 39.009349][ T3937] hsr_slave_1: entered promiscuous mode [ 39.017114][ T3937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.025488][ T3937] Cannot create hsr debugfs directory [ 39.095137][ T4058] loop1: detected capacity change from 0 to 512 [ 39.104395][ T4058] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.188: casefold flag without casefold feature [ 39.118169][ T4058] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.188: couldn't read orphan inode 15 (err -117) [ 39.133212][ T4058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.195446][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.310292][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.361396][ T4073] loop4: detected capacity change from 0 to 512 [ 39.378673][ T4073] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.387130][ T4073] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.399524][ T3937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.400817][ T4073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 39.416138][ T4073] System zones: 1-12 [ 39.417317][ T3937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.428344][ T4073] EXT4-fs (loop4): 1 truncate cleaned up [ 39.434721][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.452660][ T3937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.466076][ T3937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.524238][ T3937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.538233][ T3937] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.549620][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.557138][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.580008][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.587382][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.589789][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.699027][ T4110] ALSA: seq fatal error: cannot create timer (-19) [ 39.713972][ T3937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.858862][ T3937] veth0_vlan: entered promiscuous mode [ 39.867421][ T3937] veth1_vlan: entered promiscuous mode [ 39.890149][ T3937] veth0_macvtap: entered promiscuous mode [ 39.902134][ T3937] veth1_macvtap: entered promiscuous mode [ 39.918891][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.932285][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.945488][ T3937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.954574][ T3937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.963991][ T3937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.973691][ T3937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.996447][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 40.022469][ T4147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.033161][ T4147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.042206][ T4147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.053442][ T4147] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.088472][ T4147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 40.091691][ T4157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.121746][ T4157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.195957][ T4165] SELinux: ebitmap: truncated map [ 40.207054][ T4165] SELinux: failed to load policy [ 40.224353][ T4173] Illegal XDP return value 4294967274 on prog (id 136) dev N/A, expect packet loss! [ 40.251671][ T4177] loop4: detected capacity change from 0 to 512 [ 40.258818][ T4177] EXT4-fs: Ignoring removed bh option [ 40.265066][ T4177] EXT4-fs: Mount option(s) incompatible with ext3 [ 40.486265][ T4206] loop3: detected capacity change from 0 to 1024 [ 40.512364][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.549054][ T4206] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.629747][ T4220] loop2: detected capacity change from 0 to 1024 [ 40.637389][ T4220] EXT4-fs: Ignoring removed nobh option [ 40.648067][ T4222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 40.666886][ T4222] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 40.675167][ T4222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 40.697877][ T4220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.748293][ T3694] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:46: bg 0: block 393: padding at end of block bitmap is not set [ 40.772273][ T3694] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1728 with max blocks 64 with error 117 [ 40.786200][ T3694] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.786200][ T3694] [ 40.799684][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.816414][ T4231] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 40.847104][ T4220] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 40.956724][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.102482][ T4276] random: crng reseeded on system resumption [ 41.140654][ T3686] tipc: Subscription rejected, illegal request [ 41.152946][ T4265] loop3: detected capacity change from 0 to 8192 [ 41.167180][ T4265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 41.197062][ T4282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4282 comm=syz.2.257 [ 41.211108][ T4282] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4282 comm=syz.2.257 [ 41.312965][ T4295] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 41.346942][ T4299] rdma_op ffff88811c6f3180 conn xmit_rdma 0000000000000000 [ 41.362011][ T4302] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 41.374499][ T4302] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 41.396813][ T4302] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 41.482439][ T4318] netlink: 'syz.3.274': attribute type 6 has an invalid length. [ 41.567614][ T4333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 41.702068][ T4351] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 41.774577][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 41.783823][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.291'. [ 41.856664][ T4368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.294'. [ 41.936929][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 41.979013][ T4377] SELinux: failed to load policy [ 42.112973][ T4387] SELinux: failed to load policy [ 42.179107][ T4406] loop4: detected capacity change from 0 to 512 [ 42.189347][ T4408] geneve2: entered promiscuous mode [ 42.194732][ T4408] geneve2: entered allmulticast mode [ 42.201597][ T4406] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.217472][ T4406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.251158][ T4406] EXT4-fs (loop4): 1 truncate cleaned up [ 42.259109][ T4406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.307983][ T4406] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 42.360071][ T4421] SELinux: ebitmap: truncated map [ 42.366689][ T4421] SELinux: failed to load policy [ 42.383088][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.519839][ T4445] team_slave_0: entered promiscuous mode [ 42.525916][ T4445] team_slave_1: entered promiscuous mode [ 42.535289][ T4445] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 42.543977][ T4445] team0: Device macvtap1 is already an upper device of the team interface [ 42.554980][ T4445] team_slave_0: left promiscuous mode [ 42.560616][ T4445] team_slave_1: left promiscuous mode [ 42.677860][ T4466] capability: warning: `syz.1.341' uses 32-bit capabilities (legacy support in use) [ 42.817946][ T4487] loop3: detected capacity change from 0 to 512 [ 42.840909][ T4487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.864905][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.884351][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 42.884371][ T29] audit: type=1400 audit(1752261346.754:442): avc: denied { create } for pid=4491 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.922852][ T4487] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.938545][ T29] audit: type=1400 audit(1752261346.784:443): avc: denied { write } for pid=4491 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.970952][ T4503] ref_ctr_offset mismatch. inode: 0x1f4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 42.973108][ T4499] serio: Serial port ptm0 [ 43.014442][ T29] audit: type=1400 audit(1752261346.884:444): avc: denied { create } for pid=4508 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.036858][ T29] audit: type=1400 audit(1752261346.884:445): avc: denied { write } for pid=4508 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.128263][ T4519] loop1: detected capacity change from 0 to 1024 [ 43.147346][ T4519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.181774][ T4519] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.207923][ T4526] loop4: detected capacity change from 0 to 8192 [ 43.240589][ T29] audit: type=1326 audit(1752261347.104:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 43.274562][ T29] audit: type=1326 audit(1752261347.144:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 43.368726][ T4537] loop0: detected capacity change from 0 to 1024 [ 43.379073][ T29] audit: type=1326 audit(1752261347.244:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 43.379311][ T4537] EXT4-fs: Ignoring removed orlov option [ 43.410972][ T29] audit: type=1326 audit(1752261347.244:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 43.456545][ T4537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.460684][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.529421][ T3937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.550342][ T4545] $Hÿ: renamed from bond0 (while UP) [ 43.567946][ T4545] $Hÿ: entered promiscuous mode [ 43.577461][ T4545] bond_slave_0: entered promiscuous mode [ 43.586770][ T4545] bond_slave_1: entered promiscuous mode [ 43.588238][ T4548] loop0: detected capacity change from 0 to 1024 [ 43.606409][ T4548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.627940][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.647310][ T29] audit: type=1400 audit(1752261347.514:450): avc: denied { create } for pid=4547 comm="syz.0.377" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 43.693700][ T29] audit: type=1326 audit(1752261347.554:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.2.