last executing test programs: 2.357080493s ago: executing program 0 (id=671): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7fff}) 1.458226217s ago: executing program 0 (id=708): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='id\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 1.430831537s ago: executing program 0 (id=710): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.228270861s ago: executing program 0 (id=716): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 708.015689ms ago: executing program 3 (id=756): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 619.51356ms ago: executing program 3 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) 592.352691ms ago: executing program 3 (id=766): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x17}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=%']) 481.439723ms ago: executing program 3 (id=773): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x880) 428.037904ms ago: executing program 3 (id=776): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getrlimit(0x4, &(0x7f0000000240)) 391.154934ms ago: executing program 3 (id=778): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x2100, 0x0) 391.018664ms ago: executing program 2 (id=779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 355.886315ms ago: executing program 0 (id=781): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'veth1_to_team\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 312.353036ms ago: executing program 2 (id=783): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0xdae}, 0x7, 0x7ff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)=ANY=[]) 268.827906ms ago: executing program 0 (id=786): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) 265.741717ms ago: executing program 1 (id=787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) 236.833037ms ago: executing program 1 (id=788): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) set_robust_list(&(0x7f0000000200)={0x0, 0x7}, 0x18) 181.983328ms ago: executing program 4 (id=789): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000b40)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffc, 0x0, 0x0, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x3, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 181.718658ms ago: executing program 1 (id=790): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x51d2, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x1, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}], 0x0}, 0x20) 179.455107ms ago: executing program 2 (id=792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 162.517578ms ago: executing program 4 (id=793): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x1aa, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 161.781788ms ago: executing program 1 (id=803): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @local, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002700)="89", 0x1}], 0x1}}, {{&(0x7f00000084c0)={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x2, 0x24040040) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}}, 0x6, 0x7, 0x0, 0xc7b, 0x0, 0x9, 0xc}, &(0x7f0000000100)=0x9c) 121.237518ms ago: executing program 4 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 116.070679ms ago: executing program 1 (id=795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 66.755939ms ago: executing program 2 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x28}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 66.644009ms ago: executing program 1 (id=797): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 42.585669ms ago: executing program 4 (id=807): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) rt_sigqueueinfo(0x0, 0x21, 0x0) 42.08266ms ago: executing program 2 (id=798): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) syz_io_uring_setup(0x6c0c, &(0x7f0000000540)={0x0, 0xb125, 0x1, 0x1, 0x187}, 0x0, 0x0) 39.42477ms ago: executing program 4 (id=799): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 11.19309ms ago: executing program 2 (id=800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000000400)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 0s ago: executing program 4 (id=801): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000440)="f6c2ff7f0000000000004938863559f0", 0x0, 0x1000605, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.779187][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.779204][ T29] audit: type=1400 audit(1744714656.876:76): avc: denied { transition } for pid=3183 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.783437][ T29] audit: type=1400 audit(1744714656.876:77): avc: denied { noatsecure } for pid=3183 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.786226][ T29] audit: type=1400 audit(1744714656.876:78): avc: denied { write } for pid=3183 comm="sh" path="pipe:[1531]" dev="pipefs" ino=1531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.789430][ T29] audit: type=1400 audit(1744714656.876:79): avc: denied { rlimitinh } for pid=3183 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.792077][ T29] audit: type=1400 audit(1744714656.876:80): avc: denied { siginh } for pid=3183 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.340444][ T29] audit: type=1400 audit(1744714659.436:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.42' (ED25519) to the list of known hosts. [ 28.108167][ T29] audit: type=1400 audit(1744714665.206:82): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.109212][ T3293] cgroup: Unknown subsys name 'net' [ 28.130922][ T29] audit: type=1400 audit(1744714665.206:83): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.158587][ T29] audit: type=1400 audit(1744714665.236:84): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.296756][ T3293] cgroup: Unknown subsys name 'cpuset' [ 28.303002][ T3293] cgroup: Unknown subsys name 'rlimit' [ 28.414791][ T29] audit: type=1400 audit(1744714665.506:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.438116][ T29] audit: type=1400 audit(1744714665.516:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.458636][ T29] audit: type=1400 audit(1744714665.516:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.479023][ T29] audit: type=1400 audit(1744714665.516:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.486194][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.499365][ T29] audit: type=1400 audit(1744714665.516:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.532778][ T29] audit: type=1400 audit(1744714665.516:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.556198][ T29] audit: type=1400 audit(1744714665.606:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.608462][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.686252][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.734797][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.778747][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.841593][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.848953][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.856214][ T3306] bridge_slave_0: entered allmulticast mode [ 29.862714][ T3306] bridge_slave_0: entered promiscuous mode [ 29.871681][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.879020][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.886237][ T3306] bridge_slave_1: entered allmulticast mode [ 29.892669][ T3306] bridge_slave_1: entered promiscuous mode [ 29.917365][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.935668][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.963785][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.970954][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.978216][ T3303] bridge_slave_0: entered allmulticast mode [ 29.984540][ T3303] bridge_slave_0: entered promiscuous mode [ 29.992230][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.007387][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.014563][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.021970][ T3304] bridge_slave_0: entered allmulticast mode [ 30.028497][ T3304] bridge_slave_0: entered promiscuous mode [ 30.047520][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.054629][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.061870][ T3303] bridge_slave_1: entered allmulticast mode [ 30.068343][ T3303] bridge_slave_1: entered promiscuous mode [ 30.075553][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.093664][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.101335][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.108668][ T3304] bridge_slave_1: entered allmulticast mode [ 30.115760][ T3304] bridge_slave_1: entered promiscuous mode [ 30.139139][ T3306] team0: Port device team_slave_0 added [ 30.164737][ T3306] team0: Port device team_slave_1 added [ 30.174188][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.189820][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.206982][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.221034][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.228228][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.235462][ T3312] bridge_slave_0: entered allmulticast mode [ 30.242013][ T3312] bridge_slave_0: entered promiscuous mode [ 30.249295][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.268840][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.275901][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.301992][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.322986][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.330221][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.338469][ T3312] bridge_slave_1: entered allmulticast mode [ 30.344730][ T3312] bridge_slave_1: entered promiscuous mode [ 30.356670][ T3303] team0: Port device team_slave_0 added [ 30.362670][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.370267][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.396382][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.414704][ T3304] team0: Port device team_slave_0 added [ 30.426257][ T3303] team0: Port device team_slave_1 added [ 30.433019][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.440185][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.447332][ T3305] bridge_slave_0: entered allmulticast mode [ 30.453781][ T3305] bridge_slave_0: entered promiscuous mode [ 30.460799][ T3304] team0: Port device team_slave_1 added [ 30.477616][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.497462][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.504616][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.511823][ T3305] bridge_slave_1: entered allmulticast mode [ 30.518518][ T3305] bridge_slave_1: entered promiscuous mode [ 30.531483][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.551848][ T3306] hsr_slave_0: entered promiscuous mode [ 30.558534][ T3306] hsr_slave_1: entered promiscuous mode [ 30.573940][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.580926][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.606930][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.617884][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.625010][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.651117][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.662811][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.669849][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.695800][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.722092][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.737375][ T3312] team0: Port device team_slave_0 added [ 30.743246][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.750382][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.776839][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.799783][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.809806][ T3312] team0: Port device team_slave_1 added [ 30.844902][ T3305] team0: Port device team_slave_0 added [ 30.852664][ T3303] hsr_slave_0: entered promiscuous mode [ 30.858734][ T3303] hsr_slave_1: entered promiscuous mode [ 30.864647][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.872285][ T3303] Cannot create hsr debugfs directory [ 30.891080][ T3305] team0: Port device team_slave_1 added [ 30.904148][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.911183][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.937139][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.955280][ T3304] hsr_slave_0: entered promiscuous mode [ 30.961457][ T3304] hsr_slave_1: entered promiscuous mode [ 30.967467][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.975037][ T3304] Cannot create hsr debugfs directory [ 30.987524][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.994495][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.020604][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.036928][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.043900][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.070006][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.094286][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.101349][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.128167][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.174851][ T3312] hsr_slave_0: entered promiscuous mode [ 31.181042][ T3312] hsr_slave_1: entered promiscuous mode [ 31.187311][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.195028][ T3312] Cannot create hsr debugfs directory [ 31.243329][ T3305] hsr_slave_0: entered promiscuous mode [ 31.249437][ T3305] hsr_slave_1: entered promiscuous mode [ 31.255292][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.263049][ T3305] Cannot create hsr debugfs directory [ 31.360999][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.372041][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.381183][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.399235][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.439021][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.448546][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.457821][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.470632][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.506728][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.524731][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.533791][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.545352][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.565353][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.584025][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.595529][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.615516][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.640495][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.657147][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.668035][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.679776][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.693816][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.703525][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.728170][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.742589][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.754949][ T2423] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.762241][ T2423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.771354][ T2423] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.778437][ T2423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.800911][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.808093][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.828995][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.836156][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.863797][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.881942][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.892880][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.912476][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.931770][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.938882][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.958138][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.965754][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.991686][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.005548][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.028745][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.035854][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.051754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.059006][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.069055][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.082075][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.119375][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.133202][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.146313][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.153420][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.162752][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.169953][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.251420][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.270525][ T3304] veth0_vlan: entered promiscuous mode [ 32.295079][ T3304] veth1_vlan: entered promiscuous mode [ 32.321064][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.338456][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.352923][ T3304] veth0_macvtap: entered promiscuous mode [ 32.373077][ T3304] veth1_macvtap: entered promiscuous mode [ 32.405471][ T3306] veth0_vlan: entered promiscuous mode [ 32.418985][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.431519][ T3303] veth0_vlan: entered promiscuous mode [ 32.440711][ T3306] veth1_vlan: entered promiscuous mode [ 32.449044][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.472092][ T3306] veth0_macvtap: entered promiscuous mode [ 32.480223][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.489058][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.497828][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.506635][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528145][ T3303] veth1_vlan: entered promiscuous mode [ 32.541536][ T3306] veth1_macvtap: entered promiscuous mode [ 32.564061][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.574670][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.588620][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.606186][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.617410][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.630774][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.640845][ T3305] veth0_vlan: entered promiscuous mode [ 32.640971][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.652340][ T3305] veth1_vlan: entered promiscuous mode [ 32.672141][ T3303] veth0_macvtap: entered promiscuous mode [ 32.690463][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.699627][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.708385][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.717239][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.732213][ T3303] veth1_macvtap: entered promiscuous mode [ 32.764721][ T3305] veth0_macvtap: entered promiscuous mode [ 32.778641][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.790706][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.800655][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.811233][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.825365][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.841250][ T3312] veth0_vlan: entered promiscuous mode [ 32.848303][ T3305] veth1_macvtap: entered promiscuous mode [ 32.849888][ T3448] xt_bpf: check failed: parse error [ 32.864913][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.876338][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.886364][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.896892][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.909478][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.914872][ T3450] program syz.2.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.919449][ T3312] veth1_vlan: entered promiscuous mode [ 32.939798][ T3303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.948665][ T3303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.957571][ T3303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.966372][ T3303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.982041][ T3454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 32.991315][ T3452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.012975][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.025192][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.035357][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.046046][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.056094][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.066616][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.079568][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.089564][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.100413][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.110978][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.122332][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.132430][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.143096][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.154885][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.175347][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.184469][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.193311][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.202121][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.222587][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 33.222662][ T29] audit: type=1400 audit(1744714670.316:136): avc: denied { lock } for pid=3462 comm="syz.0.14" path="socket:[3672]" dev="sockfs" ino=3672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 33.272230][ T3312] veth0_macvtap: entered promiscuous mode [ 33.281484][ T3312] veth1_macvtap: entered promiscuous mode [ 33.285739][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.285756][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.285766][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.285779][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.285787][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.285801][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.285815][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.285833][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.288216][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.289157][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.289175][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.289185][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.289197][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.289206][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.289218][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.289230][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.289330][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.289963][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.290849][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290964][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290996][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.291041][ T3312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.369495][ T29] audit: type=1400 audit(1744714670.456:137): avc: denied { create } for pid=3470 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.420586][ T3472] infiniband syz!: set active [ 33.426520][ T29] audit: type=1400 audit(1744714670.456:138): avc: denied { write } for pid=3470 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.436967][ T3472] infiniband syz!: added team_slave_0 [ 33.448864][ T3472] RDS/IB: syz!: added [ 33.610229][ T3472] smc: adding ib device syz! with port count 1 [ 33.610247][ T3472] smc: ib device syz! port 1 has pnetid [ 33.685964][ T29] audit: type=1400 audit(1744714670.766:139): avc: denied { compute_member } for pid=3477 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.744358][ T29] audit: type=1400 audit(1744714670.836:140): avc: denied { open } for pid=3480 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.763438][ T29] audit: type=1400 audit(1744714670.836:141): avc: denied { kernel } for pid=3480 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.807401][ T3484] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 33.833476][ T29] audit: type=1400 audit(1744714670.926:142): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.929326][ T29] audit: type=1400 audit(1744714670.926:143): avc: denied { map_create } for pid=3485 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.948445][ T29] audit: type=1400 audit(1744714670.926:144): avc: denied { map_read map_write } for pid=3485 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.968095][ T29] audit: type=1400 audit(1744714670.986:145): avc: denied { create } for pid=3488 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.997474][ T3472] syz.2.17 (3472) used greatest stack depth: 10624 bytes left [ 34.061696][ T3507] program syz.3.31 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.153247][ T3518] SELinux: failed to load policy [ 34.218076][ T3527] loop4: detected capacity change from 0 to 256 [ 34.342929][ T3540] loop3: detected capacity change from 0 to 1024 [ 34.364265][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.373231][ T3540] ======================================================= [ 34.373231][ T3540] WARNING: The mand mount option has been deprecated and [ 34.373231][ T3540] and is ignored by this kernel. Remove the mand [ 34.373231][ T3540] option from the mount to silence this warning. [ 34.373231][ T3540] ======================================================= [ 34.488798][ T3540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.519737][ T3540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.46: inode #13617: comm syz.3.46: iget: illegal inode # [ 34.542788][ T3540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.46: error while reading EA inode 13617 err=-117 [ 34.595146][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.729885][ T3589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.868322][ T3609] Driver unsupported XDP return value 0 on prog (id 38) dev N/A, expect packet loss! [ 35.082702][ T3626] netlink: 68 bytes leftover after parsing attributes in process `syz.1.81'. [ 35.105356][ T3628] loop0: detected capacity change from 0 to 512 [ 35.115421][ T3626] netlink: 68 bytes leftover after parsing attributes in process `syz.1.81'. [ 35.131615][ T3631] 9p: Unknown access argument +: -22 [ 35.153321][ T3628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.179420][ T3628] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.207151][ T3628] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.83: corrupted inode contents [ 35.237785][ T3628] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.83: mark_inode_dirty error [ 35.250636][ T3628] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.83: corrupted inode contents [ 35.284640][ T3628] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.83: corrupted inode contents [ 35.302508][ T3628] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.83: mark_inode_dirty error [ 35.320196][ T3652] loop2: detected capacity change from 0 to 1024 [ 35.327152][ T3628] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.83: corrupted inode contents [ 35.333452][ T3652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.344810][ T3628] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.83: mark_inode_dirty error [ 35.365305][ T3628] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #2: comm syz.0.83: corrupted inode contents [ 35.378813][ T3628] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #2: comm syz.0.83: mark_inode_dirty error [ 35.412878][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.437962][ T3652] EXT4-fs: Ignoring sb option on remount [ 35.443662][ T3652] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 35.456158][ T3652] EXT4-fs (loop2): re-mounted 00000000-0500-0000-0000-000000000000. [ 35.464623][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.479031][ T3304] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /27/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 35.502965][ T3304] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 35.535380][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 35.639642][ T3677] loop1: detected capacity change from 0 to 128 [ 35.681577][ T3677] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.721873][ T3677] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.830487][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.922860][ T3710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.943711][ T3713] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.119'. [ 36.087021][ T3728] loop3: detected capacity change from 0 to 512 [ 36.107881][ T3728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.158204][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.196148][ T3728] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.227259][ T3747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.235926][ T3747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.246808][ T3747] netlink: 277 bytes leftover after parsing attributes in process `syz.2.134'. [ 36.286031][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.506469][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 36.515360][ T3782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 36.519673][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 36.671382][ T3804] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 36.792996][ T3808] syz.2.162 (3808) used greatest stack depth: 9536 bytes left [ 36.896160][ T3806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.904664][ T3806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.305265][ T3817] can0: slcan on ttyS3. [ 37.376221][ T3817] can0 (unregistered): slcan off ttyS3. [ 37.618489][ T3849] loop3: detected capacity change from 0 to 1024 [ 37.632926][ T3849] EXT4-fs: Ignoring removed nobh option [ 37.638721][ T3849] EXT4-fs: Ignoring removed bh option [ 37.668714][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.682129][ T3853] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073680027637) [ 37.692850][ T3853] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 37.785333][ T3865] wireguard0: entered promiscuous mode [ 37.791713][ T3865] wireguard0: entered allmulticast mode [ 37.841504][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.874142][ T3877] hugetlbfs: syz.2.192 (3877): Using mlock ulimits for SHM_HUGETLB is obsolete [ 37.990713][ T3886] loop0: detected capacity change from 0 to 512 [ 38.011188][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.024321][ T3886] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.043287][ T3886] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.195: Failed to acquire dquot type 0 [ 38.077584][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.152820][ T3907] usb usb1: usbfs: process 3907 (syz.3.204) did not claim interface 0 before use [ 38.183848][ T3911] loop3: detected capacity change from 0 to 512 [ 38.192160][ T3911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.205498][ T3911] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.218777][ T3911] EXT4-fs (loop3): 1 truncate cleaned up [ 38.225245][ T3911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.243241][ T3911] EXT4-fs error (device loop3): __ext4_iget:5025: inode #12: block 2: comm syz.3.206: invalid block [ 38.255455][ T3920] loop1: detected capacity change from 0 to 1024 [ 38.255557][ T3911] EXT4-fs (loop3): Remounting filesystem read-only [ 38.262584][ T3920] EXT4-fs: Ignoring removed bh option [ 38.284701][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.295820][ T3920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 38.334562][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 38.334581][ T29] audit: type=1400 audit(1744714675.426:340): avc: denied { map } for pid=3926 comm="syz.4.213" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.366824][ T29] audit: type=1400 audit(1744714675.426:341): avc: denied { read write } for pid=3926 comm="syz.4.213" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.396895][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 38.425684][ T3932] loop1: detected capacity change from 0 to 512 [ 38.447144][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.468278][ T3932] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.486627][ T29] audit: type=1400 audit(1744714675.576:342): avc: denied { create } for pid=3931 comm="syz.1.215" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 38.516964][ T29] audit: type=1400 audit(1744714675.616:343): avc: denied { read } for pid=3931 comm="syz.1.215" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 38.548535][ T29] audit: type=1326 audit(1744714675.616:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d504e169 code=0x7ffc0000 [ 38.571910][ T29] audit: type=1326 audit(1744714675.616:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d504e169 code=0x7ffc0000 [ 38.595649][ T29] audit: type=1326 audit(1744714675.616:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d504cad0 code=0x7ffc0000 [ 38.620326][ T29] audit: type=1326 audit(1744714675.616:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d504cad0 code=0x7ffc0000 [ 38.644302][ T29] audit: type=1326 audit(1744714675.616:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d504e169 code=0x7ffc0000 [ 38.668367][ T29] audit: type=1326 audit(1744714675.616:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3936 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f45d504e169 code=0x7ffc0000 [ 38.675392][ T3941] loop3: detected capacity change from 0 to 1024 [ 38.699292][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.750774][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.763860][ T3948] wireguard0: entered promiscuous mode [ 38.769455][ T3948] wireguard0: entered allmulticast mode [ 38.795196][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 38.917641][ T3969] netlink: 'syz.2.228': attribute type 11 has an invalid length. [ 38.956406][ T3973] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 39.036692][ T3990] loop1: detected capacity change from 0 to 512 [ 39.044031][ T3990] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.055859][ T3990] EXT4-fs (loop1): 1 truncate cleaned up [ 39.064410][ T3990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.091196][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.241949][ T4015] __nla_validate_parse: 3 callbacks suppressed [ 39.241970][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 39.300028][ T3383] kernel write not supported for file bpf-prog (pid: 3383 comm: kworker/0:5) [ 39.481180][ T4047] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 39.481180][ T4047] The task syz.2.258 (4047) triggered the difference, watch for misbehavior. [ 39.693187][ T4060] loop4: detected capacity change from 0 to 1024 [ 39.703783][ T4062] loop1: detected capacity change from 0 to 512 [ 39.713044][ T4060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.725478][ T4060] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.738542][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.751577][ T4062] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.768892][ T4060] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.774539][ T4062] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.271: invalid size [ 39.805703][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.822633][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.855625][ T4072] netlink: 'syz.1.273': attribute type 21 has an invalid length. [ 39.884953][ T4072] netlink: 156 bytes leftover after parsing attributes in process `syz.1.273'. [ 39.894126][ T4072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 40.257531][ T4115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4115 comm=syz.4.294 [ 40.408341][ T4133] tap0: tun_chr_ioctl cmd 1074025677 [ 40.413898][ T4133] tap0: linktype set to 774 [ 40.703906][ T4171] syz.0.321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.868289][ T4194] 9pnet_fd: Insufficient options for proto=fd [ 40.978817][ T4209] loop3: detected capacity change from 0 to 512 [ 40.994048][ T4211] mmap: syz.1.340 (4211) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.013006][ T4209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.053813][ T4209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.078272][ T4209] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.141694][ T4226] loop1: detected capacity change from 0 to 512 [ 41.150865][ T4224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.162450][ T4226] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.163979][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.184056][ T4226] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 41.195718][ T4226] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 41.211497][ T4226] System zones: 0-2, 18-18, 34-34 [ 41.217885][ T4226] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.240644][ T4224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.266045][ T4226] EXT4-fs (loop1): 1 truncate cleaned up [ 41.274186][ T4226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.274377][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.297383][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.307315][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.317841][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.327927][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.338464][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.348438][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.358988][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.368941][ T4237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.379493][ T4237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.389694][ T4237] batadv_slave_0: entered promiscuous mode [ 41.396887][ T4237] batadv_slave_0: left promiscuous mode [ 41.397860][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.413771][ T4241] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 41.424344][ T4224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.479649][ T4224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.521005][ T4249] loop2: detected capacity change from 0 to 2048 [ 41.538475][ T4249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.580458][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.614450][ T4224] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.632047][ T4265] loop3: detected capacity change from 0 to 128 [ 41.640630][ T4265] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 41.642014][ T4224] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.658304][ T4255] Zero length message leads to an empty skb [ 41.668521][ T4224] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.701868][ T4224] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.926824][ T4310] program syz.3.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.043199][ T4323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.119030][ T4323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.135245][ T4341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.146165][ T4341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.167631][ T4345] program syz.4.