last executing test programs: 1.527621365s ago: executing program 3 (id=516): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r1, 0x0, 0x800000000000000}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.440783502s ago: executing program 2 (id=519): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0x8, 0x1, "9e"}, 0x9) 1.407691535s ago: executing program 3 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) 1.373156858s ago: executing program 3 (id=523): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x814) 1.304270433s ago: executing program 3 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8104}, {r1, 0x77}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 799.157715ms ago: executing program 0 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db) writev(r2, 0x0, 0x0) 781.023086ms ago: executing program 0 (id=538): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 761.392498ms ago: executing program 0 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, 0x4, 0xa, 0x8) 738.78558ms ago: executing program 0 (id=542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@block_validity}, {@grpid}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000034000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 655.355236ms ago: executing program 0 (id=544): bpf$PROG_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 602.948841ms ago: executing program 0 (id=547): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)) 569.368373ms ago: executing program 2 (id=550): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x9, r0, 0x3, 0x6) ptrace$cont(0x21, r0, 0x80000001, 0x4) 522.679637ms ago: executing program 2 (id=552): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) brk(0x400000ffc020) 431.777624ms ago: executing program 3 (id=554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2, 0x0, 0x2, 0x2}}, 0x20) 401.727717ms ago: executing program 3 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 397.394947ms ago: executing program 2 (id=557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000180)={[{@grpquota}, {@block_validity}, {@grpid}, {@oldalloc}]}, 0x1, 0x504, &(0x7f0000001000)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000034000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 394.008478ms ago: executing program 4 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 338.873452ms ago: executing program 4 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) 298.014266ms ago: executing program 1 (id=571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 297.546906ms ago: executing program 4 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000500)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 242.78845ms ago: executing program 1 (id=562): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0xc}, {}, {0xa, 0xd}}}, 0x24}}, 0x404c080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 242.31628ms ago: executing program 2 (id=563): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 220.611762ms ago: executing program 1 (id=564): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2310, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x38, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x4, 0x3, 0x7, 0x6, 0x8d, "bca2eab1eaabc68a"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 205.844403ms ago: executing program 4 (id=565): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000340)={[{@debug}, {@discard}, {@quota}, {@nodiscard}, {@data_err_ignore}]}, 0x65, 0x536, &(0x7f0000000f40)="$eJzs3U9vI2cZAPBnHDtNstkmBQ5QiVJoUXYFaycNbSMOpUgITpWAckQqIXGiKE6yip12E1VsVnwAJIQAiRNcuCDxAZBQJS4cEVIlOIMAgRDswoEDdNDY42z+2LG7deI0+f2kybzvzDvzPK93ZzzjGc0EcGU9HREvR8Q7aZrejIipfHohH2K/NWTtHtx/cykbkkjTV/+RRJJPa68rycfX8sXGIuKrX4r4ZnIybn13b32xVqtu5/VKY+N2pb67d2ttY3G1ulrdnJ+fe2HhxYXnF2YH0s/rEfHSF/7y/e/89Isv/fLTb/zxtb/d+FaW1mQ+/3A/3qXiaTNbXS81P4vDC2w/YrCLqNjsYW68U4uRE1PunXFOAAB0lh3jfyAiPhERN2MqRk4/nAUAAADeh9LPTcZ/k4i0s9Eu0wEAAID3kULzHtikUM7vBZiMQqFcbt3D+6GYKNS26o1PrWztbC637pWdjlJhZa1Wnc3vFZ6OUpLV55rlh/XnjtXnI+KJiPje1HizXl7aqi0P+8cPAAAAuCKuHTv///dU6/y/7e4wkwMAAAAGZ3rYCQAAAABnrt/z/4kzzgMAAAA4O67/AwAAwKX25VdeyYa0/f7r5dd3d9a3Xr+1XK2vlzd2lspLX99ptWw+s2+j1/pqW1u3PxObO3cqjWq9UanvjsXG1s5m47W1I6/ABgAAAM7REx976/dJROx/drw5ZEb7W7TPZsBFVTwoJfm4w2b9h8db4z+fU1LAuRgZdgLA0BSHnQAwNKVhJwAMXdJjftebd36Tjz8+2HwAAIDBm/lI9+v/hVOX3D99NnDh2Yjh6nL9H66u5vX/fu/kdbAAl0qp1xHAqdv83QFnAwzDe77+31OavquEAACAgZtsDkmhXGzXC4VyOeJ687UApWRlrVadjYjHI+J3U6XHsvpcs2XS85wBAAAAAAAAAAAAAAAAAAAAAAAAAGhJ0yRSAAAA4FKLKPw1+VXrWf4zU89OHv99YDT5z1Tkrwh940ev/uDOYqOxPZdN/+fB9MYP8+nPDeMXDAAAALgSerzA/6j2eXr7PB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABunB/TeX2sN5xv375yNiulP8Yow1x2NRioiJfyVRPLRcEhEjA4g/nv35cCt+ciR+kqV1ELJT/PEBxN+/9zD+g5PxYz//FDrFvzaA+HCVvZXtf17utP0V4unmuPP2V4w4Un9U3fd/cbD/G+my/V/vM8aTb/+80jX+vYgni0fjP3YsftIl/jN9xv/G1/b2us1Lfxwx0/H7J2k3yfaQUWls3K7Ud/durW0srlZXq5vz83MvLLy48PzCbGVlrVbN/3aM8d2P/uKd0/o/0SX+dI/+P3tibaMdY/zv7Tv3P9gqljrFv/FMh/i//kne4mT8Qv7d98m8nM2faZf3W+XDnvrZb586rf/LXfrf69//RreVHnPzK9/+U59NAYBzUN/dW1+s1arbl7aQnaX32Tg7OrsQOV/0Qvt/z0XJ51ELdwe6wjRN0+xTeQ/rSeIifCzNwlB3SwAAwBl4eNA/7EwAAAAAAAAAAAAAAAAAAADg6jqPx4kdj7l/UEoG8QhtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICB+H8AAAD//2Nm0fI=") 153.833037ms ago: executing program 2 (id=566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 129.502459ms ago: executing program 1 (id=567): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) brk(0x400000ffc020) 78.199104ms ago: executing program 1 (id=568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 4.93303ms ago: executing program 1 (id=569): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4.73723ms ago: executing program 4 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 0s ago: executing program 4 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9140}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 32.993701][ T29] audit: type=1400 audit(1753966763.865:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.994945][ T3291] cgroup: Unknown subsys name 'net' [ 33.016503][ T29] audit: type=1400 audit(1753966763.865:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.043983][ T29] audit: type=1400 