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 43.744638][ T3937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.800928][ T4559] loop2: detected capacity change from 0 to 512 [ 43.812242][ T4562] netlink: 'syz.1.382': attribute type 1 has an invalid length. [ 43.842706][ T4559] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.856159][ T4565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4565 comm=syz.4.384 [ 43.870203][ T4565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4565 comm=syz.4.384 [ 43.888015][ T4559] EXT4-fs (loop2): 1 truncate cleaned up [ 43.897315][ T4570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.923937][ T4559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.044440][ T4590] netlink: 'syz.4.397': attribute type 83 has an invalid length. [ 44.154669][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.185313][ T4607] loop0: detected capacity change from 0 to 512 [ 44.216177][ T4607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.245103][ T4607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.271368][ T4607] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.324726][ T4607] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.405: corrupted xattr block 19: overlapping e_value [ 44.367350][ T4607] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 44.377005][ T4607] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.405: corrupted xattr block 19: overlapping e_value [ 44.395051][ T4607] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 44.415032][ T4607] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.405: corrupted xattr block 19: overlapping e_value [ 44.489146][ T3937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.718595][ T4679] IPVS: Error joining to the multicast group [ 44.757812][ T4681] syzkaller1: entered promiscuous mode [ 44.763648][ T4681] syzkaller1: entered allmulticast mode [ 44.812107][ T4684] loop3: detected capacity change from 0 to 512 [ 44.824162][ T4684] EXT4-fs: inline encryption not supported [ 44.835282][ T4684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.888485][ T4684] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.951630][ T4684] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.440: bg 0: block 248: padding at end of block bitmap is not set [ 44.981189][ T4684] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.440: Failed to acquire dquot type 1 [ 45.004546][ T4684] EXT4-fs (loop3): 1 truncate cleaned up [ 45.013852][ T4684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.053149][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.096848][ T4723] loop4: detected capacity change from 0 to 128 [ 45.124515][ T4723] EXT4-fs: Ignoring removed nobh option [ 45.164779][ T4723] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.194398][ T4723] ext4 filesystem being mounted at /124/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.225864][ T4735] __nla_validate_parse: 9 callbacks suppressed [ 45.225880][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 45.253555][ T3325] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.274213][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 45.289458][ T4741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 45.317097][ T4745] loop2: detected capacity change from 0 to 512 [ 45.332572][ T4747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.467'. [ 45.332875][ T4745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.356570][ T4745] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.403388][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.510829][ T4771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.478'. [ 45.530863][ T4773] netlink: 264 bytes leftover after parsing attributes in process `syz.4.479'. [ 45.540166][ T4773] netlink: 56 bytes leftover after parsing attributes in process `syz.4.479'. [ 45.706703][ T4792] loop4: detected capacity change from 0 to 128 [ 45.792811][ T4802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4802 comm=syz.2.493 [ 45.806237][ T4802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4802 comm=syz.2.493 [ 45.846500][ T4804] openvswitch: netlink: Message has 6 unknown bytes. [ 45.915709][ T4808] pim6reg1: entered promiscuous mode [ 45.964838][ T4818] capability: warning: `syz.2.500' uses deprecated v2 capabilities in a way that may be insecure [ 46.110413][ T4827] ip6gre1: entered allmulticast mode [ 46.122582][ T4828] hsr0: entered promiscuous mode [ 46.132741][ T4828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 46.152263][ T4828] hsr_slave_0: left promiscuous mode [ 46.152316][ T4827] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.170293][ T4828] hsr_slave_1: left promiscuous mode [ 46.222360][ T4828] hsr0 (unregistering): left promiscuous mode [ 46.400004][ T4844] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 46.548074][ T4858] SELinux: failed to load policy [ 46.606373][ T4871] loop0: detected capacity change from 0 to 1024 [ 46.664636][ T4871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.758256][ T3937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.876354][ T4903] 9pnet_fd: Insufficient options for proto=fd [ 46.900928][ T4908] loop3: detected capacity change from 0 to 128 [ 46.908047][ T4908] EXT4-fs: Ignoring removed nobh option [ 46.918303][ T4908] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.932891][ T4908] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.994630][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.054239][ T4919] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 47.065587][ T4921] loop7: detected capacity change from 0 to 16384 [ 47.107273][ T4925] loop4: detected capacity change from 0 to 512 [ 47.123024][ T4925] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.136125][ T4921] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 47.150277][ T4925] EXT4-fs (loop4): 1 truncate cleaned up [ 47.157807][ T4927] netlink: 'syz.3.550': attribute type 21 has an invalid length. [ 47.158859][ T4921] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 47.171104][ T4925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.182910][ T4921] I/O error, dev loop7, sector 8704 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.199101][ T4927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.550'. [ 47.205925][ T4921] Buffer I/O error on dev loop7, logical block 1088, async page read [ 47.254918][ T3694] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 [ 47.265354][ T3694] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 47.274894][ T3694] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 47.284940][ T3694] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 47.289419][ T4920] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 47.295569][ T3694] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 47.295599][ T3694] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 47.295620][ T3694] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 47.295648][ T3694] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 47.295667][ T3694] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 47.295686][ T3694] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 47.316281][ T3694] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 47.379569][ T3694] I/O error, dev loop7, sector 2064 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 [ 47.382610][ T4920] I/O error, dev loop7, sector 2056 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 47.393994][ T3694] I/O error, dev loop7, sector 3088 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 [ 47.416596][ T3694] I/O error, dev loop7, sector 4112 op 0x1:(WRITE) flags 0x4000 phys_seg 128 prio class 0 [ 47.498286][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.563663][ T4948] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 47.601221][ T4948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.616585][ T4950] wireguard0: entered promiscuous mode [ 47.638937][ T4948] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 47.676819][ T4956] loop4: detected capacity change from 0 to 512 [ 47.708975][ T4956] EXT4-fs: Ignoring removed orlov option [ 47.735839][ T4956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.776103][ T4956] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.790051][ T4966] loop2: detected capacity change from 0 to 1024 [ 47.799862][ T4956] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.562: bg 0: block 248: padding at end of block bitmap is not set [ 47.800371][ T4966] EXT4-fs: Ignoring removed bh option [ 47.824257][ T4966] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 47.850347][ T4956] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.562: Failed to acquire dquot type 1 [ 47.864231][ T4956] EXT4-fs (loop4): 1 truncate cleaned up [ 47.872310][ T4966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.900726][ T4956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.916314][ T4966] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.566: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 47.931868][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 47.931891][ T29] audit: type=1400 audit(1752261351.784:668): avc: denied { rename } for pid=4965 