last executing test programs: 1.133133049s ago: executing program 3 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r2, 0x199c, 0xf69c, 0xc, 0x0, 0x0) 953.016171ms ago: executing program 3 (id=797): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$packet(0x11, 0x2, 0x300) 951.026622ms ago: executing program 0 (id=798): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x34d}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 768.304785ms ago: executing program 3 (id=801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 767.876175ms ago: executing program 4 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 714.466436ms ago: executing program 0 (id=803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x17}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 713.784526ms ago: executing program 3 (id=805): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 713.381296ms ago: executing program 4 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 656.384868ms ago: executing program 0 (id=807): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x2) 645.598637ms ago: executing program 0 (id=808): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 645.147518ms ago: executing program 3 (id=809): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4008010) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 624.761448ms ago: executing program 4 (id=810): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r1) exit(0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00') 490.72519ms ago: executing program 2 (id=814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) 489.858611ms ago: executing program 1 (id=824): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 461.120031ms ago: executing program 2 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 368.305343ms ago: executing program 0 (id=816): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x10}}], 0x30}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 367.992773ms ago: executing program 2 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r2) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 367.690213ms ago: executing program 1 (id=818): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 366.186493ms ago: executing program 0 (id=819): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000780)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 341.888433ms ago: executing program 2 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 234.967496ms ago: executing program 2 (id=821): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x87) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 215.890986ms ago: executing program 1 (id=822): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='mm_page_free\x00', r0, 0x0, 0x4}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 195.766236ms ago: executing program 2 (id=823): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x2, @perf_config_ext={0x8, 0x4}, 0x8, 0x0, 0x800000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 61.336118ms ago: executing program 1 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4e, 0x2, 0x0, 0xffffffeffffffffd}, {0x800, 0x0, 0x6, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3c0}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 311.02µs ago: executing program 1 (id=826): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) msgget$private(0x0, 0xffffffffffffffdc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getegid() 0s ago: executing program 1 (id=827): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 25.203348][ T29] audit: type=1400 audit(1757606952.348:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.204147][ T3292] cgroup: Unknown subsys name 'net' [ 25.226290][ T29] audit: type=1400 audit(1757606952.348:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.254210][ T29] audit: type=1400 audit(1757606952.388:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.407743][ T3292] cgroup: Unknown subsys name 'cpuset' [ 25.414057][ T3292] cgroup: Unknown subsys name 'rlimit' [ 25.523841][ T29] audit: type=1400 audit(1757606952.668:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.547304][ T29] audit: type=1400 audit(1757606952.668:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.567772][ T29] audit: type=1400 audit(1757606952.668:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.588412][ T29] audit: type=1400 audit(1757606952.668:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.608898][ T29] audit: type=1400 audit(1757606952.668:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.616410][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.633870][ T29] audit: type=1400 audit(1757606952.668:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.665680][ T29] audit: type=1400 audit(1757606952.798:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.713873][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.404405][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.508706][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.515836][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.523315][ T3303] bridge_slave_0: entered allmulticast mode [ 27.529924][ T3303] bridge_slave_0: entered promiscuous mode [ 27.551449][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.558559][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.565697][ T3303] bridge_slave_1: entered allmulticast mode [ 27.572410][ T3303] bridge_slave_1: entered promiscuous mode [ 27.594190][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.608536][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.632158][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.659773][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.673790][ T3303] team0: Port device team_slave_0 added [ 27.681156][ T3303] team0: Port device team_slave_1 added [ 27.693625][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 27.736175][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.743223][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.769452][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.780403][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.787496][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.795216][ T3309] bridge_slave_0: entered allmulticast mode [ 27.801623][ T3309] bridge_slave_0: entered promiscuous mode [ 27.808892][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.815926][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.823162][ T3309] bridge_slave_1: entered allmulticast mode [ 27.829617][ T3309] bridge_slave_1: entered promiscuous mode [ 27.845315][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.852381][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.878460][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.913048][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.925697][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.968549][ T3303] hsr_slave_0: entered promiscuous mode [ 27.974515][ T3303] hsr_slave_1: entered promiscuous mode [ 27.989898][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.998747][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.005917][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.013610][ T3305] bridge_slave_0: entered allmulticast mode [ 28.020011][ T3305] bridge_slave_0: entered promiscuous mode [ 28.026403][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.033528][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.040734][ T3312] bridge_slave_0: entered allmulticast mode [ 28.047394][ T3312] bridge_slave_0: entered promiscuous mode [ 28.054489][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.061704][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.068951][ T3312] bridge_slave_1: entered allmulticast mode [ 28.075513][ T3312] bridge_slave_1: entered promiscuous mode [ 28.082538][ T3309] team0: Port device team_slave_0 added [ 28.091001][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.098103][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.105195][ T3305] bridge_slave_1: entered allmulticast mode [ 28.111703][ T3305] bridge_slave_1: entered promiscuous mode [ 28.133974][ T3309] team0: Port device team_slave_1 added [ 28.161087][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.174699][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.181762][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.207810][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.224114][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.239107][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.250885][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.257913][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.284040][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.304709][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.329366][ T3312] team0: Port device team_slave_0 added [ 28.340850][ T3305] team0: Port device team_slave_0 added [ 28.347394][ T3312] team0: Port device team_slave_1 added [ 28.369582][ T3305] team0: Port device team_slave_1 added [ 28.386707][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.393860][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.419898][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.438332][ T3309] hsr_slave_0: entered promiscuous mode [ 28.444357][ T3309] hsr_slave_1: entered promiscuous mode [ 28.450244][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.455971][ T3309] Cannot create hsr debugfs directory [ 28.466441][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.473773][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.481036][ T3311] bridge_slave_0: entered allmulticast mode [ 28.487562][ T3311] bridge_slave_0: entered promiscuous mode [ 28.496634][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.503806][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.511035][ T3311] bridge_slave_1: entered allmulticast mode [ 28.517730][ T3311] bridge_slave_1: entered promiscuous mode [ 28.524000][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.530977][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.557303][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.600990][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.608096][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.634289][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.656791][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.666172][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.673205][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.699657][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.722324][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.751474][ T3312] hsr_slave_0: entered promiscuous mode [ 28.757450][ T3312] hsr_slave_1: entered promiscuous mode [ 28.763199][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.768951][ T3312] Cannot create hsr debugfs directory [ 28.783356][ T3311] team0: Port device team_slave_0 added [ 28.789908][ T3311] team0: Port device team_slave_1 added [ 28.836728][ T3305] hsr_slave_0: entered promiscuous mode [ 28.842836][ T3305] hsr_slave_1: entered promiscuous mode [ 28.848767][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 28.854477][ T3305] Cannot create hsr debugfs directory [ 28.864888][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.871916][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.898462][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.909975][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.916919][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.943286][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.010975][ T3311] hsr_slave_0: entered promiscuous mode [ 29.016908][ T3311] hsr_slave_1: entered promiscuous mode [ 29.023006][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.028768][ T3311] Cannot create hsr debugfs directory [ 29.054893][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.067267][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.088675][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.104820][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.150952][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.159701][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.176847][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.188878][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.232190][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.250853][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.261917][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.271207][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.284300][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.294533][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.303153][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.321422][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.330153][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.361331][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.373058][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.383379][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.390526][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.400134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.407186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.423730][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.432433][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.446017][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.481599][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.490873][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.514002][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.534444][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.546660][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.553837][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.573016][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.580169][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.593465][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.600732][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.620125][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.627549][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.668195][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.680304][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.695742][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.715302][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.736377][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.751386][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.758503][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.796393][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.806807][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.820906][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.828028][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.837081][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.844344][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.855988][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.863155][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.913829][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.923052][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.975064][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.003255][ T3303] veth0_vlan: entered promiscuous mode [ 30.029380][ T3303] veth1_vlan: entered promiscuous mode [ 30.050268][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.089603][ T3303] veth0_macvtap: entered promiscuous mode [ 30.102806][ T3312] veth0_vlan: entered promiscuous mode [ 30.119511][ T3303] veth1_macvtap: entered promiscuous mode [ 30.147702][ T3312] veth1_vlan: entered promiscuous mode [ 30.161697][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.172709][ T3309] veth0_vlan: entered promiscuous mode [ 30.185580][ T3312] veth0_macvtap: entered promiscuous mode [ 30.196927][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.208161][ T3309] veth1_vlan: entered promiscuous mode [ 30.215363][ T3312] veth1_macvtap: entered promiscuous mode [ 30.227661][ T3436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.241148][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.253291][ T3436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.271956][ T3436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.286624][ T3311] veth0_vlan: entered promiscuous mode [ 30.293210][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.300749][ T3436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.324351][ T3309] veth0_macvtap: entered promiscuous mode [ 30.326934][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.326947][ T29] audit: type=1400 audit(1757606957.468:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.C1hbYt/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.333423][ T3305] veth0_vlan: entered promiscuous mode [ 30.351602][ T29] audit: type=1400 audit(1757606957.498:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.363782][ T124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.365921][ T29] audit: type=1400 audit(1757606957.498:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.C1hbYt/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.389642][ T3311] veth1_vlan: entered promiscuous mode [ 30.396722][ T29] audit: type=1400 audit(1757606957.498:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.396746][ T29] audit: type=1400 audit(1757606957.498:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.C1hbYt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.430520][ T3311] veth0_macvtap: entered promiscuous mode [ 30.449469][ T29] audit: type=1400 audit(1757606957.498:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.C1hbYt/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.478421][ T3311] veth1_macvtap: entered promiscuous mode [ 30.482172][ T29] audit: type=1400 audit(1757606957.498:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.527363][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.545287][ T29] audit: type=1400 audit(1757606957.688:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.565427][ T3309] veth1_macvtap: entered promiscuous mode [ 30.568102][ T29] audit: type=1400 audit(1757606957.688:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.578601][ T3305] veth1_vlan: entered promiscuous mode [ 30.602483][ T124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.613189][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.623555][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.637535][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.646168][ T124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.666545][ T124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.680382][ T29] audit: type=1400 audit(1757606957.808:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.710139][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.717592][ T124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.726318][ T124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.749436][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.772091][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.783485][ T3305] veth0_macvtap: entered promiscuous mode [ 30.802088][ T3476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.811763][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.821923][ T3305] veth1_macvtap: entered promiscuous mode [ 30.827943][ T3476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.846233][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.860043][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.871910][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.888455][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.915765][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.946602][ T124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.970153][ T124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.997601][ T378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.023608][ T378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.147316][ T3509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 31.255966][ T3523] process 'syz.3.20' launched '/dev/fd/5' with NULL argv: empty string added [ 31.280758][ T3527] syz.1.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.306778][ T3530] bridge0: entered promiscuous mode [ 31.316693][ T3530] macvtap1: entered allmulticast mode [ 31.322256][ T3530] bridge0: entered allmulticast mode [ 31.343973][ T3530] bridge0: left allmulticast mode [ 31.349193][ T3530] bridge0: left promiscuous mode [ 31.368838][ T3537] netlink: 5 bytes leftover after parsing attributes in process `syz.1.27'. [ 31.392318][ T3537] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 31.400795][ T3537] 0ªî{X¹¦: entered allmulticast mode [ 31.411751][ T3537] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 31.473896][ T3549] loop3: detected capacity change from 0 to 1024 [ 31.494692][ T3549] EXT4-fs: Ignoring removed bh option [ 31.509145][ T3549] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 31.517002][ T3556] loop0: detected capacity change from 0 to 128 [ 31.573455][ T3561] loop2: detected capacity change from 0 to 512 [ 31.586872][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.607882][ T3561] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.621115][ T3561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.644796][ T3561] EXT4-fs (loop2): 1 truncate cleaned up [ 31.652188][ T3561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.665967][ T3561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.744788][ T3577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.764294][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.784625][ T3579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 31.793542][ T3579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 31.846334][ T3590] netlink: 'syz.4.49': attribute type 39 has an invalid length. [ 31.885266][ T3594] mmap: syz.1.51 (3594) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.011001][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 32.023910][ T3609] ipvlan2: entered promiscuous mode [ 32.052962][ T3613] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 32.084269][ T3615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 