last executing test programs: 779.537044ms ago: executing program 1 (id=1186): bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) getdents64(r0, &(0x7f0000000140)=""/90, 0x5a) getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) 737.191007ms ago: executing program 1 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) 603.294431ms ago: executing program 1 (id=1199): r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 583.571873ms ago: executing program 1 (id=1200): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) write(r1, &(0x7f00000001c0)="49bd", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 514.709139ms ago: executing program 4 (id=1206): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) 438.284687ms ago: executing program 4 (id=1207): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 437.833277ms ago: executing program 0 (id=1209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x2201, &(0x7f0000000540)={0x0, 0x1ae0, 0x402, 0x0, 0x390}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 437.638467ms ago: executing program 4 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 433.361548ms ago: executing program 2 (id=1211): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="f0", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r0, 0x0, 0x0) 401.240711ms ago: executing program 3 (id=1212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) r2 = epoll_create(0x5) r3 = io_uring_setup(0x61bb, &(0x7f0000000000)={0x0, 0xe348, 0x10, 0x5, 0x13d}) dup2(r2, r3) read$usbmon(r1, 0x0, 0x0) 366.688134ms ago: executing program 0 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8001}}, 0x20}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 366.334604ms ago: executing program 3 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b55081f0000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 365.950354ms ago: executing program 4 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) clock_settime(0x3, 0x0) 306.38683ms ago: executing program 2 (id=1216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 306.16657ms ago: executing program 0 (id=1217): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 273.508823ms ago: executing program 4 (id=1218): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x80800) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0xbcff, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x3, r1}, 0x14) 265.109964ms ago: executing program 3 (id=1219): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) tkill(r2, 0x7) 255.614665ms ago: executing program 2 (id=1220): syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000004c0)='.\x00', 0x1a8a438, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32], 0xb, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001b) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='.\x00', 0x161000, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r0, r2, 0x0) 201.82791ms ago: executing program 0 (id=1221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) 201.193561ms ago: executing program 4 (id=1222): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x1ffffffffffffebe, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r2) 71.713283ms ago: executing program 2 (id=1223): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 71.452003ms ago: executing program 2 (id=1224): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 71.089643ms ago: executing program 0 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x300000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2.38625ms ago: executing program 0 (id=1226): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) open$dir(&(0x7f00000003c0)='./file0\x00', 0x240, 0x1a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.12048ms ago: executing program 3 (id=1227): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$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") 0s ago: executing program 2 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x7f}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 33.795939][ T29] audit: type=1400 audit(1760719922.872:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.818989][ T29] audit: type=1400 audit(1760719922.892:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.820034][ T3303] cgroup: Unknown subsys name 'net' [ 33.846840][ T29] audit: type=1400 audit(1760719922.922:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.046187][ T3303] cgroup: Unknown subsys name 'cpuset' [ 34.052420][ T3303] cgroup: Unknown subsys name 'rlimit' [ 34.224133][ T29] audit: type=1400 audit(1760719923.292:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.247453][ T29] audit: type=1400 audit(1760719923.302:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.268222][ T29] audit: type=1400 audit(1760719923.302:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.288770][ T29] audit: type=1400 audit(1760719923.302:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.309178][ T29] audit: type=1400 audit(1760719923.322:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.318669][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.334424][ T29] audit: type=1400 audit(1760719923.322:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.366460][ T29] audit: type=1400 audit(1760719923.422:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.394001][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.298209][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.321494][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.413432][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.420708][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.428010][ T3312] bridge_slave_0: entered allmulticast mode [ 36.434675][ T3312] bridge_slave_0: entered promiscuous mode [ 36.455859][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.462939][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.470236][ T3313] bridge_slave_0: entered allmulticast mode [ 36.476768][ T3313] bridge_slave_0: entered promiscuous mode [ 36.486019][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.497140][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.504254][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.511447][ T3312] bridge_slave_1: entered allmulticast mode [ 36.518102][ T3312] bridge_slave_1: entered promiscuous mode [ 36.526657][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.533740][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.541003][ T3313] bridge_slave_1: entered allmulticast mode [ 36.547574][ T3313] bridge_slave_1: entered promiscuous mode [ 36.556889][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.595906][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.618650][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.638402][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.651905][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.695567][ T3312] team0: Port device team_slave_0 added [ 36.708542][ T3313] team0: Port device