comm="syz.2.566" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.939704][ T4966] EXT4-fs (loop2): Remounting filesystem read-only [ 47.965981][ T4975] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 47.996055][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.032671][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.049177][ T4981] loop0: detected capacity change from 0 to 512 [ 48.066351][ T29] audit: type=1400 audit(1752261351.934:669): avc: denied { watch } for pid=4984 comm="syz.4.570" path="/159/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 48.098516][ T4981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.109740][ T29] audit: type=1400 audit(1752261351.964:670): avc: denied { bind } for pid=4986 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.129779][ T29] audit: type=1400 audit(1752261351.964:671): avc: denied { name_bind } for pid=4986 comm="syz.3.574" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 48.152422][ T29] audit: type=1400 audit(1752261351.964:672): avc: denied { node_bind } for pid=4986 comm="syz.3.574" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 48.174789][ T29] audit: type=1400 audit(1752261351.964:673): avc: denied { name_connect } for pid=4988 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 48.196632][ T29] audit: type=1400 audit(1752261351.984:674): avc: denied { listen } for pid=4986 comm="syz.3.574" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.220342][ T29] audit: type=1400 audit(1752261351.984:675): avc: denied { accept } for pid=4986 comm="syz.3.574" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.243553][ T29] audit: type=1400 audit(1752261352.024:676): avc: denied { setopt } for pid=4988 comm="syz.2.571" lport=34451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.243932][ T4981] EXT4-fs (loop0): 1 truncate cleaned up [ 48.266630][ T29] audit: type=1400 audit(1752261352.024:677): avc: denied { shutdown } for pid=4988 comm="syz.2.571" lport=34451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.296514][ T4981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.571501][ T3937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.657345][ T5017] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 48.706951][ T5017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.787012][ T5017] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 49.787305][ T5070] netlink: 'syz.0.608': attribute type 10 has an invalid length. [ 49.821329][ T5070] team0: Device hsr_slave_0 failed to register rx_handler [ 49.831439][ T5076] loop3: detected capacity change from 0 to 512 [ 49.838055][ T5076] EXT4-fs: Ignoring removed bh option [ 49.849171][ T5076] EXT4-fs: Mount option(s) incompatible with ext3 [ 49.872246][ T5084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.616'. [ 49.944605][ T5089] wireguard0: entered promiscuous mode [ 50.167615][ T5105] macvtap0: entered promiscuous mode [ 50.190213][ T5105] macvtap0: left promiscuous mode [ 50.214379][ T5113] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 50.229381][ T5113] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 50.249931][ T5113] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 50.288960][ T5119] loop1: detected capacity change from 0 to 2048 [ 50.312295][ T5119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.339791][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.354686][ T5123] sd 0:0:1:0: device reset [ 50.564453][ T5148] geneve2: entered promiscuous mode [ 50.570270][ T5148] geneve2: entered allmulticast mode [ 50.636834][ T5156] sd 0:0:1:0: device reset [ 50.723398][ T5162] blktrace: Concurrent blktraces are not allowed on loop8 [ 50.745583][ T5162] relay: one or more items not logged [item size (56) > sub-buffer size (16)] [ 51.078314][ T5198] atomic_op ffff8881195d3128 conn xmit_atomic 0000000000000000 [ 51.244366][ T5220] 9pnet_fd: Insufficient options for proto=fd [ 51.291904][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.300706][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.505750][ T5238] loop4: detected capacity change from 0 to 8192 [ 51.570079][ T5246] loop2: detected capacity change from 0 to 512 [ 51.580525][ T5246] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.589817][ T5246] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.590523][ T5248] __nla_validate_parse: 3 callbacks suppressed [ 51.590542][ T5248] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.689'. [ 51.623208][ T5246] EXT4-fs (loop2): 1 truncate cleaned up [ 51.629447][ T5246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.653189][ T5252] 9pnet_fd: Insufficient options for proto=fd [ 51.683972][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.800032][ T5272] tipc: Started in network mode [ 51.806220][ T5272] tipc: Node identity ac14140f, cluster identity 4711 [ 51.813862][ T5272] tipc: New replicast peer: 10.1.1.2 [ 51.819731][ T5272] tipc: Enabled bearer , priority 10 [ 51.853971][ T5280] ref_ctr_offset mismatch. inode: 0x2c7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 51.875360][ T5278] loop0: detected capacity change from 0 to 8192 [ 51.901429][ T5282] loop4: detected capacity change from 0 to 1024 [ 51.922970][ T5282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.980854][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.005778][ T5295] team_slave_0: entered promiscuous mode [ 52.012019][ T5295] team_slave_1: entered promiscuous mode [ 52.020814][ T5295] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 52.040047][ T5295] team0: Device macvtap1 is already an upper device of the team interface [ 52.056862][ T5295] team_slave_0: left promiscuous mode [ 52.056890][ T5295] team_slave_1: left promiscuous mode [ 52.081805][ T5305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.081878][ T5305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.143110][ T5313] $Hÿ: renamed from bond0 (while UP) [ 52.166506][ T5313] $Hÿ: entered promiscuous mode [ 52.172241][ T5313] bond_slave_0: entered promiscuous mode [ 52.177999][ T5313] bond_slave_1: entered promiscuous mode [ 52.186609][ T5318] ref_ctr_offset mismatch. inode: 0x30a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 52.227129][ T5325] netem: change failed [ 52.384283][ T5341] team_slave_0: entered promiscuous mode [ 52.391032][ T5341] team_slave_1: entered promiscuous mode [ 52.402758][ T5341] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 52.413821][ T5341] team0: Device macvtap1 is already an upper device of the team interface [ 52.424875][ T5341] team_slave_0: left promiscuous mode [ 52.430536][ T5341] team_slave_1: left promiscuous mode [ 52.462159][ T5347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 52.541692][ T5359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5359 comm=syz.1.742 [ 52.554865][ T5359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5359 comm=syz.1.742 [ 52.678507][ T5365] serio: Serial port ptm0 [ 52.710971][ T5376] loop2: detected capacity change from 0 to 512 [ 52.724035][ T5376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.763713][ T5378] netlink: 'syz.1.748': attribute type 83 has an invalid length. [ 52.766091][ T5376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.785381][ T5376] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.805133][ T5376] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.747: corrupted xattr block 19: overlapping e_value [ 52.821089][ T9] tipc: Node number set to 2886997007 [ 52.856715][ T5376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 52.866533][ T5376] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.747: corrupted xattr block 19: overlapping e_value [ 52.882567][ T5376] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 52.891869][ T5376] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.747: corrupted xattr block 19: overlapping e_value [ 52.938501][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.989994][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 52.990014][ T29] audit: type=1400 audit(1752261356.854:838): avc: denied { kexec_image_load } for pid=5395 comm="syz.1.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 53.046971][ T29] audit: type=1400 audit(1752261356.914:839): avc: denied { read } for pid=5401 comm="+}[@" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.072266][ T29] audit: type=1400 audit(1752261356.914:840): avc: denied { open } for pid=5401 comm="+}[@" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.098465][ T29] audit: type=1400 audit(1752261356.914:841): avc: denied { ioctl } for pid=5401 comm="+}[@" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 53.143732][ T5405] tipc: Started in network mode [ 53.149170][ T5405] tipc: Node identity ac14140f, cluster identity 4711 [ 53.156901][ T5405] tipc: New replicast peer: 10.1.1.2 [ 53.163601][ T5405] tipc: Enabled bearer , priority 10 [ 53.227877][ T29] audit: type=1326 audit(1752261357.084:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286a9e929 code=0x7ffc0000 [ 53.254529][ T29] audit: type=1326 audit(1752261357.084:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286a9e929 code=0x7ffc0000 [ 53.283818][ T29] audit: type=1326 audit(1752261357.084:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4286a9e929 code=0x7ffc0000 [ 53.312278][ T29] audit: type=1326 audit(1752261357.084:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286a9e929 code=0x7ffc0000 [ 53.322187][ T5421] loop1: detected capacity change from 0 to 512 [ 53.369216][ T5421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.410261][ T5421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.426766][ T5434] loop2: detected capacity change from 0 to 128 [ 53.427928][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 53.452840][ T5434] EXT4-fs: Ignoring removed nobh option [ 53.459343][ T5421] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.474308][ T5439] netem: change failed [ 53.479882][ T5434] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.494523][ T5421] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.770: corrupted xattr block 19: overlapping e_value [ 53.519700][ T5434] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.550119][ T5421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 53.570303][ T5421] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.770: corrupted xattr block 19: overlapping e_value [ 53.605542][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.616402][ T5421] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 53.631326][ T5421] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.770: corrupted xattr block 19: overlapping e_value [ 53.686218][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.830199][ T5475] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 54.171121][ T9] tipc: Node number set to 2886997007 [ 54.191805][ T29] audit: type=1326 audit(1752261358.064:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 54.218220][ T29] audit: type=1326 audit(1752261358.064:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.2.