audit(1753966763.905:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.217506][ T3291] cgroup: Unknown subsys name 'cpuset' [ 33.223821][ T3291] cgroup: Unknown subsys name 'rlimit' [ 33.356558][ T29] audit: type=1400 audit(1753966764.225:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.384572][ T29] audit: type=1400 audit(1753966764.225:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.405144][ T29] audit: type=1400 audit(1753966764.225:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.425741][ T29] audit: type=1400 audit(1753966764.225:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.435300][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.446102][ T29] audit: type=1400 audit(1753966764.225:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.479480][ T29] audit: type=1400 audit(1753966764.225:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.502820][ T29] audit: type=1400 audit(1753966764.335:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.534779][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.619862][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 34.677353][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.684489][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.691662][ T3302] bridge_slave_0: entered allmulticast mode [ 34.698108][ T3302] bridge_slave_0: entered promiscuous mode [ 34.705252][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.712367][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.719579][ T3302] bridge_slave_1: entered allmulticast mode [ 34.726026][ T3302] bridge_slave_1: entered promiscuous mode [ 34.759211][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.787973][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.852684][ T3302] team0: Port device team_slave_0 added [ 34.868457][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 34.881176][ T3302] team0: Port device team_slave_1 added [ 34.886936][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 34.925160][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.932181][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.958142][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.969099][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 34.984020][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 34.995605][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.002703][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.028661][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.081278][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.088475][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.095719][ T3310] bridge_slave_0: entered allmulticast mode [ 35.102234][ T3310] bridge_slave_0: entered promiscuous mode [ 35.128831][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.135914][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.143258][ T3310] bridge_slave_1: entered allmulticast mode [ 35.149670][ T3310] bridge_slave_1: entered promiscuous mode [ 35.165357][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.172456][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.179697][ T3301] bridge_slave_0: entered allmulticast mode [ 35.186373][ T3301] bridge_slave_0: entered promiscuous mode [ 35.212860][ T3302] hsr_slave_0: entered promiscuous mode [ 35.218969][ T3302] hsr_slave_1: entered promiscuous mode [ 35.225008][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.232114][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.239314][ T3301] bridge_slave_1: entered allmulticast mode [ 35.245940][ T3301] bridge_slave_1: entered promiscuous mode [ 35.258676][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.289132][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.298424][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.305557][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.312796][ T3306] bridge_slave_0: entered allmulticast mode [ 35.319190][ T3306] bridge_slave_0: entered promiscuous mode [ 35.325687][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.332873][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.340094][ T3306] bridge_slave_1: entered allmulticast mode [ 35.346465][ T3306] bridge_slave_1: entered promiscuous mode [ 35.358403][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.366000][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.373206][ T3308] bridge_slave_0: entered allmulticast mode [ 35.379686][ T3308] bridge_slave_0: entered promiscuous mode [ 35.406739][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.415869][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.423081][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.430359][ T3308] bridge_slave_1: entered allmulticast mode [ 35.436902][ T3308] bridge_slave_1: entered promiscuous mode [ 35.444250][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.464056][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.477249][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.492005][ T3310] team0: Port device team_slave_0 added [ 35.526053][ T3310] team0: Port device team_slave_1 added [ 35.539995][ T3306] team0: Port device team_slave_0 added [ 35.549122][ T3301] team0: Port device team_slave_0 added [ 35.556316][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.572139][ T3306] team0: Port device team_slave_1 added [ 35.579001][ T3301] team0: Port device team_slave_1 added [ 35.598291][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.607813][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.614776][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.640732][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.651881][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.658892][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.684870][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.709111][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.716081][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.742071][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.753411][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.760413][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.786499][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.814933][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.821943][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.847915][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.867547][ T3308] team0: Port device team_slave_0 added [ 35.874331][ T3308] team0: Port device team_slave_1 added [ 35.883784][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.890910][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.916966][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.979320][ T3301] hsr_slave_0: entered promiscuous mode [ 35.985477][ T3301] hsr_slave_1: entered promiscuous mode [ 35.991591][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 35.997412][ T3301] Cannot create hsr debugfs directory [ 36.003080][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.010074][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.036231][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.047632][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.054652][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.080598][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.093471][ T3310] hsr_slave_0: entered promiscuous mode [ 36.099469][ T3310] hsr_slave_1: entered promiscuous mode [ 36.105312][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.111144][ T3310] Cannot create hsr debugfs directory [ 36.124167][ T3306] hsr_slave_0: entered promiscuous mode [ 36.130197][ T3306] hsr_slave_1: entered promiscuous mode [ 36.136058][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.141820][ T3306] Cannot create hsr debugfs directory [ 36.196826][ T3308] hsr_slave_0: entered promiscuous mode [ 36.203198][ T3308] hsr_slave_1: entered promiscuous mode [ 36.209076][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 36.214802][ T3308] Cannot create hsr debugfs directory [ 36.241902][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.270917][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.282190][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.295581][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.418079][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.429311][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.442238][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.451618][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.485741][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.495783][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.505436][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.515013][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.553468][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.574437][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.583345][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.592566][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.618336][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.625493][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.639286][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.648491][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.665962][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.678756][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.695315][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.702418][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.711231][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.718365][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.729172][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.744919][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.764447][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.771542][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.791955][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.812601][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.819752][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.841829][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.879628][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.899971][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.910998][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.926052][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.933277][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.944587][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.955417][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.962673][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.978183][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.001376][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.008552][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.030566][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.037708][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.060370][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.073928][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.101161][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.108312][ T1460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.123988][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.135542][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.142730][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.175636][ T3302] veth0_vlan: entered promiscuous mode [ 37.184065][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.194710][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.217223][ T3302] veth1_vlan: entered promiscuous mode [ 37.235717][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.246212][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.300432][ T3302] veth0_macvtap: entered promiscuous mode [ 37.310994][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.320346][ T3302] veth1_macvtap: entered promiscuous mode [ 37.342606][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.358767][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.380008][ T1930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.403167][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.412515][ T1930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.421775][ T1930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.440178][ T1930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.458315][ T3306] veth0_vlan: entered promiscuous mode [ 37.466348][ T3306] veth1_vlan: entered promiscuous mode [ 37.498447][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.528665][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.553795][ T3306] veth0_macvtap: entered promiscuous mode [ 37.573532][ T3306] veth1_macvtap: entered promiscuous mode [ 37.598557][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.623637][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.651456][ T3310] veth0_vlan: entered promiscuous mode [ 37.665812][ T3301] veth0_vlan: entered promiscuous mode [ 37.674336][ T1930] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.688499][ T3310] veth1_vlan: entered promiscuous mode [ 37.703935][ T1930] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.718051][ T3301] veth1_vlan: entered promiscuous mode [ 37.731080][ T1930] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.758987][ T1930] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.770209][ T3310] veth0_macvtap: entered promiscuous mode [ 37.778152][ T3310] veth1_macvtap: entered promiscuous mode [ 37.791222][ T3308] veth0_vlan: entered promiscuous mode [ 37.807143][ T3301] veth0_macvtap: entered promiscuous mode [ 37.815593][ T3308] veth1_vlan: entered promiscuous mode [ 37.825737][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.833900][ T3301] veth1_macvtap: entered promiscuous mode [ 37.854228][ T3308] veth0_macvtap: entered promiscuous mode [ 37.862429][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.881512][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.891818][ T3308] veth1_macvtap: entered promiscuous mode [ 37.907959][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.939294][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.959653][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.976527][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.991903][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.014377][ T3481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 38.023241][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.033343][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.075076][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.107466][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.116347][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.124976][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 38.124996][ T29] audit: type=1400 audit(1753966768.985:100): avc: denied { create } for pid=3484 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.146337][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.169441][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.186324][ T29] audit: type=1400 audit(1753966769.035:101): avc: denied { connect } for pid=3484 comm="syz.1.9" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.206663][ T29] audit: type=1400 audit(1753966769.035:102): avc: denied { prog_load } for pid=3484 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.225555][ T29] audit: type=1400 audit(1753966769.035:103): avc: denied { bpf } for pid=3484 comm="syz.1.9" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.228225][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.246153][ T29] audit: type=1400 audit(1753966769.035:104): avc: denied { prog_run } for pid=3484 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.257098][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.273388][ T29] audit: type=1400 audit(1753966769.035:105): avc: denied { write } for pid=3484 comm="syz.1.9" path="socket:[4817]" dev="sockfs" ino=4817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.305237][ T29] audit: type=1400 audit(1753966769.035:106): avc: denied { map_create } for pid=3487 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.324188][ T29] audit: type=1400 audit(1753966769.035:107): avc: denied { map_read map_write } for pid=3487 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.403064][ T29] audit: type=1400 audit(1753966769.235:108): avc: denied { read } for pid=3499 comm="syz.3.4" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.403097][ T29] audit: type=1400 audit(1753966769.235:109): avc: denied { open } for pid=3499 comm="syz.3.4" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.403198][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.441450][ T3509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 38.528359][ T3509] x_tables: ip_tables: udp match: only valid for protocol 17 [ 38.596881][ T3522] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 38.611401][ T3528] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 38.629986][ T3527] 9pnet: Could not find request transport: r [ 38.706607][ T3536] loop0: detected capacity change from 0 to 1024 [ 38.730989][ T3539] netlink: 300 bytes leftover after parsing attributes in process `syz.4.28'. [ 38.767367][ T3536] EXT4-fs: Ignoring removed orlov option [ 38.831971][ T3541] netlink: 'syz.1.29': attribute type 13 has an invalid length. [ 38.840908][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 38.849760][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 38.864745][ T3541] gretap0: refused to change device tx_queue_len [ 38.872346][ T3541] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.892125][ T3543] Zero length message leads to an empty skb [ 38.919575][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.949333][ T3536] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.007684][ T3555] Invalid ELF header magic: != ELF [ 39.040408][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.266403][ T3576] Invalid ELF header magic: != ELF [ 39.365794][ T3585] loop4: detected capacity change from 0 to 1024 [ 39.403061][ T3588] loop2: detected capacity change from 0 to 256 [ 39.407598][ T3585] EXT4-fs: Ignoring removed bh option [ 39.449368][ T3585] EXT4-fs: inline encryption not supported [ 39.467348][ T3585] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.521270][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 39.528176][ T3585] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.48: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.604581][ T3585] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.48: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.638956][ T3585] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.48: Failed to acquire dquot type 0 [ 39.664388][ T3585] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 39.680129][ T3585] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.48: mark_inode_dirty error [ 39.691888][ T3585] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.702932][ T3585] EXT4-fs (loop4): 1 orphan inode deleted [ 39.709544][ T3585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.722697][ T37] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.757818][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 39.772079][ T3585] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.795562][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.893454][ T3613] syz.2.61 (3613) used greatest stack depth: 10176 bytes left [ 39.995364][ T3638] smc: net device bond0 applied user defined pnetid SYZ0 [ 40.024033][ T3638] smc: net device bond0 erased user defined pnetid SYZ0 [ 40.162714][ T3648] sd 0:0:1:0: device reset [ 40.222206][ T3659] netlink: 348 bytes leftover after parsing attributes in process `syz.1.79'. [ 40.245329][ T3658] random: crng reseeded on system resumption [ 40.334225][ T3678] loop0: detected capacity change from 0 to 512 [ 40.340933][ T3676] loop1: detected capacity change from 0 to 764 [ 40.351703][ T3678] ======================================================= [ 40.351703][ T3678] WARNING: The mand mount option has been deprecated and [ 40.351703][ T3678] and is ignored by this kernel. Remove the mand [ 40.351703][ T3678] option from the mount to silence this warning. [ 40.351703][ T3678] ======================================================= [ 40.392623][ T3678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.403326][ T3676] rock: directory entry would overflow storage [ 40.409618][ T3676] rock: sig=0x4654, size=5, remaining=4 [ 40.423706][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.437343][ T3678] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.441664][ T3682] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 40.498854][ T3678] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 40.542205][ T3690] netlink: 60 bytes leftover after parsing attributes in process `'. [ 40.576618][ T3678] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 28 [ 40.589050][ T3678] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.589050][ T3678] [ 40.598771][ T3678] EXT4-fs (loop0): Total free blocks count 0 [ 40.605161][ T3678] EXT4-fs (loop0): Free/Dirty block details [ 40.611239][ T3678] EXT4-fs (loop0): free_blocks=39626 [ 40.616817][ T3678] EXT4-fs (loop0): dirty_blocks=12 [ 40.621983][ T3678] EXT4-fs (loop0): Block reservation details [ 40.628031][ T3678] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 40.659270][ T3678] syz.0.86 (3678) used greatest stack depth: 9640 bytes left [ 40.676259][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.724144][ T3709] syzkaller1: entered promiscuous mode [ 40.729753][ T3709] syzkaller1: entered allmulticast mode [ 40.816358][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 40.825527][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 40.911221][ T3735] netlink: 'syz.2.110': attribute type 29 has an invalid length. [ 40.921006][ T3735] netlink: 'syz.2.110': attribute type 29 has an invalid length. [ 41.294696][ T3788] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 41.304618][ T3791] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 41.364935][ T3790] loop3: detected capacity change from 0 to 8192 [ 41.459917][ T3409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.467456][ T3409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.478489][ T3808] loop0: detected capacity change from 0 to 1024 [ 41.485166][ T3808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.502310][ T3409] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [] on [ 41.530566][ T3808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.553382][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.605085][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.614453][ T3819] loop1: detected capacity change from 0 to 1024 [ 41.626988][ T3819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.655002][ T3819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.721136][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.784005][ T3838] gretap0: entered promiscuous mode [ 41.839290][ T3840] loop0: detected capacity change from 0 to 512 [ 41.936387][ T3850] process 'syz.0.157' launched '/dev/fd/3' with NULL argv: empty string added [ 42.052797][ T3867] ALSA: seq fatal error: cannot create timer (-22) [ 42.262333][ T3887] loop1: detected capacity change from 0 to 128 [ 42.277944][ T3887] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 42.472332][ T3916] SELinux: failed to load policy [ 42.480760][ T3918] IPv6: Can't replace route, no match found [ 42.657720][ T3943] Invalid ELF header magic: != ELF [ 42.743281][ T3953] loop3: detected capacity change from 0 to 1024 [ 42.786548][ T3953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.825565][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.918035][ T3982] program syz.0.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.954010][ T3984] loop3: detected capacity change from 0 to 2048 [ 42.961642][ T3984] EXT4-fs (loop3): unable to read superblock [ 43.115991][ T4006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.153318][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 43.153337][ T29] audit: type=1400 audit(1753969352.026:407): avc: denied { getopt } for pid=4005 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.189585][ T29] audit: type=1400 audit(1753969352.026:408): avc: denied { create } for pid=4005 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 43.210194][ T29] audit: type=1400 audit(1753969352.026:409): avc: denied { setopt } for pid=4005 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 43.335434][ T29] audit: type=1400 audit(1753969352.206:410): avc: denied { name_connect } for pid=4018 comm="syz.1.236" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.682887][ T29] audit: type=1400 audit(1753969352.556:411): avc: denied { kexec_image_load } for pid=4041 