32.093288][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 32.106354][ T3615] bridge0: port 3(macsec1) entered blocking state [ 32.113045][ T3615] bridge0: port 3(macsec1) entered disabled state [ 32.120156][ T3615] macsec1: entered allmulticast mode [ 32.126841][ T3615] macsec1: left allmulticast mode [ 32.787328][ T3641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.950413][ T3577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.134130][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 33.164954][ T3675] netlink: 168 bytes leftover after parsing attributes in process `syz.4.86'. [ 33.180586][ T3396] kernel write not supported for file bpf-prog (pid: 3396 comm: kworker/0:5) [ 33.323586][ T3577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.413724][ T3577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.494697][ T378] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.509810][ T3705] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 33.517753][ T378] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.570300][ T378] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.592839][ T378] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.629849][ T3715] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 33.629849][ T3715] program syz.3.103 not setting count and/or reply_len properly [ 33.754064][ T3731] netlink: 'syz.3.110': attribute type 30 has an invalid length. [ 33.790132][ T3731] Zero length message leads to an empty skb [ 33.791379][ T124] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.810545][ T124] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.824318][ T124] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.843329][ T124] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.879984][ T3731] syz.3.110 (3731) used greatest stack depth: 9976 bytes left [ 34.150795][ T3761] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 34.257879][ T3775] loop3: detected capacity change from 0 to 512 [ 34.280413][ T3775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.306097][ T3775] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.400440][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.412052][ T3783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3783 comm=syz.0.133 [ 34.564001][ T3804] loop0: detected capacity change from 0 to 128 [ 35.472160][ T3859] geneve0: entered allmulticast mode [ 35.497482][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 35.497499][ T29] audit: type=1400 audit(1757606962.648:348): avc: denied { listen } for pid=3861 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.536563][ T29] audit: type=1400 audit(1757606962.648:349): avc: denied { accept } for pid=3861 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.579120][ T29] audit: type=1326 audit(1757606962.718:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.602726][ T29] audit: type=1326 audit(1757606962.718:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.606375][ T3871] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.626548][ T29] audit: type=1326 audit(1757606962.718:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.657402][ T29] audit: type=1326 audit(1757606962.718:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.681334][ T29] audit: type=1326 audit(1757606962.718:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.682853][ T3875] sctp: [Deprecated]: syz.2.171 (pid 3875) Use of int in maxseg socket option. [ 35.682853][ T3875] Use struct sctp_assoc_value instead [ 35.704724][ T29] audit: type=1326 audit(1757606962.718:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.704757][ T29] audit: type=1326 audit(1757606962.718:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.704783][ T29] audit: type=1326 audit(1757606962.718:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 35.812579][ T3871] smc: net device bond0 erased user defined pnetid SYZ0 [ 35.849067][ T3881] loop3: detected capacity change from 0 to 1024 [ 35.864910][ T3881] EXT4-fs: Ignoring removed orlov option [ 35.882020][ T3881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.909139][ T3881] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 35.919192][ T3881] team0: Device hsr_slave_0 failed to register rx_handler [ 35.947509][ T3881] syz.3.174 (3881) used greatest stack depth: 9696 bytes left [ 35.974670][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.095914][ T3898] tipc: Enabling of bearer rejected, failed to enable media [ 36.244234][ T3914] loop4: detected capacity change from 0 to 512 [ 36.267644][ T3914] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.187: bad orphan inode 11862016 [ 36.293076][ C0] hrtimer: interrupt took 42667 ns [ 36.303063][ T3914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.347470][ T3914] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.520213][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.529795][ T3941] loop1: detected capacity change from 0 to 1024 [ 36.537688][ T3941] ======================================================= [ 36.537688][ T3941] WARNING: The mand mount option has been deprecated and [ 36.537688][ T3941] and is ignored by this kernel. Remove the mand [ 36.537688][ T3941] option from the mount to silence this warning. [ 36.537688][ T3941] ======================================================= [ 36.581542][ T3941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.611647][ T3941] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 36.634226][ T3952] macvtap0: refused to change device tx_queue_len [ 36.663542][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.682323][ T3956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.951945][ T4014] loop2: detected capacity change from 0 to 512 [ 37.051229][ T4004] __nla_validate_parse: 6 callbacks suppressed [ 37.051249][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 37.184358][ T4041] macvlan1: entered promiscuous mode [ 37.192934][ T4041] ipvlan0: entered promiscuous mode [ 37.199204][ T4041] ipvlan0: left promiscuous mode [ 37.207171][ T4041] macvlan1: left promiscuous mode [ 37.243911][ T4055] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 37.306506][ T4067] loop1: detected capacity change from 0 to 512 [ 37.339780][ T4067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.352452][ T4067] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.770805][ T4087] loop4: detected capacity change from 0 to 512 [ 37.829735][ T4087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.938015][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.149432][ T4108] capability: warning: `syz.0.236' uses deprecated v2 capabilities in a way that may be insecure [ 38.450687][ T4144] $Hÿ: renamed from bond0 (while UP) [ 38.480865][ T4144] $Hÿ: entered promiscuous mode [ 38.485942][ T4144] bond_slave_0: entered promiscuous mode [ 38.492111][ T4144] bond_slave_1: entered promiscuous mode [ 38.606358][ T4147] macvtap0: refused to change device tx_queue_len [ 38.676998][ T4153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 38.741476][ T4165] loop2: detected capacity change from 0 to 7 [ 38.756584][ T4164] loop4: detected capacity change from 0 to 1024 [ 38.770792][ T4171] loop3: detected capacity change from 0 to 512 [ 38.778571][ T4171] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.801796][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.819251][ T4164] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.827658][ T4067] syz.1.226 (4067) used greatest stack depth: 6216 bytes left [ 38.830541][ T4164] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.839592][ T4171] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.851089][ T4164] JBD2: no valid journal superblock found [ 38.863796][ T4164] EXT4-fs (loop4): Could not load journal inode [ 38.887256][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.897518][ T4171] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.254: corrupted xattr block 32: bad e_name length [ 38.925228][ T4171] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.934407][ T4164] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 38.951509][ T4171] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.254: corrupted xattr block 32: bad e_name length [ 38.999073][ T4171] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 39.014744][ T4188] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.254: failed to insert inode 16: doubly allocated? [ 39.037153][ T4194] Falling back ldisc for ttyS3. [ 39.054762][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.116822][ T4221] SELinux: Context system_u:object_r:lost_found_t:s0 is not valid (left unmapped). [ 39.153882][ T4226] loop0: detected capacity change from 0 to 2048 [ 39.239710][ T4226] EXT4-fs (loop0): failed to initialize system zone (-117) [ 39.278011][ T4226] EXT4-fs (loop0): mount failed [ 39.336203][ T4256] loop1: detected capacity change from 0 to 2048 [ 39.375364][ T4271] loop0: detected capacity change from 0 to 164 [ 39.398443][ T3533] loop1: p1 < > p4 [ 39.408874][ T3533] loop1: p4 size 8388608 extends beyond EOD, truncated [ 39.422637][ T4271] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.435738][ T4256] loop1: p1 < > p4 [ 39.455544][ T4256] loop1: p4 size 8388608 extends beyond EOD, truncated [ 39.469205][ T4271] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.529317][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 39.544178][ T3533] udevd[3533]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.794608][ T4339] atomic_op ffff888127ad4128 conn xmit_atomic 0000000000000000 [ 40.060096][ T4384] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 40.091050][ T4384] SELinux: failed to load policy [ 40.133392][ T4398] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.149013][ T4398] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 40.307192][ T4423] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 40.307192][ T4423] program syz.1.320 not setting count and/or reply_len properly [ 40.356262][ T4329] IPVS: starting estimator thread 0... [ 40.362478][ T4429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.384153][ T4429] tipc: Started in network mode [ 40.389235][ T4429] tipc: Node identity ac1414aa, cluster identity 4711 [ 40.398348][ T4429] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 40.405248][ T4429] tipc: Enabled bearer , priority 10 [ 40.447195][ T4435] IPVS: using max 2640 ests per chain, 132000 per kthread [ 40.497344][ T4453] loop1: detected capacity change from 0 to 128 [ 40.515130][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 40.515146][ T29] audit: type=1326 audit(1757606967.658:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26761bd80a code=0x7ffc0000 [ 40.540982][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 40.559744][ T29] audit: type=1326 audit(1757606967.708:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26761bd80a code=0x7ffc0000 [ 40.583168][ T29] audit: type=1326 audit(1757606967.708:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f26761bd417 code=0x7ffc0000 [ 40.606731][ T29] audit: type=1326 audit(1757606967.708:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f26761c034a code=0x7ffc0000 [ 40.662043][ T29] audit: type=1326 audit(1757606967.788:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26761bd510 code=0x7ffc0000 [ 40.677035][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 40.685624][ T29] audit: type=1326 audit(1757606967.788:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f26761bd8f7 code=0x7ffc0000 [ 40.715773][ T29] audit: type=1326 audit(1757606967.788:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26761bd510 code=0x7ffc0000 [ 40.739666][ T29] audit: type=1326 audit(1757606967.788:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 40.763099][ T29] audit: type=1326 audit(1757606967.788:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 40.786564][ T29] audit: type=1326 audit(1757606967.788:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4448 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 40.817094][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 40.855914][ T4484] rdma_op ffff888127ad5580 conn xmit_rdma 0000000000000000 [ 40.901307][ T4489] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.926787][ T4495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4495 comm=syz.3.340 [ 40.957041][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.020516][ T4511] loop2: detected capacity change from 0 to 128 [ 41.043128][ T4511] EXT4-fs: Ignoring removed nobh option [ 41.065467][ T4511] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.084474][ T4511] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.097039][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.118912][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.183591][ T4539] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.221327][ T4541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.352'. [ 41.237047][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.255625][ T4554] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.256130][ T4539] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.296395][ T4560] loop3: detected capacity change from 0 to 2048 [ 41.323484][ T4568] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 41.323484][ T4568] program syz.0.358 not setting count and/or reply_len properly [ 41.357724][ T3533] loop3: p1 < > p4 [ 41.363490][ T3533] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.371873][ T4539] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.372731][ T4574] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.382596][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.400249][ T4560] loop3: p1 < > p4 [ 41.405059][ T4560] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.421109][ T4574] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 41.440451][ T4539] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.502076][ T3533] udevd[3533]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 41.517086][ T3470] tipc: Node number set to 2886997162 [ 41.525616][ T124] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.564977][ T124] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.582683][ T124] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.602812][ T124] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.657043][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.681520][ T4631] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 41.681520][ T4631] program syz.2.370 not setting count and/or reply_len properly [ 41.682686][ T4630] loop1: detected capacity change from 0 to 512 [ 41.927037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 41.942302][ T4630] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 41.951085][ T4630] FAT-fs (loop1): Filesystem has been set read-only [ 41.959446][ T4630] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 41.967788][ T4630] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 42.059257][ T4670] loop3: detected capacity change from 0 to 512 [ 42.103812][ T4670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.147148][ T4670] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.172392][ T4670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.224918][ T4670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.246181][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 42.415859][ T4706] bridge0: entered promiscuous mode [ 42.425630][ T4706] macsec1: entered promiscuous mode [ 42.434693][ T4706] bridge0: port 3(macsec1) entered blocking state [ 42.441225][ T4706] bridge0: port 3(macsec1) entered disabled state [ 42.448060][ T4706] macsec1: entered allmulticast mode [ 42.453371][ T4706] bridge0: entered allmulticast mode [ 42.457045][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 42.465883][ T4706] macsec1: left allmulticast mode [ 42.471032][ T4706] bridge0: left allmulticast mode [ 42.492913][ T4706] bridge0: left promiscuous mode [ 42.517258][ T3405] kernel write not supported for file /179/oom_adj (pid: 3405 comm: kworker/0:6) [ 42.782119][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.926201][ T4779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.050706][ T4779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.116262][ T4816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4816 comm=syz.0.409 [ 43.148671][ T4779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.168532][ T4816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 43.241581][ T4779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.367084][ T3436] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.385182][ T3436] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.406878][ T3436] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.450141][ T3436] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.537060][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 43.582241][ T4861] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 43.653902][ T4875] bridge0: entered promiscuous mode [ 43.670499][ T4875] macvtap1: entered allmulticast mode [ 43.675953][ T4875] bridge0: entered allmulticast mode [ 43.697161][ T4875] bridge0: port 3(macvtap1) entered blocking state [ 43.703767][ T4875] bridge0: port 3(macvtap1) entered disabled state [ 43.748869][ T4875] bridge0: left allmulticast mode [ 43.754070][ T4875] bridge0: left promiscuous mode [ 44.106540][ T4947] loop4: detected capacity change from 0 to 164 [ 44.126349][ T4947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.201799][ T4947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.322651][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.330210][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.337748][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.345147][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.352719][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.360177][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.367693][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.375091][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.382662][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.390221][ T4329] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.404283][ T4329] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 44.478495][ T4976] fido_id[4976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.510950][ T4986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'. [ 44.577052][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 44.678164][ T5004] loop4: detected capacity change from 0 to 1024 [ 44.717562][ T5004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.755102][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.927201][ T5036] netlink: 'syz.4.455': attribute type 2 has an invalid length. [ 45.093002][ T5050] loop3: detected capacity change from 0 to 512 [ 45.102508][ T5049] loop4: detected capacity change from 0 to 512 [ 45.120863][ T5049] EXT4-fs: Ignoring removed oldalloc option [ 45.121069][ T5050] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.157472][ T5049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.458: Parent and EA inode have the same ino 15 [ 45.173835][ T5050] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 45.182328][ T5049] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.197832][ T5050] System zones: 1-12 [ 45.203128][ T5050] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.457: corrupted in-inode xattr: e_value size too large [ 45.217535][ T5049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.458: Parent and EA inode have the same ino 15 [ 45.231375][ T5049] EXT4-fs (loop4): 1 orphan inode deleted [ 45.237548][ T5050] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.457: couldn't read orphan inode 15 (err -117) [ 45.251280][ T5049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.264461][ T5050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.290105][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.342200][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.409041][ T5072] vhci_hcd: invalid port number 96 [ 45.414214][ T5072] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 45.473645][ T5091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.468'. [ 45.595325][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 45.595342][ T29] audit: type=1326 audit(1757606972.738:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 45.625793][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 45.626289][ T5118] loop3: detected capacity change from 0 to 4096 [ 45.640988][ T29] audit: type=1326 audit(1757606972.788:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54610ad510 code=0x7ffc0000 [ 45.664986][ T29] audit: type=1326 audit(1757606972.788:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 45.688334][ T29] audit: type=1326 audit(1757606972.788:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 45.688732][ T5118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.719488][ T29] audit: type=1326 audit(1757606972.788:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 45.742635][ T29] audit: type=1326 audit(1757606972.788:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 45.766352][ T29] audit: type=1326 audit(1757606972.788:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.2.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 45.792217][ T5118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.996599][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.078805][ T5167] SELinux: failed to load policy [ 46.204350][ T29] audit: type=1326 audit(1757606973.348:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b02deba9 code=0x7ffc0000 [ 46.231590][ T29] audit: type=1326 audit(1757606973.348:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b02deba9 code=0x7ffc0000 [ 46.255004][ T29] audit: type=1326 audit(1757606973.348:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5185 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73b02deba9 code=0x7ffc0000 [ 46.440402][ T5213] vlan2: entered allmulticast mode [ 46.459887][ T5217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.503'. [ 46.657026][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 46.739389][ T5259] smc: net device bond0 applied user defined pnetid SYZ0 [ 46.746903][ T5259] smc: net device bond0 erased user defined pnetid SYZ0 [ 46.806005][ T5263] syz.0.516 uses obsolete (PF_INET,SOCK_PACKET) [ 46.814999][ T5263] syzkaller1: entered promiscuous mode [ 46.820730][ T5263] syzkaller1: entered allmulticast mode [ 46.832197][ T5263] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 46.964369][ T5302] loop3: detected capacity change from 0 to 1024 [ 46.986570][ T5302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.027804][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.028920][ T5335] SELinux: failed to load policy [ 47.237831][ T5372] option changes via remount are deprecated (pid=5369 comm=syz.4.541) [ 47.547881][ T5422] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.623996][ T5422] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.669682][ T5422] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.697104][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 47.747911][ T5422] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.799527][ T5466] smc: net device bond0 applied user defined pnetid SYZ0 [ 47.807772][ T5466] smc: net device bond0 erased user defined pnetid SYZ0 [ 47.824786][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.847729][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.881931][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.897062][ T124] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.212212][ T5544] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 48.421481][ T5571] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.579'. [ 48.437398][ T5567] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.579'. [ 48.497918][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 48.737089][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 49.026853][ T5692] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.045795][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 49.062842][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 49.079337][ T5700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.086617][ T5700] IPv6: NLM_F_CREATE should be set when creating new route [ 49.093960][ T5700] IPv6: NLM_F_CREATE should be set when creating new route [ 49.102386][ T5700] ------------[ cut here ]------------ [ 49.107905][ T5700] WARNING: CPU: 1 PID: 5700 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xc41/0xcb0 [ 49.118323][ T5700] Modules linked in: [ 49.122246][ T5700] CPU: 1 UID: 0 PID: 5700 Comm: syz.4.610 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.132114][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 49.142362][ T5700] RIP: 0010:nsim_fib_event_nb+0xc41/0xcb0 [ 49.148238][ T5700] Code: ab 12 fe be 01 00 00 00 4c 8b 74 24 18 49 8d 7e 2c e8 d3 77 a8 fe 4c 8b 2c 24 48 8b 6c 24 10 e9 93 f6 ff ff e8 40 ab 12 fe 90 <0f> 0b 90 e9 5a fc ff ff e8 32 ab 12 fe e9 a5 f9 ff ff e8 28 ab 12 [ 49.155823][ T5703] loop3: detected capacity change from 0 to 1024 [ 49.168231][ T5700] RSP: 0018:ffffc90011edf618 EFLAGS: 00010283 [ 49.168259][ T5700] RAX: ffffffff83454fb0 RBX: 0000000000000001 RCX: 0000000000080000 [ 49.168276][ T5700] RDX: ffffc900036be000 RSI: 0000000000001e12 RDI: 0000000000001e13 [ 49.168291][ T5700] RBP: 0000000000000001 R08: 0001c90011edf733 R09: 0000000000000000 [ 49.168306][ T5700] R10: ffff88811de54e20 R11: 0000000000000002 R12: ffffc90011edf718 [ 49.213107][ T5700] R13: ffff8881054b3800 R14: ffffc90011edf730 R15: 0000000000000002 [ 49.221167][ T5700] FS: 00007f69e4ee76c0(0000) GS:ffff8882aef40000(0000) knlGS:0000000000000000 [ 49.230350][ T5700] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.237026][ T5700] CR2: 0000200000002000 CR3: 000000012205e000 CR4: 00000000003506f0 [ 49.245034][ T5700] Call Trace: [ 49.248538][ T5700] [ 49.251588][ T5700] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 49.257143][ T5700] atomic_notifier_call_chain+0x73/0x1c0 [ 49.262821][ T5700] call_fib_notifiers+0x65/0xa0 [ 49.267829][ T5700] call_fib6_notifiers+0x30/0x40 [ 49.272803][ T5700] call_fib6_multipath_entry_notifiers+0x94/0xc0 [ 49.279194][ T5700] inet6_rtm_newroute+0xaf1/0x1020 [ 49.284608][ T5700] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 49.290234][ T5700] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 49.295487][ T5700] netlink_rcv_skb+0x123/0x220 [ 49.300537][ T5700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 49.306124][ T5700] rtnetlink_rcv+0x1c/0x30 [ 49.308779][ T5703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.310622][ T5700] netlink_unicast+0x5bd/0x690 [ 49.327585][ T5700] netlink_sendmsg+0x58b/0x6b0 [ 49.332393][ T5700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.337821][ T5700] __sock_sendmsg+0x142/0x180 [ 49.338987][ T5703] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.611: Allocating blocks 385-513 which overlap fs metadata [ 49.342627][ T5700] ____sys_sendmsg+0x31e/0x4e0 [ 49.358392][ T5703] EXT4-fs (loop3): pa ffff8881048380e0: logic 16, phys. 129, len 24 [ 49.361425][ T5700] ___sys_sendmsg+0x17b/0x1d0 [ 49.369489][ T5703] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 49.374158][ T5700] __x64_sys_sendmsg+0xd4/0x160 [ 49.388989][ T5700] x64_sys_call+0x191e/0x2ff0 [ 49.393710][ T5700] do_syscall_64+0xd2/0x200 [ 49.398280][ T5700] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 49.404423][ T5700] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.410412][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.416398][ T5700] RIP: 0033:0x7f69e647eba9 [ 49.420911][ T5700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.440700][ T5700] RSP: 002b:00007f69e4ee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.449417][ T5700] RAX: ffffffffffffffda RBX: 00007f69e66c5fa0 RCX: 00007f69e647eba9 [ 49.457504][ T5700] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 49.465504][ T5700] RBP: 00007f69e6501e19 R08: 0000000000000000 R09: 0000000000000000 [ 49.473663][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.481836][ T5700] R13: 00007f69e66c6038 R14: 00007f69e66c5fa0 R15: 00007fffe5b37118 [ 49.489865][ T5700] [ 49.493073][ T5700] ---[ end trace 0000000000000000 ]--- [ 49.499742][ T5692] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.511350][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.559363][ T5692] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.638788][ T5692] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.693430][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.704542][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.716673][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.728712][ T124] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.777114][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 50.652892][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 50.652919][ T29] audit: type=1326 audit(1757606977.798:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.1.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 50.682702][ T29] audit: type=1326 audit(1757606977.798:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.1.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 50.707008][ T29] audit: type=1326 audit(1757606977.798:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.1.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 50.782242][ T29] audit: type=1326 audit(1757606977.798:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.1.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 50.805771][ T29] audit: type=1326 audit(1757606977.798:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.1.