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876199e929 code=0x7ffc0000 [ 54.353627][ T5521] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 54.410379][ T5521] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 54.481747][ T5529] xt_hashlimit: size too large, truncated to 1048576 [ 54.494409][ T5525] loop0: detected capacity change from 0 to 1024 [ 54.508494][ T5533] loop3: detected capacity change from 0 to 1024 [ 54.517137][ T5525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.526241][ T5533] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 54.607765][ T5533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 54.619788][ T5533] System zones: 0-1, 3-36 [ 54.624522][ T5533] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.632716][ T5525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.647152][ T5533] EXT4-fs (loop3): 1 orphan inode deleted [ 54.666448][ T5533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.687921][ T5533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.720684][ T3937] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.750327][ T5556] loop3: detected capacity change from 0 to 512 [ 54.759534][ T5557] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 54.778960][ T5556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.804520][ T5556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.819346][ T5556] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.839808][ T5556] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.828: corrupted xattr block 19: overlapping e_value [ 54.871736][ T5572] loop0: detected capacity change from 0 to 128 [ 54.882873][ T5556] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 54.892418][ T5556] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.828: corrupted xattr block 19: overlapping e_value [ 54.909236][ T5556] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 54.918569][ T5556] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.828: corrupted xattr block 19: overlapping e_value [ 54.957936][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.226942][ T5608] ip6gre1: entered allmulticast mode [ 55.307228][ T5620] loop4: detected capacity change from 0 to 1024 [ 55.334797][ T5620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.368575][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.419656][ T5632] loop2: detected capacity change from 0 to 1024 [ 55.427573][ T5632] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.438570][ T5636] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.863'. [ 55.464367][ T5632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.506302][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.514277][ T5644] netlink: 292 bytes leftover after parsing attributes in process `syz.0.876'. [ 55.542353][ T5646] loop4: detected capacity change from 0 to 128 [ 55.554291][ T5646] EXT4-fs: Ignoring removed nobh option [ 55.565575][ T5646] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.580348][ T5646] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.782224][ T5668] hsr0: entered promiscuous mode [ 55.788609][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 55.798828][ T5667] loop0: detected capacity change from 0 to 1024 [ 55.805538][ T5668] hsr_slave_0: left promiscuous mode [ 55.812609][ T5668] hsr_slave_1: left promiscuous mode [ 55.822132][ T5668] hsr0 (unregistering): left promiscuous mode [ 55.847542][ T5667] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 55.861890][ T5667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 55.893310][ T5667] System zones: 0-1, 3-36 [ 55.899269][ T5667] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.909239][ T5667] EXT4-fs (loop0): 1 orphan inode deleted [ 56.048166][ T5687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.049067][ T5689] loop2: detected capacity change from 0 to 1024 [ 56.069668][ T5687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.332289][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.898'. [ 56.546966][ T5746] xt_NFQUEUE: number of total queues is 0 [ 56.745865][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 57.393696][ T5858] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 57.407784][ T5858] netlink: 'syz.3.963': attribute type 4 has an invalid length. [ 57.942116][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 57.951209][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.981'. [ 57.960929][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.981'. [ 57.970442][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.981'. [ 57.992292][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 57.992308][ T29] audit: type=1400 audit(1752261361.864:1279): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.030530][ T29] audit: type=1400 audit(1752261361.894:1280): avc: denied { map_create } for pid=5907 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.061253][ T29] audit: type=1400 audit(1752261361.914:1281): avc: denied { prog_load } for pid=5907 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.083001][ T29] audit: type=1400 audit(1752261361.914:1282): avc: denied { prog_load } for pid=5907 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.105222][ T29] audit: type=1400 audit(1752261361.914:1283): avc: denied { execmem } for pid=5907 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 58.130589][ T29] audit: type=1400 audit(1752261361.934:1284): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.156437][ T29] audit: type=1400 audit(1752261361.954:1285): avc: denied { prog_load } for pid=5910 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 58.176016][ T29] audit: type=1400 audit(1752261361.954:1286): avc: denied { create } for pid=5910 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 58.197019][ T29] audit: type=1400 audit(1752261362.004:1287): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.225137][ T29] audit: type=1400 audit(1752261362.004:1288): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.774289][ T6001] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1029'. [ 58.879272][ T6014] xt_hashlimit: max too large, truncated to 1048576 [ 59.093266][ T6032] mmap: syz.1.1044 (6032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.421331][ T6068] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1055'. [ 59.433686][ T6056] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1055'. [ 60.068666][ T6160] all: renamed from bond_slave_1 (while UP) [ 60.252779][ T6183] serio: Serial port ptm1 [ 60.687961][ T6263] IPv6: Can't replace route, no match found [ 60.952988][ T6313] syz.3.1176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.185231][ T6353] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 61.212273][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.246443][ T6353] bridge_slave_1: left allmulticast mode [ 61.252373][ T6353] bridge_slave_1: left promiscuous mode [ 61.258110][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.295466][ T6353] bridge_slave_1: entered promiscuous mode [ 61.301945][ T6353] $Hÿ: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 61.558618][ T6415] netlink: 'syz.0.1226': attribute type 13 has an invalid length. [ 61.584533][ T6415] gretap0: refused to change device tx_queue_len [ 61.590959][ T6415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 61.767280][ T6444] IPv6: sit1: Disabled Multicast RS [ 61.773691][ T6444] sit1: entered allmulticast mode [ 61.942492][ T6471] IPv6: Can't replace route, no match found [ 62.324332][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 62.542642][ T6575] bridge0: port 3(syz_tun) entered blocking state [ 62.549170][ T6575] bridge0: port 3(syz_tun) entered disabled state [ 62.556015][ T6575] syz_tun: entered allmulticast mode [ 62.564171][ T6575] syz_tun: entered promiscuous mode [ 62.569886][ T6575] bridge0: port 3(syz_tun) entered blocking state [ 62.576561][ T6575] bridge0: port 3(syz_tun) entered forwarding state [ 63.001808][ T29] kauditd_printk_skb: 1334 callbacks suppressed [ 63.001824][ T29] audit: type=1400 audit(1752261366.874:2623): avc: denied { create } for pid=6646 comm="syz.1.