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 43.759448][ T29] audit: type=1400 audit(1753969352.636:412): avc: denied { mount } for pid=4051 comm="syz.4.250" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 43.864495][ T4058] loop4: detected capacity change from 0 to 128 [ 43.877153][ T29] audit: type=1326 audit(1753969352.756:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6535ae9a9 code=0x7ffc0000 [ 43.902222][ T29] audit: type=1326 audit(1753969352.776:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7ff6535ae9a9 code=0x7ffc0000 [ 43.925782][ T29] audit: type=1326 audit(1753969352.776:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6535ae9a9 code=0x7ffc0000 [ 43.949331][ T29] audit: type=1326 audit(1753969352.776:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6535ae9a9 code=0x7ffc0000 [ 43.961456][ T4062] netlink: 'syz.2.254': attribute type 3 has an invalid length. [ 44.023970][ T4064] tipc: Started in network mode [ 44.028965][ T4064] tipc: Node identity 8, cluster identity 4711 [ 44.035133][ T4064] tipc: Node number set to 8 [ 44.064635][ T4064] tipc: Cannot configure node identity twice [ 44.116852][ T4076] __nla_validate_parse: 13 callbacks suppressed [ 44.117010][ T4076] netlink: 404 bytes leftover after parsing attributes in process `syz.4.261'. [ 44.218865][ T4088] syzkaller1: entered promiscuous mode [ 44.224424][ T4088] syzkaller1: entered allmulticast mode [ 44.404441][ T4098] loop0: detected capacity change from 0 to 256 [ 44.427130][ T4098] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.443678][ T4098] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.455123][ T4102] vhci_hcd: invalid port number 0 [ 44.590744][ T9] kernel write not supported for file /141/attr/exec (pid: 9 comm: kworker/0:0) [ 44.636889][ T4129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.286'. [ 44.674923][ T4136] loop1: detected capacity change from 0 to 1024 [ 44.692891][ T4136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.724060][ T4136] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.761394][ T4136] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.783259][ T4136] EXT4-fs (loop1): Remounting filesystem read-only [ 44.790109][ T31] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 4: len 12: ext4_ext_map_blocks returned -30 [ 44.792756][ T4153] loop4: detected capacity change from 0 to 128 [ 44.808771][ T4136] syz.1.289 (4136) used greatest stack depth: 9352 bytes left [ 44.843040][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.855237][ T4157] loop0: detected capacity change from 0 to 256 [ 44.935056][ T4170] netlink: 92 bytes leftover after parsing attributes in process `syz.1.303'. [ 44.951966][ T4171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 45.010372][ T4181] loop0: detected capacity change from 0 to 512 [ 45.039013][ T4181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.052214][ T4181] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.068599][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #2: comm syz.0.308: corrupted inode contents [ 45.080555][ T4181] EXT4-fs error (device loop0): ext4_dirty_inode:6454: inode #2: comm syz.0.308: mark_inode_dirty error [ 45.092319][ T4181] EXT4-fs error (device loop0): ext4_do_update_inode:5563: inode #2: comm syz.0.308: corrupted inode contents [ 45.107431][ T4190] loop2: detected capacity change from 0 to 512 [ 45.114407][ T4190] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.127506][ T4190] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.138622][ T4194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.311'. [ 45.150345][ T4190] EXT4-fs (loop2): 1 truncate cleaned up [ 45.156546][ T4190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.170377][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.197243][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.224762][ T4203] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.315'. [ 45.455103][ T4230] loop1: detected capacity change from 0 to 2048 [ 45.502529][ T4230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.688069][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.699287][ T4239] loop3: detected capacity change from 0 to 128 [ 45.838731][ T4250] loop1: detected capacity change from 0 to 256 [ 45.850027][ T4251] veth1_to_bridge: entered promiscuous mode [ 45.859014][ T4251] veth1_to_bridge: left promiscuous mode [ 46.201570][ T4281] loop9: detected capacity change from 0 to 7 [ 46.223922][ T4281] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.232291][ T4281] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.240270][ T4281] loop9: unable to read partition table [ 46.246601][ T4281] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 46.246601][ T4281] ) failed (rc=-5) [ 46.347834][ T4298] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 46.508283][ T4318] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 46.560767][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'. [ 46.617373][ T4335] random: crng reseeded on system resumption [ 46.625311][ T4341] sctp: [Deprecated]: syz.1.376 (pid 4341) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.625311][ T4341] Use struct sctp_sack_info instead [ 46.770347][ T4358] loop2: detected capacity change from 0 to 512 [ 46.782254][ T4358] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 46.801690][ T4362] loop3: detected capacity change from 0 to 512 [ 46.809141][ T4362] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.834402][ T4362] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 46.846863][ T4367] syzkaller1: entered promiscuous mode [ 46.846892][ T4367] syzkaller1: entered allmulticast mode [ 46.885374][ T4371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.387'. [ 46.913595][ T4375] loop0: detected capacity change from 0 to 128 [ 46.920502][ T4375] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.933031][ T4375] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.958211][ T4375] 9pnet: Could not find request transport: f0xffffffffffffffff [ 47.005674][ T4386] pim6reg1: entered promiscuous mode [ 47.011222][ T4386] pim6reg1: entered allmulticast mode [ 47.110287][ T4399] loop0: detected capacity