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.185786][ T4341] netlink: 277 bytes leftover after parsing attributes in process `syz.3.395'. [ 42.197976][ T4323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.215012][ T4354] capability: warning: `syz.1.400' uses 32-bit capabilities (legacy support in use) [ 42.218871][ T4349] bond1: entered promiscuous mode [ 42.229617][ T4349] bond1: entered allmulticast mode [ 42.236345][ T4349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.247781][ T4349] bond1 (unregistering): Released all slaves [ 42.294490][ T4323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.378197][ T4323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.390092][ T4323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.402626][ T4323] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.414938][ T4323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.520743][ T4365] hub 2-0:1.0: USB hub found [ 42.525695][ T4365] hub 2-0:1.0: 8 ports detected [ 42.556199][ T23] kernel write not supported for file /input/event2 (pid: 23 comm: kworker/1:0) [ 42.620270][ T4386] loop0: detected capacity change from 0 to 512 [ 42.658194][ T4386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.684046][ T4386] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.707081][ T4398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.726701][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.769825][ T4406] loop1: detected capacity change from 0 to 512 [ 42.809652][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.820339][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.830195][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.840735][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.850879][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.860906][ T4406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.861856][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.884218][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.894699][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.894900][ T4406] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.904679][ T4411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.925726][ T4411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.937420][ T4411] batadv_slave_0: entered promiscuous mode [ 42.974523][ T4411] batadv_slave_0: left promiscuous mode [ 42.996451][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.017077][ T4426] sch_fq: defrate 4294967295 ignored. [ 43.136241][ T4442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.439'. [ 43.182828][ T4448] loop2: detected capacity change from 0 to 512 [ 43.190637][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'. [ 43.199607][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'. [ 43.211399][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'. [ 43.225358][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.256195][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'. [ 43.265441][ T4447] netlink: 36 bytes leftover after parsing attributes in process `syz.3.441'. [ 43.283632][ T4448] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.320649][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.416845][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 43.416860][ T29] audit: type=1326 audit(1744718775.517:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c7c7e169 code=0x7ffc0000 [ 43.480684][ T29] audit: type=1326 audit(1744718775.547:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f00c7c7e169 code=0x7ffc0000 [ 43.504105][ T29] audit: type=1326 audit(1744718775.547:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4466 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c7c7e169 code=0x7ffc0000 [ 43.711305][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.721899][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.731803][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.742341][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.752612][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.763246][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.773243][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.783694][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.793528][ T4481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.804056][ T4481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.823613][ T29] audit: type=1400 audit(1744718775.917:447): avc: denied { bind } for pid=4482 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.842938][ T4481] batadv_slave_0: entered promiscuous mode [ 43.877571][ T4481] batadv_slave_0: left promiscuous mode [ 43.904628][ T29] audit: type=1400 audit(1744718775.917:448): avc: denied { listen } for pid=4482 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.923975][ T29] audit: type=1400 audit(1744718775.947:449): avc: denied { create } for pid=4483 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.943552][ T29] audit: type=1400 audit(1744718775.947:450): avc: denied { setopt } for pid=4483 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.070180][ T4493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.178005][ T4510] sch_fq: defrate 4294967295 ignored. [ 44.207018][ T4512] veth1_macvtap: left promiscuous mode [ 44.241290][ T29] audit: type=1400 audit(1744718776.337:451): avc: denied { bind } for pid=4515 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.260637][ T29] audit: type=1400 audit(1744718776.337:452): avc: denied { name_bind } for pid=4515 comm="syz.2.471" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 44.282277][ T29] audit: type=1400 audit(1744718776.337:453): avc: denied { node_bind } for pid=4515 comm="syz.2.471" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 44.287887][ T4518] __nla_validate_parse: 4 callbacks suppressed [ 44.287902][ T4518] netlink: 56 bytes leftover after parsing attributes in process `syz.1.472'. [ 44.329275][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 44.433078][ T4529] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 44.494203][ T4542] loop1: detected capacity change from 0 to 512 [ 44.528468][ T4542] EXT4-fs (loop1): 1 orphan inode deleted [ 44.537891][ T4542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.550594][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 44.550718][ T4542] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.585150][ T4542] EXT4-fs (loop1): shut down requested (1) [ 44.608198][ T4542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.620628][ T4542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.635245][ T4542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.654936][ T4542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.663938][ T4542] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 44.694626][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.759009][ T4565] loop1: detected capacity change from 0 to 2048 [ 44.765808][ T4565] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.794426][ T4565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.827479][ T4565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.491: bg 0: block 234: padding at end of block bitmap is not set [ 44.843998][ T4565] EXT4-fs (loop1): Remounting filesystem read-only [ 44.894182][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.917253][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 45.003491][ T4603] process 'syz.2.510' launched '/dev/fd/3' with NULL argv: empty string added [ 45.065365][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 45.109583][ T4623] loop0: detected capacity change from 0 to 128 [ 45.423606][ T4635] loop0: detected capacity change from 0 to 512 [ 45.438162][ T4635] EXT4-fs (loop0): 1 orphan inode deleted [ 45.445008][ T4635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.457662][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 45.458134][ T4635] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.488337][ T4635] EXT4-fs (loop0): shut down requested (1) [ 45.494664][ T4635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.503624][ T4635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.512458][ T4635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.522607][ T4635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.531479][ T4635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 45.553465][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.574711][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 45.638859][ T4649] loop3: detected capacity change from 0 to 512 [ 45.658204][ T4649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.670878][ T4649] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.682902][ T4649] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.528: Failed to acquire dquot type 0 [ 45.704069][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.800694][ T4665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 45.848470][ T4673] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 45.917107][ T4684] 9pnet: Unknown protocol version 9 [ 45.983916][ T4698] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 46.085025][ T4719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 46.126119][ T4726] 9pnet: Unknown protocol version 9 [ 46.158568][ T4729] loop1: detected capacity change from 0 to 2048 [ 46.198014][ T4729] Alternate GPT is invalid, using primary GPT. [ 46.204347][ T4729] loop1: p1 p2 p3 [ 46.238722][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.279050][ T4750] loop4: detected capacity change from 0 to 2048 [ 46.285783][ T4750] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.309846][ T4750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.327057][ T4750] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.575: bg 0: block 234: padding at end of block bitmap is not set [ 46.342313][ T4750] EXT4-fs (loop4): Remounting filesystem read-only [ 46.359306][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.565489][ T4777] loop4: detected capacity change from 0 to 2048 [ 46.606669][ T4777] Alternate GPT is invalid, using primary GPT. [ 46.613011][ T4777] loop4: p1 p2 p3 [ 46.672348][ T4791] loop0: detected capacity change from 0 to 512 [ 46.680749][ T4791] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 46.691486][ T4791] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 46.708339][ T4791] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.595: corrupted inode contents [ 46.721966][ T4791] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.595: mark_inode_dirty error [ 46.737912][ T4791] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.595: invalid indirect mapped block 1 (level 1) [ 46.752832][ T4791] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.595: corrupted inode contents [ 46.767774][ T4791] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 46.777626][ T4791] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.595: corrupted inode contents [ 46.790726][ T4791] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.595: mark_inode_dirty error [ 46.803053][ T4791] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 46.813317][ T4791] EXT4-fs (loop0): 1 truncate cleaned up [ 46.821283][ T4791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.839765][ T4791] EXT4-fs (loop0): shut down requested (1) [ 46.845989][ T4791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.854883][ T4791] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.923012][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.946798][ T4809] netlink: zone id is out of range [ 46.951982][ T4809] netlink: zone id is out of range [ 46.958551][ T4809] netlink: zone id is out of range [ 46.963685][ T4809] netlink: zone id is out of range [ 46.970229][ T4809] netlink: zone id is out of range [ 46.975392][ T4809] netlink: zone id is out of range [ 46.981548][ T4809] netlink: zone id is out of range [ 46.986723][ T4809] netlink: zone id is out of range [ 46.991935][ T4809] netlink: zone id is out of range [ 46.997081][ T4809] netlink: zone id is out of range [ 47.062197][ T4822] loop3: detected capacity change from 0 to 2048 [ 47.091639][ T4828] loop2: detected capacity change from 0 to 512 [ 47.104549][ T4828] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.129132][ T4828] EXT4-fs (loop2): 1 truncate cleaned up [ 47.135698][ T4828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.173437][ T4838] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 47.187502][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.242253][ T4845] loop3: detected capacity change from 0 to 512 [ 47.250505][ T4845] EXT4-fs: Ignoring removed nobh option [ 47.268859][ T4845] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.620: invalid indirect mapped block 256 (level 2) [ 47.292515][ T4845] EXT4-fs (loop3): 2 truncates cleaned up [ 47.300414][ T4845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.324334][ T4845] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.620: bg 0: block 5: invalid block bitmap [ 47.342949][ T4845] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.356237][ T4845] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.356237][ T4845] [ 47.366012][ T4845] EXT4-fs (loop3): Total free blocks count 0 [ 47.372120][ T4845] EXT4-fs (loop3): Free/Dirty block details [ 47.378123][ T4845] EXT4-fs (loop3): free_blocks=0 [ 47.383086][ T4845] EXT4-fs (loop3): dirty_blocks=66 [ 47.389578][ T4845] EXT4-fs (loop3): Block reservation details [ 47.395637][ T4845] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 47.404496][ T4860] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 47.711975][ T4912] loop3: detected capacity change from 0 to 512 [ 47.748374][ T4912] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.760531][ T4912] EXT4-fs (loop3): mount failed [ 47.768131][ T4921] loop1: detected capacity change from 0 to 512 [ 47.775160][ T4921] EXT4-fs: Ignoring removed nobh option [ 47.800550][ T4921] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.663: invalid indirect mapped block 256 (level 2) [ 47.819707][ T4921] EXT4-fs (loop1): 2 truncates cleaned up [ 47.829439][ T4921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.852285][ T4921] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.663: bg 0: block 5: invalid block bitmap [ 47.866973][ T4921] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.880563][ T4921] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.880563][ T4921] [ 47.890372][ T4921] EXT4-fs (loop1): Total free blocks count 0 [ 47.897819][ T4921] EXT4-fs (loop1): Free/Dirty block details [ 47.903824][ T4921] EXT4-fs (loop1): free_blocks=0 [ 47.910196][ T4921] EXT4-fs (loop1): dirty_blocks=66 [ 47.915333][ T4921] EXT4-fs (loop1): Block reservation details [ 47.922580][ T4921] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 47.935381][ T4936] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 48.009905][ T4944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.662'. [ 48.037653][ T4950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.667'. [ 48.080582][ T4956] loop0: detected capacity change from 0 to 512 [ 48.113869][ T4956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.130331][ T4956] EXT4-fs (loop0): 1 truncate cleaned up [ 48.137990][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.144681][ T4960] loop4: detected capacity change from 0 to 4096 [ 48.179422][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.219649][ T4960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.238873][ T4960] EXT4-fs (loop4): shut down requested (1) [ 48.246153][ T4960] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 48.255040][ T4960] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 48.315641][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.451213][ T4995] loop2: detected capacity change from 0 to 512 [ 48.461029][ T4995] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 