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.063477][ T29] audit: type=1400 audit(1752261366.874:2624): avc: denied { create } for pid=6647 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.084618][ T29] audit: type=1400 audit(1752261366.874:2625): avc: denied { create } for pid=6647 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 63.105794][ T29] audit: type=1400 audit(1752261366.874:2626): avc: denied { read write } for pid=3937 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.131088][ T29] audit: type=1400 audit(1752261366.874:2627): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.155840][ T29] audit: type=1400 audit(1752261366.914:2628): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.181550][ T29] audit: type=1400 audit(1752261366.914:2629): avc: denied { prog_load } for pid=6650 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.203005][ T29] audit: type=1400 audit(1752261366.914:2630): avc: denied { map_create } for pid=6650 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.224869][ T29] audit: type=1400 audit(1752261366.914:2631): avc: denied { prog_load } for pid=6650 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.244957][ T29] audit: type=1400 audit(1752261366.914:2632): avc: denied { prog_load } for pid=6650 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 63.306517][ T6673] xt_CT: No such helper "pptp" [ 63.433867][ T6691] SELinux: syz.2.1359 (6691) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 63.464745][ T6695] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 63.512470][ T6705] netem: change failed [ 63.518416][ T6695] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 64.144185][ T6775] Falling back ldisc for ttyS3. [ 64.253744][ T6787] pim6reg1: entered promiscuous mode [ 64.259762][ T6787] pim6reg1: entered allmulticast mode [ 64.365456][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 64.509474][ T6823] ip6tnl1: entered promiscuous mode [ 65.084566][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 65.103740][ T6905] ip6gre3: entered allmulticast mode [ 65.362387][ T6939] netem: change failed [ 65.488168][ T6959] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1487'. [ 65.525915][ T6964] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.750165][ T6997] bridge_slave_0: left allmulticast mode [ 65.756898][ T6997] bridge_slave_0: left promiscuous mode [ 65.762885][ T6997] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.793135][ T6997] bridge_slave_1: left allmulticast mode [ 65.796815][ T7005] tls_set_device_offload: netdev not found [ 65.798825][ T6997] bridge_slave_1: left promiscuous mode [ 65.799008][ T6997] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.835015][ T6997] bond0: (slave bond_slave_0): Releasing backup interface [ 65.855186][ T6997] bond0: (slave bond_slave_1): Releasing backup interface [ 65.927613][ T6997] team0: Port device team_slave_0 removed [ 65.932612][ T7018] netlink: 'syz.4.1514': attribute type 21 has an invalid length. [ 65.944164][ T7017] xt_hashlimit: max too large, truncated to 1048576 [ 65.967015][ T6997] team0: Port device team_slave_1 removed [ 65.986639][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.994372][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.009330][ T6997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.017005][ T6997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.050494][ T7018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1514'. [ 66.059826][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1514'. [ 66.079054][ T7020] geneve0: entered allmulticast mode [ 66.304527][ T3710] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 66.307714][ T7057] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 66.486341][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'. [ 66.495736][ T7084] netlink: 'syz.2.1542': attribute type 18 has an invalid length. [ 66.511972][ T7084] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.520844][ T7084] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.529850][ T7084] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.538632][ T7084] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.551101][ T7084] vxlan0: entered promiscuous mode [ 66.682418][ T7104] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1554'. [ 66.693502][ T7102] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1554'. [ 66.857082][ T7120] ALSA: seq fatal error: cannot create timer (-22) [ 67.142396][ T7158] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 67.149044][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.156904][ T7158] vhci_hcd vhci_hcd.0: Device attached [ 67.165748][ T7158] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 67.172448][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.180278][ T7158] vhci_hcd vhci_hcd.0: Device attached [ 67.186619][ T7158] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 67.193543][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.201121][ T7158] vhci_hcd vhci_hcd.0: Device attached [ 67.207815][ T7158] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 67.214362][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.221996][ T7158] vhci_hcd vhci_hcd.0: Device attached [ 67.228058][ T7158] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.237558][ T7158] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 67.244556][ T7158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.252443][ T7158] vhci_hcd vhci_hcd.0: Device attached [ 67.258480][ T7167] vhci_hcd: connection closed [ 67.258554][ T7165] vhci_hcd: connection closed [ 67.258751][ T7163] vhci_hcd: connection closed [ 67.264130][ T3686] vhci_hcd: stop threads [ 67.269224][ T7161] vhci_hcd: connection closed [ 67.274667][ T3686] vhci_hcd: release socket [ 67.274684][ T3686] vhci_hcd: disconnect device [ 67.294426][ T7159] vhci_hcd: connection closed [ 67.295133][ T3686] vhci_hcd: stop threads [ 67.304817][ T3686] vhci_hcd: release socket [ 67.310137][ T3686] vhci_hcd: disconnect device [ 67.327271][ T3686] vhci_hcd: stop threads [ 67.332222][ T3686] vhci_hcd: release socket [ 67.337238][ T3686] vhci_hcd: disconnect device [ 67.343757][ T3686] vhci_hcd: stop threads [ 67.348256][ T3686] vhci_hcd: release socket [ 67.352962][ T3686] vhci_hcd: disconnect device [ 67.358310][ T3686] vhci_hcd: stop threads [ 67.362878][ T3686] vhci_hcd: release socket [ 67.367561][ T3686] vhci_hcd: disconnect device [ 67.411213][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 67.418835][ T36] usb 1-1: enqueue for inactive port 0 [ 67.435936][ T36] usb 1-1: enqueue for inactive port 0 [ 67.451068][ T36] usb 1-1: enqueue for inactive port 0 [ 67.531152][ T36] vhci_hcd: vhci_device speed not set [ 67.793188][ T3380] Process accounting resumed [ 68.012446][ T29] kauditd_printk_skb: 997 callbacks suppressed [ 68.012470][ T29] audit: type=1400 audit(1752261371.884:3630): avc: denied { name_bind } for pid=7250 comm="syz.4.1620" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 68.046377][ T29] audit: type=1400 audit(1752261371.884:3631): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.070837][ T29] audit: type=1400 audit(1752261371.914:3632): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.101077][ T29] audit: type=1400 audit(1752261371.914:3633): avc: denied { prog_load } for pid=7253 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.122101][ T29] audit: type=1400 audit(1752261371.914:3634): avc: denied { prog_load } for pid=7253 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.142778][ T29] audit: type=1400 audit(1752261371.914:3635): avc: denied { create } for pid=7253 comm="syz.1.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 68.167823][ T29] audit: type=1400 audit(1752261371.914:3636): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.194676][ T29] audit: type=1400 audit(1752261371.944:3637): avc: denied { map_create } for pid=7257 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.214058][ T29] audit: type=1400 audit(1752261371.944:3638): avc: denied { prog_load } for pid=7257 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.234177][ T29] audit: type=1400 audit(1752261371.944:3639): avc: denied { prog_load } for pid=7257 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 68.360528][ T7287] netlink: 'syz.2.1634': attribute type 11 has an invalid length. [ 68.368567][ T7287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1634'. [ 68.662483][ T7338] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1658'. [ 68.760030][ T7351] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.256769][ T7447] netlink: 'syz.4.1709': attribute type 6 has an invalid length. [ 69.409171][ T7470] bridge0: port 3(syz_tun) entered disabled state [ 69.425250][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.432588][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.508727][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.519577][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.553659][ T7470] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.562688][ T7470] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.572322][ T7470] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.581421][ T7470] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.595820][ T7470] ip6gre1: left allmulticast mode [ 69.773985][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 69.783796][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1733'. [ 70.300209][ T7530] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1747'. [ 70.641109][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 70.644568][ T7547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1755'. [ 70.713079][ T7553] pim6reg1: entered promiscuous mode [ 70.718761][ T7553] pim6reg1: entered allmulticast mode [ 70.790189][ T7561] vlan2: entered allmulticast mode [ 70.795557][ T7561] bond0: entered allmulticast mode [ 70.800718][ T7561] bond_slave_0: entered allmulticast mode [ 70.806571][ T7561] bond_slave_1: entered allmulticast