change from 0 to 512 [ 47.136964][ T4399] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.397: bg 0: block 248: padding at end of block bitmap is not set [ 47.155144][ T4399] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.397: Failed to acquire dquot type 1 [ 47.175643][ T4399] EXT4-fs (loop0): 1 truncate cleaned up [ 47.190080][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.203657][ T4399] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.238224][ T4399] syz.0.397 (4399) used greatest stack depth: 9080 bytes left [ 47.249083][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.270052][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 47.307596][ T4419] netlink: 'syz.2.408': attribute type 178 has an invalid length. [ 47.396662][ T4429] loop2: detected capacity change from 0 to 512 [ 47.420337][ T4431] syzkaller1: entered promiscuous mode [ 47.425976][ T4431] syzkaller1: entered allmulticast mode [ 47.634842][ T4462] loop2: detected capacity change from 0 to 256 [ 47.642410][ T4460] loop4: detected capacity change from 0 to 1024 [ 47.650556][ T4460] EXT4-fs: inline encryption not supported [ 47.656928][ T4460] EXT4-fs: Ignoring removed bh option [ 47.704988][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.755236][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.777987][ T4478] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 47.805427][ T4482] loop0: detected capacity change from 0 to 512 [ 47.812111][ T4482] msdos: Bad value for 'uid' [ 47.816936][ T4482] msdos: Bad value for 'uid' [ 47.843463][ T4484] loop1: detected capacity change from 0 to 1764 [ 47.858836][ T4484] ISOFS: Unable to identify CD-ROM format. [ 47.991200][ T4507] netlink: 288 bytes leftover after parsing attributes in process `syz.1.449'. [ 48.083944][ T4522] pimreg: entered allmulticast mode [ 48.099514][ T4522] pimreg: left allmulticast mode [ 48.140017][ T4529] hub 2-0:1.0: USB hub found [ 48.144820][ T4529] hub 2-0:1.0: 8 ports detected [ 48.173624][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 48.173644][ T29] audit: type=1400 audit(1753969357.047:628): avc: denied { shutdown } for pid=4533 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.199872][ T29] audit: type=1400 audit(1753969357.047:629): avc: denied { read } for pid=4533 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.226868][ T4538] syzkaller0: entered promiscuous mode [ 48.232403][ T4538] syzkaller0: entered allmulticast mode [ 48.273355][ T29] audit: type=1400 audit(1753969357.147:630): avc: denied { append } for pid=4543 comm="syz.1.467" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.296621][ T29] audit: type=1400 audit(1753969357.147:631): avc: denied { mount } for pid=4544 comm="syz.0.466" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.318399][ T29] audit: type=1400 audit(1753969357.147:632): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.338389][ T29] audit: type=1400 audit(1753969357.147:633): avc: denied { read } for pid=4543 comm="syz.1.467" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.361621][ T29] audit: type=1400 audit(1753969357.147:634): avc: denied { open } for pid=4543 comm="syz.1.467" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.427124][ T29] audit: type=1400 audit(1753969357.297:635): avc: denied { write } for pid=4552 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 48.478088][ T29] audit: type=1400 audit(1753969357.347:636): avc: denied { read } for pid=4557 comm="syz.3.474" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.501519][ T29] audit: type=1400 audit(1753969357.357:637): avc: denied { map } for pid=4557 comm="syz.3.474" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.559325][ T4564] loop1: detected capacity change from 0 to 1024 [ 48.569739][ T4567] loop4: detected capacity change from 0 to 512 [ 48.578178][ T4564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.599812][ T4564] EXT4-fs (loop1): shut down requested (0) [ 48.611995][ T4567] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.478: bad orphan inode 15 [ 48.618649][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'. [ 48.625008][ T4567] ext4_test_bit(bit=14, block=18) = 1 [ 48.632599][ T9] Process accounting resumed [ 48.636411][ T4567] is_bad_inode(inode)=0 [ 48.645374][ T4567] NEXT_ORPHAN(inode)=1023 [ 48.649731][ T4567] max_ino=32 [ 48.651707][ T4574] Process accounting resumed [ 48.652928][ T4567] i_nlink=0 [ 48.674521][ T4567] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.478: corrupted xattr block 19: invalid header [ 48.688580][ T4567] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 48.701293][ T4567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 48.702639][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.715258][ T4567] ext4 filesystem being mounted at /78/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 48.756036][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 48.821724][ T4590] loop3: detected capacity change from 0 to 2048 [ 48.838354][ T4590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.871985][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.934957][ T4608] loop4: detected capacity change from 0 to 1024 [ 48.966306][ T4608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.007634][ T4612] loop0: detected capacity change from 0 to 512 [ 49.036566][ T4617] loop3: detected capacity change from 0 to 1024 [ 49.045482][ T4612] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.495: bad orphan inode 15 [ 49.055391][ T4621] loop2: detected capacity change from 0 to 512 [ 49.055826][ T4621] EXT4-fs: Ignoring removed bh option [ 49.063355][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.069147][ T4621] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.077710][ T4612] ext4_test_bit(bit=14, block=18) = 1 [ 49.087909][ T4621] EXT4-fs error (device loop2): __ext4_iget:5374: inode #15: block 1803188595: comm syz.2.499: invalid block [ 49.090012][ T4612] is_bad_inode(inode)=0 [ 49.103088][ T4621] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.499: couldn't read orphan inode 15 (err -117) [ 49.106237][ T4612] NEXT_ORPHAN(inode)=1023 [ 49.120177][ T4621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.122254][ T4612] max_ino=32 [ 49.137164][ T4617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.137684][ T4612] i_nlink=0 [ 49.154705][ T4612] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.495: corrupted xattr block 19: invalid header [ 49.174319][ T4612] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 49.185450][ T4612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 49.186511][ T4617] EXT4-fs (loop3): shut down requested (0) [ 49.199631][ T4612] ext4 filesystem being mounted at /118/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 49.232167][ T4630] program syz.1.