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 50.829559][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 50.836471][ T29] audit: type=1326 audit(1757606977.798:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5799 comm="syz.1.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26761beba9 code=0x7ffc0000 [ 50.902914][ T29] audit: type=1400 audit(1757606978.038:937): avc: denied { override_creds } for pid=5813 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 51.292185][ T5868] vlan2: entered allmulticast mode [ 51.326826][ T5878] ip6tnl1: entered promiscuous mode [ 51.415476][ T5887] loop4: detected capacity change from 0 to 1024 [ 51.433821][ T29] audit: type=1326 audit(1757606978.578:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54610aeba9 code=0x7ffc0000 [ 51.457187][ T29] audit: type=1326 audit(1757606978.578:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54610ad80a code=0x7ffc0000 [ 51.498214][ T29] audit: type=1326 audit(1757606978.638:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz.0.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b02deba9 code=0x7ffc0000 [ 51.530534][ T5887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.553683][ T5887] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.649: Allocating blocks 497-513 which overlap fs metadata [ 51.569095][ T5887] EXT4-fs (loop4): pa ffff88810986f540: logic 256, phys. 369, len 9 [ 51.577193][ T5887] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 51.587371][ T5887] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 51.627075][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.685507][ T5912] SELinux: failed to load policy [ 51.857037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 51.893253][ T5967] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 51.985419][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 52.004119][ T378] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.013663][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 52.023455][ T378] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.034588][ T378] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.043816][ T378] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.192661][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 52.221883][ T6048] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.278900][ T6048] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.382491][ T6048] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.479613][ T6048] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.545081][ T6096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.552338][ T6096] IPv6: NLM_F_CREATE should be set when creating new route [ 52.559585][ T6096] IPv6: NLM_F_CREATE should be set when creating new route [ 52.605090][ T378] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.628521][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 52.643423][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.659969][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.668427][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.715599][ T6130] batman_adv: batadv0: Adding interface: dummy0 [ 52.722016][ T6130] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.748486][ T6130] batman_adv: batadv0: Interface activated: dummy0 [ 52.759213][ T6130] batadv0: mtu less than device minimum [ 52.765271][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.776167][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.787097][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.797842][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.808870][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.819741][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.830571][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.841407][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 52.852236][ T6130] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.368192][ T6204] netlink: 76 bytes leftover after parsing attributes in process `syz.1.740'. [ 53.416501][ T6206] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 53.565590][ T6219] netlink: 96 bytes leftover after parsing attributes in process `syz.4.746'. [ 53.918800][ T6249] rdma_op ffff8881032e9980 conn xmit_rdma 0000000000000000 [ 54.058167][ T6259] atomic_op ffff8881032e9928 conn xmit_atomic 0000000000000000 [ 54.377794][ T6303] Falling back ldisc for ttyS3. [ 54.463652][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 54.541119][ T6339] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 54.631272][ T6359] ALSA: seq fatal error: cannot create timer (-22) [ 54.926711][ T6389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.805'. [ 55.002834][ T6390] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 55.046624][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 55.075372][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 55.098265][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 55.135645][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 55.387307][ T6425] Falling back ldisc for ttyS3. [ 55.680747][ T6444] ================================================================== [ 55.688874][ T6444] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 55.697556][ T6444] [ 55.699905][ T6444] write to 0xffff88811f1385e8 of 8 bytes by task 6450 on cpu 0: [ 55.707555][ T6444] shmem_file_splice_read+0x470/0x600 [ 55.712970][ T6444] splice_direct_to_actor+0x26f/0x680 [ 55.718379][ T6444] do_splice_direct+0xda/0x150 [ 55.723184][ T6444] do_sendfile+0x380/0x650 [ 55.727632][ T6444] __x64_sys_sendfile64+0x105/0x150 [ 55.732861][ T6444] x64_sys_call+0x2bb0/0x2ff0 [ 55.737567][ T6444] do_syscall_64+0xd2/0x200 [ 55.742195][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.748132][ T6444] [ 55.750565][ T6444] write to 0xffff88811f1385e8 of 8 bytes by task 6444 on cpu 1: [ 55.758217][ T6444] shmem_file_splice_read+0x470/0x600 [ 55.763807][ T6444] splice_direct_to_actor+0x26f/0x680 [ 55.769207][ T6444] do_splice_direct+0xda/0x150 [ 55.774429][ T6444] do_sendfile+0x380/0x650 [ 55.778888][ T6444] __x64_sys_sendfile64+0x105/0x150 [ 55.784235][ T6444] x64_sys_call+0x2bb0/0x2ff0 [ 55.788945][ T6444] do_syscall_64+0xd2/0x200 [ 55.793584][ T6444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.799564][ T6444] [ 55.801901][ T6444] value changed: 0x0000000000001393 -> 0x0000000000001395 [ 55.809034][ T6444] [ 55.811902][ T6444] Reported by Kernel Concurrency Sanitizer on: [ 55.818072][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz.2.823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.829827][ T6444] Tainted: [W]=WARN [ 55.833650][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 55.843735][ T6444] ================================================================== [ 58.107052][ C1] net_ratelimit: 15 callbacks suppressed [ 58.107072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 59.137072][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 60.177069][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 61.217068][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 62.257081][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 63.297096][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 64.337127][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 65.377037][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available