mode [ 71.098072][ T7598] bridge0: port 3(syz_tun) entered blocking state [ 71.104755][ T7598] bridge0: port 3(syz_tun) entered disabled state [ 71.113569][ T7598] syz_tun: entered allmulticast mode [ 71.119704][ T7598] syz_tun: entered promiscuous mode [ 71.127489][ T7598] bridge0: port 3(syz_tun) entered blocking state [ 71.134305][ T7598] bridge0: port 3(syz_tun) entered forwarding state [ 71.151172][ T7604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7604 comm=syz.0.1783 [ 71.247079][ T7615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7615 comm=syz.4.1788 [ 72.114440][ T7740] xt_CT: No such helper "pptp" [ 72.603922][ T7830] IPv6: sit1: Disabled Multicast RS [ 72.615856][ T7830] sit1: entered allmulticast mode [ 72.637389][ T7836] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1895'. [ 72.695152][ T7847] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.023010][ T29] kauditd_printk_skb: 1051 callbacks suppressed [ 73.023027][ T29] audit: type=1400 audit(1752261376.894:4691): avc: denied { read write } for pid=3937 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.054335][ T29] audit: type=1400 audit(1752261376.924:4692): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.080555][ T29] audit: type=1400 audit(1752261376.954:4693): avc: denied { prog_load } for pid=7892 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.101324][ T29] audit: type=1400 audit(1752261376.954:4694): avc: denied { prog_load } for pid=7892 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.120745][ T29] audit: type=1326 audit(1752261376.954:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.1.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 73.144717][ T29] audit: type=1326 audit(1752261376.954:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.1.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 73.168632][ T29] audit: type=1400 audit(1752261376.954:4697): avc: denied { prog_load } for pid=7892 comm="syz.1.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 73.187869][ T29] audit: type=1326 audit(1752261376.954:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.1.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 73.211488][ T29] audit: type=1326 audit(1752261376.954:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.1.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 73.235095][ T29] audit: type=1326 audit(1752261376.954:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.1.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 73.538427][ T7928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1938'. [ 73.549658][ T7928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1938'. [ 73.579973][ T7936] Cannot find add_set index 0 as target [ 73.619830][ T7942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.627227][ T7942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.634621][ T7942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.641971][ T7942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.649776][ T7942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.657088][ T7942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 73.923548][ T7987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.101732][ T8003] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 74.842372][ T8085] tls_set_device_offload: netdev not found [ 75.275059][ T8132] netlink: 'syz.3.2030': attribute type 21 has an invalid length. [ 75.337223][ T8141] xt_socket: unknown flags 0xc [ 75.478479][ T8161] ip6gre1: entered allmulticast mode [ 75.570731][ T1454] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.573688][ T8180] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.809576][ T8198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8198 comm=syz.2.2059 [ 76.076183][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2077'. [ 76.085369][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2077'. [ 76.207440][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 76.216798][ T8257] netlink: 'syz.3.2084': attribute type 18 has an invalid length. [ 76.257734][ T8257] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.267182][ T8257] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.276316][ T8257] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.288758][ T8257] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.301127][ T8257] vxlan0: entered promiscuous mode [ 76.526815][ T8296] serio: Serial port ptm0 [ 76.628567][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 76.637644][ T8310] netlink: 'syz.4.2112': attribute type 15 has an invalid length. [ 76.645720][ T8310] netlink: 'syz.4.2112': attribute type 18 has an invalid length. [ 76.859974][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'. [ 77.432144][ T8334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 77.840297][ T8367] netlink: 'syz.2.2140': attribute type 21 has an invalid length. [ 77.848943][ T8367] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2140'. [ 77.925366][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'. [ 78.037372][ T29] kauditd_printk_skb: 838 callbacks suppressed [ 78.037389][ T29] audit: type=1400 audit(1752261381.904:5539): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.070472][ T29] audit: type=1400 audit(1752261381.904:5540): avc: denied { prog_load } for pid=8395 comm="syz.2.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.090167][ T29] audit: type=1400 audit(1752261381.924:5541): avc: denied { map_create } for pid=8395 comm="syz.2.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.109958][ T29] audit: type=1400 audit(1752261381.924:5542): avc: denied { prog_load } for pid=8395 comm="syz.2.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.129295][ T29] audit: type=1400 audit(1752261381.924:5543): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 78.161222][ T29] audit: type=1400 audit(1752261382.034:5544): avc: denied { map_create } for pid=8397 comm="syz.2.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 78.181417][ T29] audit: type=1326 audit(1752261382.034:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286a9e929 code=0x7fc00000 [ 78.208005][ T29] audit: type=1326 audit(1752261382.034:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4286a9e929 code=0x7fc00000 [ 78.232921][ T29] audit: type=1326 audit(1752261382.034:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286a9e929 code=0x7fc00000 [ 78.256849][ T29] audit: type=1326 audit(1752261382.034:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.3.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4286a9e929 code=0x7fc00000 [ 78.624345][ T8438] netlink: 'syz.1.2173': attribute type 10 has an invalid length. [ 78.663038][ T8438] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 78.857445][ T8468] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 78.866502][ T8468] veth1_macvtap: left promiscuous mode [ 78.907065][ T8470] __nla_validate_parse: 1 callbacks suppressed [ 78.907083][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2189'. [ 78.941420][ T8470] 8021q: adding VLAN 0 to HW filter on device team1 [ 79.362130][ T8498] netlink: 'syz.4.2202': attribute type 13 has an invalid length. [ 79.405609][ T8498] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 79.419382][ T8498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.442944][ T8500] vlan2: entered allmulticast mode [ 79.449690][ T8500] bond0: entered allmulticast mode [ 79.455640][ T8500] bond_slave_0: entered allmulticast mode [ 79.462752][ T8500] bond_slave_1: entered allmulticast mode [ 79.488603][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2206'. [ 79.601099][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 79.619868][ T8521] bridge0: port 2(syz_tun) entered blocking state [ 79.628106][ T8521] bridge0: port 2(syz_tun) entered disabled state [ 79.635513][ T8521] syz_tun: entered allmulticast mode [ 79.642687][ T8521] syz_tun: entered promiscuous mode [ 79.649469][ T8521] bridge0: port 2(syz_tun) entered blocking state [ 79.660094][ T8521] bridge0: port 2(syz_tun) entered forwarding state [ 79.921052][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 80.212224][ T8612] syz.0.2256(8612): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 80.442734][ T8630] xt_hashlimit: max too large, truncated to 1048576 [ 80.474792][ T8635] netlink: 'syz.0.2267': attribute type 4 has an invalid length. [ 80.662439][ T8664] syz_tun: left allmulticast mode [ 80.667579][ T8664] syz_tun: left promiscuous mode [ 80.672872][ T8664] bridge0: port 2(syz_tun) entered disabled state [ 80.689728][ T8664] bridge_slave_0: left allmulticast mode [ 80.695685][ T8664] bridge_slave_0: left promiscuous mode [ 80.701499][ T8664] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.710198][ T8669] netlink: 'syz.3.2280': attribute type 10 has an invalid length. [ 80.723538][ T8664] $Hÿ: (slave bridge_slave_1): Releasing backup interface [ 80.732129][ T8664] bridge_slave_1: left promiscuous mode [ 80.739737][ T8664] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 80.748260][ T8664] bond_slave_0: left promiscuous mode [ 80.755501][ T8664] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 80.763268][ T8664] bond_slave_1: left promiscuous mode [ 80.773346][ T8664] team0: Port device team_slave_0 removed [ 80.783447][ T8664] team0: Port device team_slave_1 removed [ 80.785822][ T8674] sock: sock_set_timeout: `syz.0.2284' (pid 8674) tries to set negative timeout [ 80.790925][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.806413][ T8664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.816497][ T8664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.824104][ T8664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.846045][ T8669] $Hÿ: left promiscuous mode [ 80.852581][ T8669] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 80.860153][ T8669] team0: Port device $Hÿ added [ 81.251625][ T8731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8731 comm=syz.1.2311 [ 81.339610][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 81.425418][ T8760] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.2324'. [ 81.992442][ T8858] bond0: entered promiscuous mode [ 81.998203][ T8858] bond_slave_0: entered promiscuous mode [ 82.004112][ T8858] bond_slave_1: entered promiscuous mode [ 82.015153][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.309333][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 82.321629][ T8920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 82.478757][ T8952] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 82.487510][ T8952] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 83.042924][ T29] kauditd_printk_skb: 1147 callbacks suppressed [ 83.042939][ T29] audit: type=1400 audit(1752261386.914:6696): avc: denied { map_create } for pid=9048 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.072060][ T29] audit: type=1400 audit(1752261386.914:6697): avc: denied { prog_load } for pid=9048 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.092425][ T29] audit: type=1400 audit(1752261386.914:6698): avc: denied { allowed } for pid=9048 comm="syz.4.