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.253731][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 49.278748][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.292557][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.395969][ T4653] netlink: 'syz.4.511': attribute type 8 has an invalid length. [ 49.435153][ T4661] loop4: detected capacity change from 0 to 512 [ 49.442145][ T4661] EXT4-fs: Ignoring removed bh option [ 49.447944][ T4660] loop2: detected capacity change from 0 to 1024 [ 49.448346][ T4661] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 49.464725][ T4661] EXT4-fs error (device loop4): __ext4_iget:5374: inode #15: block 1803188595: comm syz.4.515: invalid block [ 49.467446][ T4660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.491235][ T4661] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.515: couldn't read orphan inode 15 (err -117) [ 49.509038][ T4661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.527817][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.624375][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.686332][ T4684] netlink: 'syz.3.523': attribute type 2 has an invalid length. [ 49.794633][ T4702] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.532'. [ 49.820573][ T4705] netlink: 'syz.0.533': attribute type 8 has an invalid length. [ 49.865206][ T4710] netlink: 'syz.0.535': attribute type 64 has an invalid length. [ 50.302569][ T4726] loop0: detected capacity change from 0 to 512 [ 50.309667][ T4726] EXT4-fs: Ignoring removed oldalloc option [ 50.329848][ T4726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.343750][ T4726] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.368636][ T4728] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 50.377003][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.377244][ T10] IPVS: starting estimator thread 0... [ 50.476046][ T4732] IPVS: using max 2064 ests per chain, 103200 per kthread [ 50.653642][ T4759] loop2: detected capacity change from 0 to 512 [ 50.668210][ T4758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.685068][ T4759] EXT4-fs: Ignoring removed oldalloc option [ 50.719556][ T4759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.735914][ T4759] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.777909][ T4758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.789762][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.839665][ T4781] loop4: detected capacity change from 0 to 512 [ 50.848040][ T4781] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 50.848321][ T4783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.857963][ T4781] System zones: 0-2, 18-18, 34-34 [ 50.866717][ T4783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.870189][ T4781] EXT4-fs (loop4): orphan cleanup on readonly fs [ 50.887364][ T4781] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.565: bg 0: block 248: padding at end of block bitmap is not set [ 50.903472][ T4758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.904609][ T4781] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.565: Failed to acquire dquot type 1 [ 50.927282][ T4781] EXT4-fs (loop4): 1 orphan inode deleted [ 50.941776][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 50.954403][ T4781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.985504][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.007075][ T4758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.040640][ T4794] vlan2: entered promiscuous mode [ 51.045883][ T4794] bond0: entered promiscuous mode [ 51.051122][ T4794] bond_slave_0: entered promiscuous mode [ 51.057184][ T4794] bond_slave_1: entered promiscuous mode [ 51.070544][ T4795] ================================================================== [ 51.078806][ T4795] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 51.087430][ T4795] [ 51.089778][ T4795] write to 0xffff888118a9ba68 of 8 bytes by task 4790 on cpu 1: [ 51.097428][ T4795] shmem_file_splice_read+0x470/0x600 [ 51.102837][ T4795] splice_direct_to_actor+0x26c/0x680 [ 51.108248][ T4795] do_splice_direct+0xda/0x150 [ 51.113054][ T4795] do_sendfile+0x380/0x650 [ 51.117525][ T4795] __x64_sys_sendfile64+0x105/0x150 [ 51.122778][ T4795] x64_sys_call+0x2bb0/0x2ff0 [ 51.127604][ T4795] do_syscall_64+0xd2/0x200 [ 51.132147][ T4795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.138060][ T4795] [ 51.140399][ T4795] write to 0xffff888118a9ba68 of 8 bytes by task 4795 on cpu 0: [ 51.148043][ T4795] shmem_file_splice_read+0x470/0x600 [ 51.153438][ T4795] splice_direct_to_actor+0x26c/0x680 [ 51.158837][ T4795] do_splice_direct+0xda/0x150 [ 51.163630][ T4795] do_sendfile+0x380/0x650 [ 51.168120][ T4795] __x64_sys_sendfile64+0x105/0x150 [ 51.173351][ T4795] x64_sys_call+0x2bb0/0x2ff0 [ 51.178046][ T4795] do_syscall_64+0xd2/0x200 [ 51.182584][ T4795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.188597][ T4795] [ 51.190940][ T4795] value changed: 0x0000000000000d55 -> 0x0000000000000d58 [ 51.198101][ T4795] [ 51.200454][ T4795] Reported by Kernel Concurrency Sanitizer on: [ 51.206637][ T4795] CPU: 0 UID: 0 PID: 4795 Comm: syz.1.569 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 51.218677][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.228764][ T4795] ================================================================== [ 51.246381][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.312744][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.322024][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.330641][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0