48.473389][ T4997] netlink: 'syz.3.687': attribute type 8 has an invalid length. [ 48.488177][ T4995] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 48.504129][ T4995] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.686: corrupted inode contents [ 48.519818][ T4995] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #11: comm syz.2.686: mark_inode_dirty error [ 48.533780][ T4995] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.686: invalid indirect mapped block 1 (level 1) [ 48.553823][ T4995] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.686: corrupted inode contents [ 48.567339][ T4995] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 48.576359][ T4995] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #11: comm syz.2.686: corrupted inode contents [ 48.590390][ T4995] EXT4-fs error (device loop2): ext4_truncate:4255: inode #11: comm syz.2.686: mark_inode_dirty error [ 48.604579][ T4995] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 48.615280][ T4995] EXT4-fs (loop2): 1 truncate cleaned up [ 48.624160][ T4995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.648151][ T4995] EXT4-fs (loop2): shut down requested (1) [ 48.654512][ T4995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 48.667553][ T4995] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 48.691749][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.773456][ T5012] loop2: detected capacity change from 0 to 512 [ 48.781699][ T5012] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.790553][ T5012] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.804547][ T5012] EXT4-fs (loop2): 1 truncate cleaned up [ 48.812324][ T5012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.845873][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.864332][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 48.864346][ T29] audit: type=1400 audit(1744718780.957:511): avc: denied { bind } for pid=5018 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.892568][ T29] audit: type=1400 audit(1744718780.957:512): avc: denied { name_bind } for pid=5018 comm="syz.3.697" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 48.913436][ T29] audit: type=1400 audit(1744718780.957:513): avc: denied { node_bind } for pid=5018 comm="syz.3.697" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 48.941296][ T5025] SELinux: syz.4.699 (5025) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 49.034012][ T29] audit: type=1400 audit(1744718781.097:514): avc: denied { ioctl } for pid=5028 comm="syz.1.701" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.108808][ T29] audit: type=1326 audit(1744718781.197:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e11e169 code=0x7ffc0000 [ 49.135552][ T29] audit: type=1326 audit(1744718781.197:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e11e169 code=0x7ffc0000 [ 49.168872][ T29] audit: type=1326 audit(1744718781.207:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faf2e11e169 code=0x7ffc0000 [ 49.193833][ T29] audit: type=1326 audit(1744718781.207:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e11e169 code=0x7ffc0000 [ 49.218722][ T29] audit: type=1326 audit(1744718781.207:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2e11e169 code=0x7ffc0000 [ 49.246726][ T29] audit: type=1326 audit(1744718781.267:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5045 comm="syz.1.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faf2e11e169 code=0x7ffc0000 [ 49.317553][ T5059] bond0: entered promiscuous mode [ 49.323194][ T5059] bond_slave_0: entered promiscuous mode [ 49.330456][ T5059] bond_slave_1: entered promiscuous mode [ 49.341902][ T5061] @: renamed from vlan0 (while UP) [ 49.399572][ T5073] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 49.430960][ T5075] __nla_validate_parse: 3 callbacks suppressed [ 49.430979][ T5075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.723'. [ 49.600145][ T5101] netlink: 277 bytes leftover after parsing attributes in process `syz.1.736'. [ 49.778107][ T5131] @: renamed from vlan0 (while UP) [ 50.004482][ T5163] syz.4.767 (5163) used greatest stack depth: 9160 bytes left [ 50.021458][ T5169] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.070985][ T5176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.774'. [ 50.089044][ T5177] SELinux: Context Ü is not valid (left unmapped). [ 50.142663][ T5183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.779'. [ 50.193829][ T5192] bond0: entered promiscuous mode [ 50.200474][ T5192] bond_slave_0: entered promiscuous mode [ 50.207794][ T5192] bond_slave_1: entered promiscuous mode [ 50.229412][ T5198] loop2: detected capacity change from 0 to 512 [ 50.247622][ T5198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.272951][ T5198] EXT4-fs (loop2): 1 truncate cleaned up [ 50.289529][ T5198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.315895][ T5198] EXT4-fs error (device loop2): ext4_ext_precache:631: inode #15: comm syz.2.783: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 50.352939][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.428175][ T5224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 50.574437][ T5202] ================================================================== [ 50.582748][ T5202] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 50.589201][ T5202] [ 50.591561][ T5202] write to 0xffffc90001393bd0 of 4 bytes by interrupt on cpu 1: [ 50.599205][ T5202] pollwake+0xc1/0x110 [ 50.603291][ T5202] __wake_up+0x65/0xb0 [ 50.607375][ T5202] bpf_ringbuf_notify+0x22/0x30 [ 50.612250][ T5202] irq_work_run+0xe1/0x2d0 [ 50.616680][ T5202] __sysvec_irq_work+0x23/0x1a0 [ 50.621567][ T5202] sysvec_irq_work+0x66/0x80 [ 50.626172][ T5202] asm_sysvec_irq_work+0x1a/0x20 [ 50.631131][ T5202] default_send_IPI_self+0x38/0x80 [ 50.636277][ T5202] arch_irq_work_raise+0x48/0x50 [ 50.641248][ T5202] __irq_work_queue_local+0x82/0x1d0 [ 50.646545][ T5202] irq_work_queue+0x85/0x120 [ 50.651147][ T5202] bpf_ringbuf_discard+0xcd/0xf0 [ 50.656104][ T5202] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 50.661584][ T5202] bpf_trace_run3+0x10e/0x1d0 [ 50.666283][ T5202] __traceiter_kmem_cache_free+0x33/0x50 [ 50.671935][ T5202] kmem_cache_free+0x243/0x2e0 [ 50.676714][ T5202] skb_release_data+0x554/0x630 [ 50.681591][ T5202] __kfree_skb+0x42/0x150 [ 50.685952][ T5202] sk_skb_reason_drop+0xba/0x290 [ 50.690924][ T5202] br_dev_xmit+0xa5d/0xc20 [ 50.695359][ T5202] dev_hard_start_xmit+0x12e/0x400 [ 50.700489][ T5202] __dev_queue_xmit+0x101a/0x20b0 [ 50.705553][ T5202] __bpf_redirect+0x84e/0x970 [ 50.710256][ T5202] bpf_clone_redirect+0x190/0x200 [ 50.715308][ T5202] bpf_prog_7b3be28ae4e3ccd4+0x5b/0x60 [ 50.720801][ T5202] bpf_test_run+0x1e7/0x4a0 [ 50.725329][ T5202] bpf_prog_test_run_skb+0x857/0xbe0 [ 50.730648][ T5202] bpf_prog_test_run+0x20e/0x3a0 [ 50.735627][ T5202] __sys_bpf+0x440/0x800 [ 50.739884][ T5202] __x64_sys_bpf+0x43/0x50 [ 50.744309][ T5202] x64_sys_call+0x23da/0x2e10 [ 50.749000][ T5202] do_syscall_64+0xc9/0x1c0 [ 50.753612][ T5202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.759537][ T5202] [ 50.761865][ T5202] read to 0xffffc90001393bd0 of 4 bytes by task 5202 on cpu 0: [ 50.769507][ T5202] do_sys_poll+0x9f1/0xc80 [ 50.774306][ T5202] __se_sys_ppoll+0x1b5/0x1f0 [ 50.779006][ T5202] __x64_sys_ppoll+0x67/0x80 [ 50.783623][ T5202] x64_sys_call+0x2c89/0x2e10 [ 50.788315][ T5202] do_syscall_64+0xc9/0x1c0 [ 50.792836][ T5202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.798738][ T5202] [ 50.801061][ T5202] value changed: 0x00000000 -> 0x00000001 [ 50.806790][ T5202] [ 50.809116][ T5202] Reported by Kernel Concurrency Sanitizer on: [ 50.815297][ T5202] CPU: 0 UID: 0 PID: 5202 Comm: syz.0.786 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(voluntary) [ 50.827633][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.837701][ T5202] ==================================================================