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 83.112515][ T29] audit: type=1400 audit(1752261386.924:6699): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.141439][ T29] audit: type=1326 audit(1752261386.924:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 83.170308][ T29] audit: type=1326 audit(1752261386.924:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 83.197990][ T29] audit: type=1326 audit(1752261386.924:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 83.228047][ T29] audit: type=1400 audit(1752261386.924:6703): avc: denied { map_create } for pid=9047 comm="syz.1.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.252524][ T29] audit: type=1326 audit(1752261386.924:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 83.281741][ T29] audit: type=1326 audit(1752261386.924:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 83.717888][ T9095] tls_set_device_offload: netdev not found [ 83.748655][ T9103] netem: change failed [ 83.816552][ T9117] netlink: 'syz.3.2493': attribute type 29 has an invalid length. [ 83.825690][ T9117] netlink: 'syz.3.2493': attribute type 29 has an invalid length. [ 84.200804][ T9184] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2526'. [ 84.792521][ T9224] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 84.831323][ T3707] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 85.225780][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2564'. [ 85.246840][ T9269] xt_hashlimit: max too large, truncated to 1048576 [ 85.827637][ T9331] serio: Serial port ptm0 [ 85.948400][ T9346] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2601'. [ 86.176434][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'. [ 86.185704][ T9370] netlink: 'syz.4.2608': attribute type 18 has an invalid length. [ 86.505111][ T9403] macsec1: entered promiscuous mode [ 86.510922][ T9403] team0: entered promiscuous mode [ 86.531051][ T9403] $Hÿ: entered promiscuous mode [ 86.537155][ T9403] macsec1: entered allmulticast mode [ 86.542515][ T9403] team0: entered allmulticast mode [ 86.611100][ T9403] $Hÿ: entered allmulticast mode [ 86.617715][ T9403] team0: Device macsec1 is already an upper device of the team interface [ 86.629848][ T9403] team0: left allmulticast mode [ 86.638505][ T9403] $Hÿ: left allmulticast mode [ 86.645002][ T9403] team0: left promiscuous mode [ 86.652607][ T9403] $Hÿ: left promiscuous mode [ 86.750361][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2639'. [ 86.760690][ T9429] netlink: 'syz.3.2639': attribute type 7 has an invalid length. [ 86.769533][ T9429] netlink: 'syz.3.2639': attribute type 8 has an invalid length. [ 86.777730][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2639'. [ 86.799770][ T9429] gretap0: entered promiscuous mode [ 86.806788][ T9429] batadv_slave_1: entered promiscuous mode [ 86.815977][ T9429] erspan0: entered promiscuous mode [ 86.834315][ T9433] futex_wake_op: syz.1.2642 tries to shift op by -1; fix this program [ 87.224499][ T9494] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 87.231703][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.240498][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 87.280392][ T9494] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 87.287151][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 87.296015][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 87.308564][ T9494] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 87.315433][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.323818][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 87.337489][ T9494] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 87.344350][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.353340][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 87.360254][ T9494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 87.370755][ T9494] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(13) [ 87.377481][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.386173][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 87.393939][ T9515] vhci_hcd: connection closed [ 87.394057][ T9512] vhci_hcd: connection closed [ 87.399222][ T9495] vhci_hcd: connection closed [ 87.399236][ T9507] vhci_hcd: connection closed [ 87.400884][ T3694] vhci_hcd: stop threads [ 87.409618][ T9521] vhci_hcd: connection closed [ 87.413811][ T3694] vhci_hcd: release socket [ 87.413830][ T3694] vhci_hcd: disconnect device [ 87.434206][ T3694] vhci_hcd: stop threads [ 87.438866][ T3694] vhci_hcd: release socket [ 87.443504][ T3694] vhci_hcd: disconnect device [ 87.468782][ T3694] vhci_hcd: stop threads [ 87.473633][ T3694] vhci_hcd: release socket [ 87.478632][ T3694] vhci_hcd: disconnect device [ 87.483509][ T1034] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 87.494087][ T9497] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 87.503292][ T3694] vhci_hcd: stop threads [ 87.507855][ T3694] vhci_hcd: release socket [ 87.513366][ T3694] vhci_hcd: disconnect device [ 87.540645][ T3694] vhci_hcd: stop threads [ 87.545042][ T3694] vhci_hcd: release socket [ 87.549643][ T3694] vhci_hcd: disconnect device [ 87.601082][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.722354][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2696'. [ 87.735925][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 87.914582][ T9571] geneve0: left allmulticast mode [ 87.949063][ T9571] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.958205][ T9571] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.967885][ T9571] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.976948][ T9571] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.999268][ T9571] geneve2: left promiscuous mode [ 88.004533][ T9571] geneve2: left allmulticast mode [ 88.039891][ T9571] ip6gre1: left allmulticast mode [ 88.046678][ T9571] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.055788][ T9571] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.065317][ T9571] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.075905][ T9571] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.089985][ T9571] vxlan0: left promiscuous mode [ 88.100111][ T29] kauditd_printk_skb: 875 callbacks suppressed [ 88.100129][ T29] audit: type=1400 audit(601.072:7581): avc: denied { write } for pid=9580 comm="syz.2.2703" name="anycast6" dev="proc" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 88.171775][ T29] audit: type=1400 audit(601.102:7582): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.200872][ T29] audit: type=1400 audit(601.112:7583): avc: denied { map_create } for pid=9591 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.221294][ T29] audit: type=1400 audit(601.112:7584): avc: denied { prog_load } for pid=9591 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.224951][ T9596] syz_tun: left allmulticast mode [ 88.241202][ T29] audit: type=1400 audit(601.112:7585): avc: denied { prog_load } for pid=9591 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.241235][ T29] audit: type=1400 audit(601.122:7586): avc: denied { read write } for pid=3937 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.286829][ T29] audit: type=1400 audit(601.212:7587): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 88.295670][ T9596] syz_tun: left promiscuous mode [ 88.326959][ T9596] bridge0: port 3(syz_tun) entered disabled state [ 88.375864][ T29] audit: type=1400 audit(601.302:7588): avc: denied { map_create } for pid=9597 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.395424][ T29] audit: type=1400 audit(601.302:7589): avc: denied { prog_load } for pid=9597 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.417273][ T29] audit: type=1400 audit(601.302:7590): avc: denied { prog_load } for pid=9597 comm="syz.1.