team_slave_0 added [ 36.719912][ T3312] team0: Port device team_slave_1 added [ 36.725723][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.744411][ T3313] team0: Port device team_slave_1 added [ 36.763353][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770525][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.777821][ T3319] bridge_slave_0: entered allmulticast mode [ 36.784263][ T3319] bridge_slave_0: entered promiscuous mode [ 36.805117][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.812291][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.819693][ T3317] bridge_slave_0: entered allmulticast mode [ 36.826238][ T3317] bridge_slave_0: entered promiscuous mode [ 36.832820][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.839872][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.865886][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.876772][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.883985][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.891338][ T3319] bridge_slave_1: entered allmulticast mode [ 36.897896][ T3319] bridge_slave_1: entered promiscuous mode [ 36.909563][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.916566][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.942517][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.953247][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.960377][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.967631][ T3317] bridge_slave_1: entered allmulticast mode [ 36.974034][ T3317] bridge_slave_1: entered promiscuous mode [ 36.980391][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.987366][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.013345][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.032045][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.039013][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.064972][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.113532][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.124405][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.135305][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.156279][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.163369][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.170532][ T3320] bridge_slave_0: entered allmulticast mode [ 37.177113][ T3320] bridge_slave_0: entered promiscuous mode [ 37.184415][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.193592][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.200686][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.207854][ T3320] bridge_slave_1: entered allmulticast mode [ 37.214346][ T3320] bridge_slave_1: entered promiscuous mode [ 37.230521][ T3319] team0: Port device team_slave_0 added [ 37.261974][ T3319] team0: Port device team_slave_1 added [ 37.273797][ T3317] team0: Port device team_slave_0 added [ 37.281103][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.299411][ T3313] hsr_slave_0: entered promiscuous mode [ 37.305697][ T3313] hsr_slave_1: entered promiscuous mode [ 37.313845][ T3312] hsr_slave_0: entered promiscuous mode [ 37.320328][ T3312] hsr_slave_1: entered promiscuous mode [ 37.326335][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.332055][ T3312] Cannot create hsr debugfs directory [ 37.343144][ T3317] team0: Port device team_slave_1 added [ 37.349926][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.370099][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.377091][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.403040][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.424911][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.431905][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.457865][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.468885][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.475925][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.501891][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.531343][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.538718][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.564740][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.578833][ T3320] team0: Port device team_slave_0 added [ 37.606269][ T3317] hsr_slave_0: entered promiscuous mode [ 37.612311][ T3317] hsr_slave_1: entered promiscuous mode [ 37.618267][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.624023][ T3317] Cannot create hsr debugfs directory [ 37.630969][ T3320] team0: Port device team_slave_1 added [ 37.677728][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.684797][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.710853][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.731229][ T3319] hsr_slave_0: entered promiscuous mode [ 37.737364][ T3319] hsr_slave_1: entered promiscuous mode [ 37.743161][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.748918][ T3319] Cannot create hsr debugfs directory [ 37.759658][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.766690][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.792628][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.874075][ T3320] hsr_slave_0: entered promiscuous mode [ 37.880192][ T3320] hsr_slave_1: entered promiscuous mode [ 37.886121][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.891852][ T3320] Cannot create hsr debugfs directory [ 37.984931][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.996427][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.007759][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.021319][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.068669][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.077671][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.090213][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.099782][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.123110][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.138608][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.150844][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.164080][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.175351][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.195969][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.211798][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.218942][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.232402][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.239640][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.257204][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.266247][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.277521][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.286478][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.319147][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.328964][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.339484][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.368089][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.378839][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.420844][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.435038][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.442219][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.463313][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.470500][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.481294][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.518456][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.534325][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.553427][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.573312][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.590719][ T2256] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.597925][ T2256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.606830][ T2256] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.613927][ T2256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.635567][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.646456][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.655113][ T3313] veth0_vlan: entered promiscuous mode [ 38.663111][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.670355][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.686574][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.693677][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.702993][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.710073][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.724932][ T3313] veth1_vlan: entered promiscuous mode [ 38.733209][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.740313][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.796906][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.804873][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.837449][ T3313] veth0_macvtap: entered promiscuous mode [ 38.845266][ T3313] veth1_macvtap: entered promiscuous mode [ 38.864197][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.883615][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.896701][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.930187][ T1392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.950463][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.971197][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.971278][ T29] audit: type=1400 audit(1760719928.042:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.1SVTtJ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.001860][ T29] audit: type=1400 audit(1760719928.042:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.013887][ T1392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.035987][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.043383][ T29] audit: type=1400 audit(1760719928.042:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.1SVTtJ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.068719][ T29] audit: type=1400 audit(1760719928.042:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.090568][ T29] audit: type=1400 audit(1760719928.042:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.1SVTtJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.092836][ T1392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.117208][ T29] audit: type=1400 audit(1760719928.042:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.1SVTtJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.117249][ T29] audit: type=1400 audit(1760719928.042:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.132614][ T1392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.176224][ T29] audit: type=1400 audit(1760719928.112:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.204891][ T29] audit: type=1400 audit(1760719928.112:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.243196][ T3319] veth0_vlan: entered promiscuous mode [ 39.250690][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.271284][ T3319] veth1_vlan: entered promiscuous mode [ 39.310874][ T29] audit: type=1400 audit(1760719928.382:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.311706][ T3317] veth0_vlan: entered promiscuous mode [ 39.351901][ T3319] veth0_macvtap: entered promiscuous mode [ 39.359427][ T3319] veth1_macvtap: entered promiscuous mode [ 39.376151][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.388202][ T3317] veth1_vlan: entered promiscuous mode [ 39.397010][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.429786][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.455356][ T3320] veth0_vlan: entered promiscuous mode [ 39.469366][ T3320] veth1_vlan: entered promiscuous mode [ 39.475813][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.484568][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.499273][ T3317] veth0_macvtap: entered promiscuous mode [ 39.509974][ T3317] veth1_macvtap: entered promiscuous mode [ 39.517862][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556341][ T3320] veth0_macvtap: entered promiscuous mode [ 39.564090][ T3320] veth1_macvtap: entered promiscuous mode [ 39.577400][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.590908][ T3312] veth0_vlan: entered promiscuous mode [ 39.600024][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.610650][ T3312] veth1_vlan: entered promiscuous mode [ 39.623339][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.638436][ T1392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.656120][ T1392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.667559][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.686122][ T3312] veth0_macvtap: entered promiscuous mode [ 39.693365][ T1392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.709716][ T3312] veth1_macvtap: entered promiscuous mode [ 39.722611][ T1392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.741534][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.756819][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.765267][ T1392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.808442][ T1392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.841914][ T1392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.865456][ T1392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.873652][ T3496] loop3: detected capacity change from 0 to 512 [ 39.893914][ T1392] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.921263][ T1392] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.933327][ T1392] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.997611][ T1392] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.048462][ T3517] netlink: 'syz.4.12': attribute type 29 has an invalid length. [ 40.070827][ T3517] netlink: 'syz.4.12': attribute type 29 has an invalid length. [ 40.073060][ T3521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.088223][ T3517] netlink: 500 bytes leftover after parsing attributes in process `syz.4.12'. [ 40.097341][ T3517] unsupported nla_type 58 [ 40.195323][ T3531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.216043][ T3533] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.255808][ T3533] wireguard0: entered promiscuous mode [ 40.261409][ T3533] wireguard0: entered allmulticast mode [ 40.265835][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 40.281130][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 40.373769][ T3551] ======================================================= [ 40.373769][ T3551] WARNING: The mand mount option has been deprecated and [ 40.373769][ T3551] and is ignored by this kernel. Remove the mand [ 40.373769][ T3551] option from the mount to silence this warning. [ 40.373769][ T3551] ======================================================= [ 40.633072][ T3568] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 40.650789][ T3569] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 41.193073][ T3626] capability: warning: `syz.2.44' uses 32-bit capabilities (legacy support in use) [ 41.453785][ T3668] loop0: detected capacity change from 0 to 1024 [ 41.486925][ T3668] EXT4-fs: Ignoring removed oldalloc option [ 41.492950][ T3668] EXT4-fs: Ignoring removed bh option [ 41.516111][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.603709][ T3668] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 41.669481][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.806140][ T3681] usb usb8: usbfs: process 3681 (syz.0.53) did not claim interface 0 before use [ 41.896659][ T3684] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 42.020087][ T3691] loop4: detected capacity change from 0 to 1024 [ 42.064756][ T3686] loop0: detected capacity change from 0 to 2048 [ 42.122896][ T3697] netlink: 'syz.3.59': attribute type 3 has an invalid length. [ 42.159949][ T3686] loop0: p1 p2 p3 [ 42.164806][ T3691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.235782][ T3003] loop0: p1 p2 p3 [ 42.298969][ T3691] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.57: Allocating blocks 449-513 which overlap fs metadata [ 42.311203][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.316437][ T3510] udevd[3510]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.333725][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.345600][ T3708] loop1: detected capacity change from 0 to 128 [ 42.352481][ T3708] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.373605][ T3689] EXT4-fs (loop4): pa ffff888106e2d070: logic 48, phys. 177, len 21 [ 42.381706][ T3689] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 42.384026][ T3704] SELinux: failed to load policy [ 42.400371][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.407050][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.411976][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.438291][ T3708] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.450682][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.499415][ T52] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.558076][ T3721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 42.679042][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 42.692290][ T3737] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.742215][ T3740] loop3: detected capacity change from 0 to 256 [ 42.752083][ T3740] FAT-fs (loop3): bogus number of FAT sectors [ 42.758373][ T3740] FAT-fs (loop3): Can't find a valid FAT filesystem [ 43.023040][ T3760] loop3: detected capacity change from 0 to 256 [ 43.149403][ T3765] tipc: Failed to remove unknown binding: 66,1,1/0:1776337941/1776337943 [ 43.157918][ T3765] tipc: Failed to remove unknown binding: 66,1,1/0:1776337941/1776337943 [ 43.344490][ T3781] Zero length message leads to an empty skb [ 43.382937][ T3784] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.814185][ T3820] pim6reg1: entered promiscuous mode [ 43.819597][ T3820] pim6reg1: entered allmulticast mode [ 43.847420][ T3823] loop4: detected capacity change from 0 to 1024 [ 43.866753][ T3823] EXT4-fs: Ignoring removed orlov option [ 43.933376][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.004861][ T3845] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 44.029004][ T3823] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.109: Allocating blocks 449-513 which overlap fs metadata [ 44.030085][ T3845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.053156][ T3822] EXT4-fs (loop4): pa ffff888106e2d000: logic 304, phys. 433, len 5 [ 44.061293][ T3822] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 44.088518][ T3823] syz.4.109 (3823) used greatest stack depth: 10576 bytes left [ 44.098574][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.162761][ T3859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.263139][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 44.263158][ T29] audit: type=1400 audit(1760719933.332:231): avc: denied { mount } for pid=3869 comm="syz.0.118" name="/" dev="ramfs" ino=5026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.270243][ T3872] pim6reg: entered allmulticast mode [ 44.323762][ T3879] pim6reg: left allmulticast mode [ 44.347886][ T29] audit: type=1326 audit(1760719933.392:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.371292][ T29] audit: type=1326 audit(1760719933.392:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.394733][ T29] audit: type=1326 audit(1760719933.392:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.419386][ T29] audit: type=1326 audit(1760719933.392:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.442738][ T29] audit: type=1326 audit(1760719933.392:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.466322][ T29] audit: type=1326 audit(1760719933.402:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.490859][ T29] audit: type=1326 audit(1760719933.402:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 44.570198][ T29] audit: type=1400 audit(1760719933.632:239): avc: denied { setopt } for pid=3886 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.662476][ T29] audit: type=1326 audit(1760719933.722:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 44.808623][ T3926] loop4: detected capacity change from 0 to 128 [ 44.849568][ T3926] syz.4.130: attempt to access beyond end of device [ 44.849568][ T3926] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 44.865158][ T3926] syz.4.130: attempt to access beyond end of device [ 44.865158][ T3926] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 44.878764][ T3926] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 44.889631][ T3926] syz.4.130: attempt to access beyond end of device [ 44.889631][ T3926] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 44.903029][ T3926] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 44.922763][ T3933] bridge0: entered promiscuous mode [ 44.943220][ T3925] syz.4.130: attempt to access beyond end of device [ 44.943220][ T3925] loop4: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 44.957613][ T3925] syz.4.130: attempt to access beyond end of device [ 44.957613][ T3925] loop4: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 44.966209][ T3933] bridge0: port 3(macsec1) entered blocking state [ 44.977697][ T3933] bridge0: port 3(macsec1) entered disabled state [ 44.985148][ T3933] macsec1: entered allmulticast mode [ 44.990580][ T3933] bridge0: entered allmulticast mode [ 44.997236][ T3933] macsec1: left allmulticast mode [ 45.002382][ T3933] bridge0: left allmulticast mode [ 45.012152][ T3933] bridge0: left promiscuous mode [ 45.320682][ T3952] SELinux: failed to load policy [ 45.441089][ T3972] loop3: detected capacity change from 0 to 512 [ 45.492324][ T3972] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.522956][ T3972] EXT4-fs (loop3): mount failed [ 45.924465][ T4024] syz.3.158 uses obsolete (PF_INET,SOCK_PACKET) [ 46.110710][ T4044] mmap: syz.2.162 (4044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.134713][ T4050] loop3: detected capacity change from 0 to 512 [ 46.165871][ T4050] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.192423][ T4050] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.165: couldn't read orphan inode 26 (err -116) [ 46.205782][ T4050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.221082][ T4050] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.390426][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.437964][ T4102] loop3: detected capacity change from 0 to 128 [ 46.485062][ T4102] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.518933][ T4102] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.572314][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.885419][ C0] hrtimer: interrupt took 28039 ns [ 46.998804][ T4136] ALSA: seq fatal error: cannot create timer (-22) [ 47.627449][ T4172] syz.0.202 (4172) used greatest stack depth: 10536 bytes left [ 47.887415][ T4187] tipc: Started in network mode [ 47.892454][ T4187] tipc: Node identity e62685236517, cluster identity 4711 [ 47.899812][ T4187] tipc: Enabled bearer , priority 0 [ 47.917421][ T4187] tipc: Disabling bearer [ 47.978817][ T4193] loop4: detected capacity change from 0 to 128 [ 48.001381][ T4193] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.009354][ T4193] FAT-fs (loop4): Filesystem has been set read-only [ 48.016219][ T4193] syz.4.212: attempt to access beyond end of device [ 48.016219][ T4193] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.029973][ T4193] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.037960][ T4193] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 48.047390][ T4193] syz.4.212: attempt to access beyond end of device [ 48.047390][ T4193] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.068465][ T4193] syz.4.212: attempt to access beyond end of device [ 48.068465][ T4193] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.083575][ T4193] syz.4.212: attempt to access beyond end of device [ 48.083575][ T4193] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.098402][ T4193] syz.4.212: attempt to access beyond end of device [ 48.098402][ T4193] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 48.759098][ T4213] syz.0.221 (4213) used greatest stack depth: 10064 bytes left [ 48.940163][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 48.964461][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 48.973546][ T4238] netlink: 6 bytes leftover after parsing attributes in process `syz.1.234'. [ 49.167571][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 49.259050][ T4259] 9pnet: Could not find request transport: f [ 49.319326][ T4268] pimreg: entered allmulticast mode [ 49.327606][ T4268] pimreg: left allmulticast mode [ 49.345803][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 49.345852][ T29] audit: type=1326 audit(1760719938.422:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.381744][ T29] audit: type=1326 audit(1760719938.422:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.405098][ T29] audit: type=1326 audit(1760719938.422:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.428418][ T29] audit: type=1326 audit(1760719938.422:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.451805][ T29] audit: type=1326 audit(1760719938.422:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.475438][ T29] audit: type=1326 audit(1760719938.422:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.498903][ T29] audit: type=1326 audit(1760719938.422:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.522327][ T29] audit: type=1326 audit(1760719938.422:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4275 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f807a4a1885 code=0x7ffc0000 [ 49.545631][ T29] audit: type=1326 audit(1760719938.422:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.568886][ T29] audit: type=1326 audit(1760719938.422:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.2.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 49.935361][ T4305] team0: Port device team_slave_1 removed [ 50.110969][ T4314] netlink: 996 bytes leftover after parsing attributes in process `syz.1.267'. [ 50.394683][ T4341] serio: Serial port ptm0 [ 50.736283][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.292'. [ 50.745235][ T4370] netlink: 'syz.3.292': attribute type 7 has an invalid length. [ 50.753025][ T4370] netlink: 'syz.3.292': attribute type 8 has an invalid length. [ 50.760730][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 51.001463][ T4393] loop4: detected capacity change from 0 to 256 [ 51.044253][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 51.052139][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 51.087044][ T4397] syz.1.302 (4397) used greatest stack depth: 9160 bytes left [ 51.104737][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 51.115586][ T9] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 51.162325][ T4403] fido_id[4403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.302847][ T4411] hub 6-0:1.0: USB hub found [ 51.309951][ T4411] hub 6-0:1.0: 8 ports detected [ 51.400781][ T4426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.317'. [ 51.768164][ T4467] SELinux: Context Ü is not valid (left unmapped). [ 51.794917][ T4469] bridge0: entered promiscuous mode [ 51.801335][ T4469] macvtap1: entered allmulticast mode [ 51.806795][ T4469] bridge0: entered allmulticast mode [ 51.814631][ T4469] bridge0: port 3(macvtap1) entered blocking state [ 51.821453][ T4469] bridge0: port 3(macvtap1) entered disabled state [ 51.848769][ T4469] bridge0: left allmulticast mode [ 51.853962][ T4469] bridge0: left promiscuous mode [ 51.875742][ T4477] bond1: entered allmulticast mode [ 51.881177][ T4477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.280053][ T4502] hub 9-0:1.0: USB hub found [ 52.286487][ T4502] hub 9-0:1.0: 8 ports detected [ 52.297391][ T4505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4505 comm=syz.0.347 [ 52.309828][ T4505] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4505 comm=syz.0.347 [ 52.351929][ T4510] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 52.380706][ T4512] netlink: 180 bytes leftover after parsing attributes in process `syz.0.350'. [ 52.390024][ T4512] xt_time: unknown flags 0xf4 [ 52.570104][ T4524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.355'. [ 52.657990][ T4536] bridge0: port 3(vlan2) entered blocking state [ 52.664342][ T4536] bridge0: port 3(vlan2) entered disabled state [ 52.671597][ T4536] vlan2: entered allmulticast mode [ 52.676892][ T4536] bridge0: entered allmulticast mode [ 52.696573][ T4536] vlan2: left allmulticast mode [ 52.701476][ T4536] bridge0: left allmulticast mode [ 52.932465][ T4563] netlink: 'syz.4.373': attribute type 4 has an invalid length. [ 53.151035][ T4579] loop1: detected capacity change from 0 to 764 [ 53.261259][ T4604] loop4: detected capacity change from 0 to 512 [ 53.277370][ T4602] loop3: detected capacity change from 0 to 164 [ 53.284181][ T4604] journal_path: Non-blockdev passed as './bus' [ 53.290469][ T4604] EXT4-fs: error: could not find journal device path [ 53.300165][ T4602] process 'syz.3.390' launched '/dev/fd/3' with NULL argv: empty string added [ 53.329236][ T4602] bio_check_eod: 13685 callbacks suppressed [ 53.329315][ T4602] syz.3.390: attempt to access beyond end of device [ 53.329315][ T4602] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 53.380950][ T4602] syz.3.390: attempt to access beyond end of device [ 53.380950][ T4602] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 53.510346][ T4615] loop2: detected capacity change from 0 to 8192 [ 53.605935][ T4632] loop3: detected capacity change from 0 to 764 [ 53.770578][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.778123][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.800430][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.807980][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.373082][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 54.373099][ T29] audit: type=1326 audit(1760719943.442:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.2.426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f807a46efc9 code=0x0 [ 54.404491][ T29] audit: type=1326 audit(1760719943.442:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 54.428037][ T29] audit: type=1326 audit(1760719943.442:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 54.451576][ T29] audit: type=1326 audit(1760719943.442:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 54.476519][ T29] audit: type=1326 audit(1760719943.552:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7e2d35efc9 code=0x7ffc0000 [ 54.500978][ T29] audit: type=1326 audit(1760719943.552:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d35efc9 code=0x7ffc0000 [ 54.524242][ T29] audit: type=1326 audit(1760719943.562:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.0.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d35efc9 code=0x7ffc0000 [ 54.610322][ T4705] vhci_hcd: invalid port number 96 [ 54.615622][ T4705] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 54.674529][ T29] audit: type=1326 audit(1760719943.742:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 54.697916][ T29] audit: type=1326 audit(1760719943.742:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 54.729641][ T4719] can0: slcan on ttyS3. [ 54.755716][ T29] audit: type=1326 audit(1760719943.792:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8cb3efc9 code=0x7ffc0000 [ 54.816262][ T4719] can0 (unregistered): slcan off ttyS3. [ 54.832644][ T4719] Falling back ldisc for ttyS3. [ 54.863329][ T4726] __nla_validate_parse: 21 callbacks suppressed [ 54.863347][ T4726] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.438'. [ 54.901550][ T4729] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.105590][ T4747] pim6reg1: entered promiscuous mode [ 55.110967][ T4747] pim6reg1: entered allmulticast mode [ 55.244484][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 55.296039][ T4758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.296064][ T4758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.303924][ T4758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.303945][ T4758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.381839][ T4766] vhci_hcd: invalid port number 96 [ 55.381860][ T4766] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 56.078036][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 56.112413][ T4798] loop2: detected capacity change from 0 to 512 [ 56.178640][ T4798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.326150][ T4798] EXT4-fs (loop2): 1 truncate cleaned up [ 56.345980][ T4798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.443470][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.510045][ T4825] loop3: detected capacity change from 0 to 256 [ 56.604445][ T4827] pim6reg1: entered allmulticast mode [ 56.791623][ T4836] loop4: detected capacity change from 0 to 512 [ 56.846509][ T4836] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 57.113945][ T4847] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 57.494533][ T4859] can0: slcan on ttyS3. [ 57.545652][ T4859] can0 (unregistered): slcan off ttyS3. [ 57.566058][ T4859] Falling back ldisc for ttyS3. [ 58.029766][ T4887] sd 0:0:1:0: device reset [ 58.065734][ T4893] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 58.127688][ T4897] wireguard0: entered promiscuous mode [ 58.133306][ T4897] wireguard0: entered allmulticast mode [ 58.196766][ T4906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.516'. [ 58.205951][ T4904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.516'. [ 58.382566][ T4918] netlink: 'syz.0.522': attribute type 4 has an invalid length. [ 58.462242][ T4924] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 58.765114][ T4954] hub 6-0:1.0: USB hub found [ 58.774552][ T4954] hub 6-0:1.0: 8 ports detected [ 58.844058][ T4963] netlink: 7 bytes leftover after parsing attributes in process `syz.1.541'. [ 58.856042][ T4965] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 58.871156][ T4963] netlink: 7 bytes leftover after parsing attributes in process `syz.1.541'. [ 58.880490][ T4965] team0: Port device dummy0 added [ 58.899000][ T4965] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 58.930902][ T4965] team0: Port device dummy0 removed [ 58.948585][ T4965] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.161347][ T4996] wireguard0: entered promiscuous mode [ 59.167013][ T4996] wireguard0: entered allmulticast mode [ 59.192017][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.200865][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.378284][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.562'. [ 59.387237][ T5009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.562'. [ 59.396212][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.562'. [ 59.480247][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 59.480264][ T29] audit: type=1400 audit(1760719948.552:660): avc: denied { ioctl } for pid=5016 comm="syz.3.566" path="socket:[10320]" dev="sockfs" ino=10320 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.529507][ T5019] SELinux: failed to load policy [ 59.534688][ T29] audit: type=1400 audit(1760719948.592:661): avc: denied { bind } for pid=5016 comm="syz.3.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.553819][ T29] audit: type=1400 audit(1760719948.602:662): avc: denied { load_policy } for pid=5017 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.608760][ T29] audit: type=1400 audit(1760719948.682:663): avc: denied { read } for pid=5022 comm="syz.4.569" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.631823][ T29] audit: type=1400 audit(1760719948.682:664): avc: denied { open } for pid=5022 comm="syz.4.569" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 59.931061][ T5043] loop2: detected capacity change from 0 to 1024 [ 59.959731][ T5043] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 59.970723][ T5043] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 59.992662][ T5043] JBD2: no valid journal superblock found [ 59.998568][ T5043] EXT4-fs (loop2): Could not load journal inode [ 60.009096][ T5045] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 60.010995][ T5043] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 60.015696][ T5045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.015953][ T5045] vhci_hcd vhci_hcd.0: Device attached [ 60.063529][ T5046] vhci_hcd: connection closed [ 60.065463][ T52] vhci_hcd: stop threads [ 60.074514][ T52] vhci_hcd: release socket [ 60.079004][ T52] vhci_hcd: disconnect device [ 60.101249][ T5051] __nla_validate_parse: 2 callbacks suppressed [ 60.101320][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 60.116367][ T5051] netlink: 348 bytes leftover after parsing attributes in process `syz.2.580'. [ 60.125347][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 60.134192][ T5051] netlink: 348 bytes leftover after parsing attributes in process `syz.2.580'. [ 60.143610][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 60.179489][ T29] audit: type=1326 audit(1760719949.252:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 60.203046][ T29] audit: type=1326 audit(1760719949.252:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 60.231319][ T29] audit: type=1326 audit(1760719949.282:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 60.254748][ T29] audit: type=1326 audit(1760719949.282:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 60.278196][ T29] audit: type=1326 audit(1760719949.282:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.2.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807a46efc9 code=0x7ffc0000 [ 60.463281][ T5076] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 60.717550][ T5104] wireguard0: entered promiscuous mode [ 60.723108][ T5104] wireguard0: entered allmulticast mode [ 60.774813][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119ac0e00: rx timeout, send abort [ 60.783239][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888119ac0e00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.117855][ T5151] 9p: Unknown access argument ¿: -22 [ 61.118621][ T5150] loop3: detected capacity change from 0 to 128 [ 61.231328][ T5157] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.631'. [ 61.283260][ T5163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 61.292255][ T5163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.632'. [ 61.301377][ T5163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 61.312560][ T5163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.632'. [ 61.460502][ T5177] program syz.2.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.066063][ T5221] wireguard0: entered promiscuous mode [ 62.071641][ T5221] wireguard0: entered allmulticast mode [ 62.189046][ T5237] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 62.209799][ T5237] bond1: (slave gretap1): making interface the new active one [ 62.218013][ T5237] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.385821][ T5265] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.392375][ T5265] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.400004][ T5265] vhci_hcd vhci_hcd.0: Device attached [ 62.406987][ T5266] vhci_hcd: connection closed [ 62.407065][ T52] vhci_hcd: stop threads [ 62.416162][ T52] vhci_hcd: release socket [ 62.420626][ T52] vhci_hcd: disconnect device [ 62.709323][ T5318] bridge0: port 3(macsec1) entered blocking state [ 62.715896][ T5318] bridge0: port 3(macsec1) entered disabled state [ 62.722919][ T5318] macsec1: entered allmulticast mode [ 62.729306][ T5318] macsec1: left allmulticast mode [ 62.754635][ T5326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.761927][ T5326] IPv6: NLM_F_CREATE should be set when creating new route [ 62.769164][ T5326] IPv6: NLM_F_CREATE should be set when creating new route [ 63.136371][ T5377] pim6reg1: entered promiscuous mode [ 63.141811][ T5377] pim6reg1: entered allmulticast mode [ 63.866242][ T5469] netlink: 'syz.2.775': attribute type 7 has an invalid length. [ 63.874020][ T5469] netlink: 'syz.2.775': attribute type 8 has an invalid length. [ 64.485872][ T29] kauditd_printk_skb: 1292 callbacks suppressed [ 64.485888][ T29] audit: type=1400 audit(1760719953.562:1962): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.538153][ T29] audit: type=1400 audit(1760719953.612:1963): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.599301][ T29] audit: type=1400 audit(1760719953.642:1964): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 64.623652][ T29] audit: type=1400 audit(1760719953.642:1965): avc: denied { prog_load } for pid=5563 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.642706][ T29] audit: type=1400 audit(1760719953.642:1966): avc: denied { prog_load } for pid=5563 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.661812][ T29] audit: type=1400 audit(1760719953.642:1967): avc: denied { prog_load } for pid=5563 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.681183][ T29] audit: type=1400 audit(1760719953.642:1968): avc: denied { prog_load } for pid=5563 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 64.700328][ T29] audit: type=1400 audit(1760719953.662:1969): avc: denied { create } for pid=5567 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 64.720048][ T29] audit: type=1400 audit(1760719953.662:1970): avc: denied { create } for pid=5567 comm="syz.1.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 64.739497][ T29] audit: type=1400 audit(1760719953.672:1971): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.507711][ T5632] __nla_validate_parse: 8 callbacks suppressed [ 65.507727][ T5632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'. [ 65.879993][ T5657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5657 comm=syz.4.858 [ 66.544749][ T5718] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 66.608242][ T5718] gretap2: entered allmulticast mode [ 66.625866][ T5718] bond2: (slave gretap2): making interface the new active one [ 66.642627][ T5718] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 66.796956][ T5741] netlink: 'syz.0.897': attribute type 1 has an invalid length. [ 66.832540][ T5741] bond2: (slave bridge1): making interface the new active one [ 66.840778][ T5741] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 66.953623][ T5762] netlink: 'syz.1.906': attribute type 13 has an invalid length. [ 67.008139][ T5762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.057118][ T5774] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 67.067916][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.087092][ T5774] bond0: (slave team0): Enslaving as an active interface with an up link [ 67.448705][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 67.562153][ T5810] capability: warning: `syz.3.928' uses deprecated v2 capabilities in a way that may be insecure [ 67.724780][ T5835] netlink: 'syz.3.940': attribute type 16 has an invalid length. [ 67.732865][ T5835] netlink: 156 bytes leftover after parsing attributes in process `syz.3.940'. [ 67.760632][ T5838] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 67.768398][ T5838] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 67.776267][ T5838] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.941'. [ 67.951666][ T5851] geneve2: entered promiscuous mode [ 68.324308][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 68.385885][ T5921] bond_slave_1: mtu less than device minimum [ 69.018719][ T5953] netlink: 'syz.2.994': attribute type 12 has an invalid length. [ 69.518464][ T29] kauditd_printk_skb: 562 callbacks suppressed [ 69.518482][ T29] audit: type=1400 audit(1760719958.592:2534): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.596144][ T29] audit: type=1400 audit(1760719958.672:2535): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.646499][ T29] audit: type=1400 audit(1760719958.722:2536): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.776477][ T29] audit: type=1400 audit(1760719958.852:2537): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 69.827686][ T29] audit: type=1400 audit(1760719958.852:2538): avc: denied { block_suspend } for pid=5994 comm="syz.1.1014" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 69.849297][ T29] audit: type=1400 audit(1760719958.882:2539): avc: denied { map_create } for pid=5997 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.868639][ T29] audit: type=1400 audit(1760719958.892:2540): avc: denied { map_create } for pid=6000 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.887828][ T29] audit: type=1400 audit(1760719958.892:2541): avc: denied { prog_load } for pid=6000 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.906915][ T29] audit: type=1400 audit(1760719958.892:2542): avc: denied { prog_load } for pid=6000 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 69.926153][ T29] audit: type=1400 audit(1760719958.892:2543): avc: denied { map_create } for pid=6000 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.462230][ T6045] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 70.844405][ T6065] netlink: 'syz.0.1046': attribute type 3 has an invalid length. [ 71.046954][ T6097] geneve2: entered promiscuous mode [ 71.168167][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1067'. [ 71.209896][ T6116] erspan0: entered promiscuous mode [ 71.215346][ T6116] macvtap1: entered promiscuous mode [ 71.221018][ T6116] macvtap1: entered allmulticast mode [ 71.226479][ T6116] erspan0: entered allmulticast mode [ 71.237854][ T6120] erspan0: left allmulticast mode [ 71.243047][ T6120] erspan0: left promiscuous mode [ 71.258217][ T6120] macvtap1: left promiscuous mode [ 71.263407][ T6120] macvtap1: left allmulticast mode [ 71.297188][ T6124] xt_hashlimit: max too large, truncated to 1048576 [ 71.347383][ T6132] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 71.596188][ T6164] syz.3.1089 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.728045][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 71.737177][ T6176] netlink: 'syz.3.1093': attribute type 14 has an invalid length. [ 71.758264][ T3649] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.770358][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 71.779481][ T6176] netlink: 'syz.3.1093': attribute type 14 has an invalid length. [ 71.788185][ T3649] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.797297][ T3649] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.813065][ T3649] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.989721][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1105'. [ 72.036819][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 72.160826][ T6213] netlink: 'syz.0.1111': attribute type 30 has an invalid length. [ 72.384599][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 72.394227][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 72.476286][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 72.870133][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 72.887464][ T6312] wg2: entered promiscuous mode [ 72.892496][ T6312] wg2: entered allmulticast mode [ 72.997568][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 73.789819][ T6434] bridge: RTM_NEWNEIGH with invalid ether address [ 74.119849][ T6406] ================================================================== [ 74.128157][ T6406] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 74.136802][ T6406] [ 74.139157][ T6406] write to 0xffff88811e9aebe8 of 8 bytes by task 6399 on cpu 1: [ 74.146804][ T6406] shmem_file_splice_read+0x470/0x600 [ 74.152209][ T6406] splice_direct_to_actor+0x26f/0x680 [ 74.157598][ T6406] do_splice_direct+0xda/0x150 [ 74.162421][ T6406] do_sendfile+0x380/0x650 [ 74.166870][ T6406] __x64_sys_sendfile64+0x105/0x150 [ 74.172101][ T6406] x64_sys_call+0x2bb4/0x3000 [ 74.176802][ T6406] do_syscall_64+0xd2/0x200 [ 74.181330][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.187246][ T6406] [ 74.189584][ T6406] write to 0xffff88811e9aebe8 of 8 bytes by task 6406 on cpu 0: [ 74.197222][ T6406] shmem_file_splice_read+0x470/0x600 [ 74.202621][ T6406] splice_direct_to_actor+0x26f/0x680 [ 74.208033][ T6406] do_splice_direct+0xda/0x150 [ 74.212829][ T6406] do_sendfile+0x380/0x650 [ 74.217422][ T6406] __x64_sys_sendfile64+0x105/0x150 [ 74.222662][ T6406] x64_sys_call+0x2bb4/0x3000 [ 74.227359][ T6406] do_syscall_64+0xd2/0x200 [ 74.231898][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.237819][ T6406] [ 74.240156][ T6406] value changed: 0x000000000000dd2e -> 0x000000000000dd3a [ 74.247274][ T6406] [ 74.249612][ T6406] Reported by Kernel Concurrency Sanitizer on: [ 74.255797][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.1.1200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.265570][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.275642][ T6406] ================================================================== [ 74.805747][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 74.805766][ T29] audit: type=1400 audit(1760719963.882:3228): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0