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 88.443494][ T9596] bridge_slave_0: left allmulticast mode [ 88.451031][ T9596] bridge_slave_0: left promiscuous mode [ 88.457875][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.496823][ T9596] bridge_slave_1: left allmulticast mode [ 88.504057][ T9596] bridge_slave_1: left promiscuous mode [ 88.509887][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.529338][ T9596] bond0: (slave bond_slave_0): Releasing backup interface [ 88.538120][ T9596] bond_slave_0: left promiscuous mode [ 88.544883][ T9596] bond_slave_0: left allmulticast mode [ 88.580338][ T9596] bond0: (slave bond_slave_1): Releasing backup interface [ 88.590229][ T9596] bond_slave_1: left promiscuous mode [ 88.595869][ T9596] bond_slave_1: left allmulticast mode [ 88.617580][ T9596] team0: Port device team_slave_0 removed [ 88.624631][ T9596] team0: Port device team_slave_1 removed [ 88.636994][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.645818][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.658948][ T9602] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2711'. [ 88.675600][ T9618] netlink: 'syz.4.2717': attribute type 6 has an invalid length. [ 88.684007][ T9618] netlink: 6016 bytes leftover after parsing attributes in process `syz.4.2717'. [ 88.752054][ T9633] netlink: 'syz.0.2728': attribute type 13 has an invalid length. [ 88.825004][ T9633] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.839930][ T9633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.976842][ T9653] vlan2: entered allmulticast mode [ 88.983844][ T9653] $Hÿ: entered allmulticast mode [ 89.205838][ T9676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9676 comm=syz.4.2745 [ 89.277094][ T3401] IPVS: starting estimator thread 0... [ 89.371063][ T9688] IPVS: using max 2256 ests per chain, 112800 per kthread [ 90.443437][ T9756] __nla_validate_parse: 1 callbacks suppressed [ 90.443457][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2779'. [ 90.461359][ T9756] netem: change failed [ 90.525549][ T9769] netlink: 'syz.2.2786': attribute type 6 has an invalid length. [ 90.533654][ T9769] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2786'. [ 90.623279][ T9774] sock: sock_set_timeout: `syz.2.2789' (pid 9774) tries to set negative timeout [ 90.707906][ T9798] netlink: 'syz.1.2800': attribute type 6 has an invalid length. [ 90.715835][ T9798] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2800'. [ 90.755376][ T9800] syz_tun: left allmulticast mode [ 90.760538][ T9800] syz_tun: left promiscuous mode [ 90.765706][ T9800] bridge0: port 3(syz_tun) entered disabled state [ 90.787384][ T9800] bridge_slave_0: left allmulticast mode [ 90.793237][ T9800] bridge_slave_0: left promiscuous mode [ 90.798940][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.809145][ T9800] bridge_slave_1: left allmulticast mode [ 90.815053][ T9800] bridge_slave_1: left promiscuous mode [ 90.821111][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.832627][ T9800] bond0: (slave veth0_to_bond): Releasing backup interface [ 90.845249][ T9800] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 90.853819][ T9800] bond_slave_0: left promiscuous mode [ 90.859807][ T9812] xt_hashlimit: size too large, truncated to 1048576 [ 90.868386][ T9812] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 90.876678][ T9800] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 90.887160][ T9800] bond_slave_1: left promiscuous mode [ 90.896066][ T9800] team0: Port device team_slave_0 removed [ 90.905715][ T9800] team0: Port device team_slave_1 removed [ 90.912809][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.920239][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.928969][ T9800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.938007][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.272235][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.279552][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.435729][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.450930][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.494566][ T9832] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.504998][ T9832] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.514141][ T9832] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.524402][ T9832] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.526712][ T9846] netlink: 'syz.4.2817': attribute type 10 has an invalid length. [ 91.541762][ T9846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2817'. [ 91.551743][ T9832] geneve2: left promiscuous mode [ 91.557018][ T9832] geneve2: left allmulticast mode [ 91.563015][ T9832] ip6gre1: left allmulticast mode [ 91.568819][ T9848] netlink: 'syz.1.2822': attribute type 10 has an invalid length. [ 91.570430][ T9832] ip6gre3: left allmulticast mode [ 91.583109][ T9832] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.593018][ T9832] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.602128][ T9832] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.611313][ T9832] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.622141][ T9832] vxlan0: left promiscuous mode [ 91.630218][ T9841] bridge0: port 1(syz_tun) entered blocking state [ 91.638759][ T9841] bridge0: port 1(syz_tun) entered disabled state [ 91.661176][ T9841] syz_tun: entered allmulticast mode [ 91.671773][ T9841] syz_tun: entered promiscuous mode [ 91.700098][ T9844] bond0: (slave bridge_slave_1): Releasing backup interface [ 91.732440][ T9847] syz_tun: left allmulticast mode [ 91.737660][ T9847] syz_tun: left promiscuous mode [ 91.743397][ T9847] bridge0: port 1(syz_tun) entered disabled state [ 91.754991][ T9847] team0: Port device $Hÿ removed [ 91.771709][ T9846] dummy0: entered promiscuous mode [ 91.778299][ T9846] bridge0: port 1(dummy0) entered blocking state [ 91.785086][ T9846] bridge0: port 1(dummy0) entered disabled state [ 91.802367][ T9846] dummy0: entered allmulticast mode [ 91.812462][ T9846] bridge0: port 1(dummy0) entered blocking state [ 91.819190][ T9846] bridge0: port 1(dummy0) entered forwarding state [ 91.850762][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.859032][ T9848] team0: Port device bond0 added [ 92.105124][ T9884] SELinux: syz.1.2838 (9884) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.187456][ T9894] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 92.266152][ T9904] Cannot find del_set index 0 as target [ 92.367273][ T9917] serio: Serial port ptm0 [ 92.471223][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2862'. [ 92.485357][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2862'. [ 92.561163][ T1034] usb 5-1: enqueue for inactive port 0 [ 92.566892][ T1034] usb 5-1: enqueue for inactive port 0 [ 92.641116][ T1034] vhci_hcd: vhci_device speed not set [ 93.004529][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2887'. [ 93.138266][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 93.138284][ T29] audit: type=1400 audit(606.102:8163): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.182982][ T29] audit: type=1400 audit(606.152:8164): avc: denied { map_create } for pid=10005 comm="syz.1.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.220342][ T29] audit: type=1400 audit(606.172:8165): avc: denied { prog_load } for pid=10005 comm="syz.1.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.240161][ T29] audit: type=1326 audit(606.172:8166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 93.265369][ T29] audit: type=1326 audit(606.172:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 93.290436][ T29] audit: type=1326 audit(606.172:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 93.317279][ T29] audit: type=1326 audit(606.172:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 93.341605][ T29] audit: type=1326 audit(606.172:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10005 comm="syz.1.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168756e929 code=0x7ffc0000 [ 93.367023][ T29] audit: type=1400 audit(606.182:8171): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.398817][ T29] audit: type=1400 audit(606.262:8172): avc: denied { prog_load } for pid=10007 comm="syz.1.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.471326][T10000] ================================================================== [ 93.479618][T10000] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 93.487726][T10000] [ 93.490616][T10000] read to 0xffff88811b7549a8 of 4 bytes by task 10004 on cpu 1: [ 93.499855][T10000] atime_needs_update+0x25f/0x3e0 [ 93.505890][T10000] touch_atime+0x4a/0x340 [ 93.510279][T10000] shmem_file_read_iter+0x477/0x540 [ 93.515526][T10000] copy_splice_read+0x3c1/0x5f0 [ 93.520424][T10000] splice_direct_to_actor+0x290/0x680 [ 93.526118][T10000] do_splice_direct+0xda/0x150 [ 93.531099][T10000] do_sendfile+0x380/0x650 [ 93.535732][T10000] __x64_sys_sendfile64+0x105/0x150 [ 93.541054][T10000] x64_sys_call+0xb39/0x2fb0 [ 93.545688][T10000] do_syscall_64+0xd2/0x200 [ 93.550210][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.556147][T10000] [ 93.559570][T10000] write to 0xffff88811b7549a8 of 4 bytes by task 10000 on cpu 0: [ 93.567838][T10000] touch_atime+0x1e8/0x340 [ 93.572734][T10000] shmem_file_read_iter+0x477/0x540 [ 93.578154][T10000] copy_splice_read+0x3c1/0x5f0 [ 93.583311][T10000] splice_direct_to_actor+0x290/0x680 [ 93.588720][T10000] do_splice_direct+0xda/0x150 [ 93.593545][T10000] do_sendfile+0x380/0x650 [ 93.598003][T10000] __x64_sys_sendfile64+0x105/0x150 [ 93.603236][T10000] x64_sys_call+0xb39/0x2fb0 [ 93.607947][T10000] do_syscall_64+0xd2/0x200 [ 93.613095][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.619042][T10000] [ 93.621391][T10000] value changed: 0x19c5f3a4 -> 0x1a5e8a24 [ 93.627140][T10000] [ 93.629488][T10000] Reported by Kernel Concurrency Sanitizer on: [ 93.636206][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.2.2891 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(voluntary) [ 93.648826][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.659172][T10000] ================================================================== [ 97.201701][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 101.041317][ T10] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec