last executing test programs: 41.372075584s ago: executing program 2 (id=96): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 41.334540467s ago: executing program 2 (id=98): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 40.994874721s ago: executing program 2 (id=114): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x8) fcntl$setlease(r0, 0x400, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 40.950064525s ago: executing program 2 (id=117): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x8}, 0x4a00, 0x10000, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_create_resource$binfmt(&(0x7f0000000600)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) execveat$binfmt(r2, r0, 0x0, 0x0, 0x1000) 40.825196938s ago: executing program 2 (id=125): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 40.731482097s ago: executing program 2 (id=130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x80, 0xffffffffffffffff}) 37.413533823s ago: executing program 1 (id=220): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 37.357547548s ago: executing program 1 (id=222): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f00000006c0)="66bb0b760dc0f4ff2d", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 37.273842837s ago: executing program 1 (id=224): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 37.222513001s ago: executing program 1 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r1, 0x1) 37.121682452s ago: executing program 1 (id=231): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 37.031844891s ago: executing program 1 (id=234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 25.682118406s ago: executing program 32 (id=130): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x80, 0xffffffffffffffff}) 21.993613378s ago: executing program 33 (id=234): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.591649473s ago: executing program 5 (id=1179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000200)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x0, 0x6e6, 0x4, 0xaf, 0x98, 0x7}}, &(0x7f00000002c0), 0x600) 1.558614467s ago: executing program 5 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12c, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000006f2c7b8af8ff00000000bfa200000000000007020000f8ffff00b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 1.412730651s ago: executing program 5 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) 1.412343721s ago: executing program 4 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.236063738s ago: executing program 5 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 1.235910418s ago: executing program 4 (id=1178): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010040, 0x0) 1.044615607s ago: executing program 6 (id=1186): r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r1, r3) 1.044136527s ago: executing program 5 (id=1198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.041722667s ago: executing program 4 (id=1199): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 993.338092ms ago: executing program 6 (id=1187): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd, 0x0, 0x0}) 920.442489ms ago: executing program 4 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000280), &(0x7f0000000400)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 897.255432ms ago: executing program 4 (id=1191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 884.088873ms ago: executing program 6 (id=1192): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1}}, 0x80, 0x0, 0xfffffe08}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 848.883577ms ago: executing program 4 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) 835.784288ms ago: executing program 6 (id=1194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 724.043589ms ago: executing program 0 (id=1196): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r2, 0x10001, 0x0) 705.899741ms ago: executing program 0 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) 686.017863ms ago: executing program 0 (id=1200): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000380)=[{r0, 0x200}, {r0, 0x1020}], 0x2, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x100000000000000, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r0}}, 0x20) 600.637521ms ago: executing program 0 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x11c}}, 0x0) 576.835013ms ago: executing program 0 (id=1202): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x44) 291.205091ms ago: executing program 6 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 286.924432ms ago: executing program 0 (id=1207): epoll_create1(0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 229.136417ms ago: executing program 6 (id=1208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="fd6f0100ff"], 0xa) 163.103404ms ago: executing program 3 (id=1210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') lseek(r2, 0x10001, 0x0) 135.100586ms ago: executing program 3 (id=1211): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000380)=[{r0, 0x200}, {r0, 0x1020}], 0x2, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x100000000000000, &(0x7f00000005c0)={0x8, 0x70, 0x80000, {r0}}, 0x20) 118.388128ms ago: executing program 5 (id=1212): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x14c6f85cc8790d39) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x7f000, 0x4000}]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) 57.771414ms ago: executing program 3 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x11c}}, 0x0) 40.586136ms ago: executing program 3 (id=1214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") 494.71µs ago: executing program 3 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 0s ago: executing program 3 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 33.941308][ T29] audit: type=1400 audit(1761152996.781:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.964341][ T29] audit: type=1400 audit(1761152996.811:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.965267][ T3304] cgroup: Unknown subsys name 'net' [ 33.992035][ T29] audit: type=1400 audit(1761152996.831:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.104791][ T3304] cgroup: Unknown subsys name 'cpuset' [ 34.111050][ T3304] cgroup: Unknown subsys name 'rlimit' [ 34.222230][ T29] audit: type=1400 audit(1761152997.061:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.247280][ T29] audit: type=1400 audit(1761152997.061:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.265407][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.267752][ T29] audit: type=1400 audit(1761152997.061:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.296716][ T29] audit: type=1400 audit(1761152997.061:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.316969][ T29] audit: type=1400 audit(1761152997.061:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.341851][ T29] audit: type=1400 audit(1761152997.061:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.349199][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.365107][ T29] audit: type=1400 audit(1761152997.121:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.105248][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.155034][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.187399][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 36.230194][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.238983][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.247773][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.254873][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.262002][ T3316] bridge_slave_0: entered allmulticast mode [ 36.268583][ T3316] bridge_slave_0: entered promiscuous mode [ 36.285492][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.292549][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.299738][ T3316] bridge_slave_1: entered allmulticast mode [ 36.306257][ T3316] bridge_slave_1: entered promiscuous mode [ 36.332214][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.339317][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.346454][ T3314] bridge_slave_0: entered allmulticast mode [ 36.352936][ T3314] bridge_slave_0: entered promiscuous mode [ 36.379094][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.386309][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.393422][ T3314] bridge_slave_1: entered allmulticast mode [ 36.399868][ T3314] bridge_slave_1: entered promiscuous mode [ 36.426411][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.440659][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.447745][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.455034][ T3326] bridge_slave_0: entered allmulticast mode [ 36.461688][ T3326] bridge_slave_0: entered promiscuous mode [ 36.473704][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.486038][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.500276][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.507362][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.514513][ T3326] bridge_slave_1: entered allmulticast mode [ 36.521000][ T3326] bridge_slave_1: entered promiscuous mode [ 36.530027][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.573223][ T3316] team0: Port device team_slave_0 added [ 36.589372][ T3314] team0: Port device team_slave_0 added [ 36.595247][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.602352][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.609503][ T3322] bridge_slave_0: entered allmulticast mode [ 36.616002][ T3322] bridge_slave_0: entered promiscuous mode [ 36.622625][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.629740][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.637229][ T3320] bridge_slave_0: entered allmulticast mode [ 36.643687][ T3320] bridge_slave_0: entered promiscuous mode [ 36.650727][ T3316] team0: Port device team_slave_1 added [ 36.657628][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.671955][ T3314] team0: Port device team_slave_1 added [ 36.677795][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.684926][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.692108][ T3322] bridge_slave_1: entered allmulticast mode [ 36.698665][ T3322] bridge_slave_1: entered promiscuous mode [ 36.704773][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.711809][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.719018][ T3320] bridge_slave_1: entered allmulticast mode [ 36.725546][ T3320] bridge_slave_1: entered promiscuous mode [ 36.732830][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.770214][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.777215][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.803336][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.814613][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.821556][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.847529][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.863499][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.870495][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.896401][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.917267][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.926980][ T3326] team0: Port device team_slave_0 added [ 36.935498][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.942446][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.968369][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.980156][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.990232][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.000111][ T3326] team0: Port device team_slave_1 added [ 37.019368][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.040141][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.047223][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.073234][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.094851][ T3320] team0: Port device team_slave_0 added [ 37.100976][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.107988][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.133908][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.159784][ T3320] team0: Port device team_slave_1 added [ 37.173873][ T3322] team0: Port device team_slave_0 added [ 37.188595][ T3316] hsr_slave_0: entered promiscuous mode [ 37.194513][ T3316] hsr_slave_1: entered promiscuous mode [ 37.211540][ T3322] team0: Port device team_slave_1 added [ 37.227801][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.234902][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.260853][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.274045][ T3314] hsr_slave_0: entered promiscuous mode [ 37.280071][ T3314] hsr_slave_1: entered promiscuous mode [ 37.285988][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.291751][ T3314] Cannot create hsr debugfs directory [ 37.297598][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.304670][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.330646][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.357465][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.364465][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.390426][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.404248][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.411248][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.437322][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.450176][ T3326] hsr_slave_0: entered promiscuous mode [ 37.456424][ T3326] hsr_slave_1: entered promiscuous mode [ 37.462127][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 37.467872][ T3326] Cannot create hsr debugfs directory [ 37.545457][ T3322] hsr_slave_0: entered promiscuous mode [ 37.551371][ T3322] hsr_slave_1: entered promiscuous mode [ 37.557563][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.563301][ T3322] Cannot create hsr debugfs directory [ 37.596103][ T3320] hsr_slave_0: entered promiscuous mode [ 37.602134][ T3320] hsr_slave_1: entered promiscuous mode [ 37.608188][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.613946][ T3320] Cannot create hsr debugfs directory [ 37.738774][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.753605][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.773426][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.782308][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.807687][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.816455][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.825633][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.835261][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.884152][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.892958][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.905935][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.917741][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.928767][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.944098][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.957949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.965033][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.979682][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.989064][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.998019][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.008240][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.026720][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.033795][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.050950][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.069732][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.078816][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.102290][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.121531][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.138949][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.152479][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.159639][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.168462][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.175641][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.230975][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.239977][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.260075][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.273088][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.280177][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.289886][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.309322][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.316434][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.366807][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.382043][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.399382][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.437892][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.449593][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.465881][ T2156] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.473116][ T2156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.483493][ T2156] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.490674][ T2156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.527463][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.540470][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.547597][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.564686][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.578411][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.585503][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.603505][ T3316] veth0_vlan: entered promiscuous mode [ 38.619810][ T3316] veth1_vlan: entered promiscuous mode [ 38.635060][ T3326] veth0_vlan: entered promiscuous mode [ 38.649402][ T3326] veth1_vlan: entered promiscuous mode [ 38.682941][ T3316] veth0_macvtap: entered promiscuous mode [ 38.705076][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.721328][ T3316] veth1_macvtap: entered promiscuous mode [ 38.728379][ T3326] veth0_macvtap: entered promiscuous mode [ 38.737815][ T3326] veth1_macvtap: entered promiscuous mode [ 38.760824][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.769281][ T3314] veth0_vlan: entered promiscuous mode [ 38.776826][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.788201][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.811327][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.823571][ T3314] veth1_vlan: entered promiscuous mode [ 38.831161][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.852885][ T2156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.861907][ T2156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.879110][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.887664][ T2156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.902062][ T2156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.911710][ T2156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934911][ T2156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.943704][ T2156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.955450][ T3314] veth0_macvtap: entered promiscuous mode [ 38.962178][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 38.962246][ T29] audit: type=1400 audit(1761153001.801:84): avc: denied { mount } for pid=3326 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.969450][ T3314] veth1_macvtap: entered promiscuous mode [ 38.996753][ T29] audit: type=1400 audit(1761153001.841:85): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/root/syzkaller.5HYJU6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.023350][ T29] audit: type=1400 audit(1761153001.841:86): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/root/syzkaller.5HYJU6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.031441][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.050702][ T29] audit: type=1400 audit(1761153001.841:87): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.078642][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.094538][ T3320] veth0_vlan: entered promiscuous mode [ 39.102303][ T3320] veth1_vlan: entered promiscuous mode [ 39.105490][ T3326] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.109904][ T29] audit: type=1400 audit(1761153001.921:88): avc: denied { mounton } for pid=3326 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.142519][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.145050][ T29] audit: type=1400 audit(1761153001.921:89): avc: denied { mount } for pid=3326 comm="syz-executor" name="/" dev="gadgetfs" ino=4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.183275][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.188364][ T29] audit: type=1400 audit(1761153002.021:90): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.216105][ T29] audit: type=1400 audit(1761153002.021:91): avc: denied { open } for pid=3326 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.229765][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.240089][ T29] audit: type=1400 audit(1761153002.021:92): avc: denied { ioctl } for pid=3326 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.260332][ T3322] veth0_vlan: entered promiscuous mode [ 39.284371][ T29] audit: type=1400 audit(1761153002.131:93): avc: denied { map_create } for pid=3482 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.314422][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.338276][ T3322] veth1_vlan: entered promiscuous mode [ 39.346096][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.364148][ T3320] veth0_macvtap: entered promiscuous mode [ 39.372041][ T3320] veth1_macvtap: entered promiscuous mode [ 39.408826][ T3322] veth0_macvtap: entered promiscuous mode [ 39.422548][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.431690][ T3322] veth1_macvtap: entered promiscuous mode [ 39.450593][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.463161][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.487730][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.505140][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.522144][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.543129][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.597056][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637056][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.652008][ T3505] netlink: 264 bytes leftover after parsing attributes in process `syz.1.11'. [ 39.676390][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.709065][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.763644][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.918173][ T3532] ieee802154 phy0 wpan0: encryption failed: -22 [ 39.958852][ T3534] pimreg: entered allmulticast mode [ 39.972937][ T3534] pimreg: left allmulticast mode [ 40.100606][ T3549] loop0: detected capacity change from 0 to 2048 [ 40.136972][ T3549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.154803][ T3556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3556 comm=syz.3.33 [ 40.167243][ T3556] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3556 comm=syz.3.33 [ 40.222416][ T3565] syz.3.36 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.343986][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.948992][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 40.957859][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 40.970295][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 40.993515][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.002348][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.011550][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.075530][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.084364][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.094435][ T3635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 41.293800][ T3664] loop1: detected capacity change from 0 to 4096 [ 41.340969][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.435317][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.477284][ T3684] atomic_op ffff88811b9b0928 conn xmit_atomic 0000000000000000 [ 41.563961][ T3696] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 41.570538][ T3696] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 41.578042][ T3696] vhci_hcd vhci_hcd.0: Device attached [ 41.629332][ T3697] vhci_hcd: connection closed [ 41.629663][ T2156] vhci_hcd: stop threads [ 41.638727][ T2156] vhci_hcd: release socket [ 41.643200][ T2156] vhci_hcd: disconnect device [ 41.696470][ T3716] sd 0:0:1:0: device reset [ 41.708325][ T3719] loop3: detected capacity change from 0 to 512 [ 41.733682][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.762098][ T3719] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.774314][ T3727] netlink: 'syz.0.99': attribute type 11 has an invalid length. [ 41.850936][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.974362][ C0] hrtimer: interrupt took 39310 ns [ 42.052377][ T3755] Zero length message leads to an empty skb [ 42.120024][ T3764] process 'syz.2.117' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 42.284323][ T3786] netlink: 'syz.1.127': attribute type 10 has an invalid length. [ 42.617962][ T2156] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x1b [ 43.210281][ T3858] syz.4.151 uses obsolete (PF_INET,SOCK_PACKET) [ 43.555713][ T3880] SELinux: Context system_u:object_r:semanage_trans_lock_t:s0 is not valid (left unmapped). [ 43.748865][ T3902] IPVS: Error connecting to the multicast addr [ 44.093280][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 44.093296][ T29] audit: type=1400 audit(1761153006.931:408): avc: denied { create } for pid=3918 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.177841][ T29] audit: type=1400 audit(1761153006.941:409): avc: denied { setopt } for pid=3918 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.233908][ T29] audit: type=1400 audit(1761153007.051:410): avc: denied { read write } for pid=3924 comm="syz.3.183" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.257123][ T29] audit: type=1400 audit(1761153007.051:411): avc: denied { open } for pid=3924 comm="syz.3.183" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.280251][ T29] audit: type=1400 audit(1761153007.051:412): avc: denied { ioctl } for pid=3924 comm="syz.3.183" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.307732][ T29] audit: type=1400 audit(1761153007.061:413): avc: denied { create } for pid=3923 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.327074][ T29] audit: type=1400 audit(1761153007.071:414): avc: denied { bind } for pid=3923 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.346267][ T29] audit: type=1400 audit(1761153007.071:415): avc: denied { write } for pid=3923 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.419351][ T3933] netlink: '': attribute type 3 has an invalid length. [ 44.473892][ T29] audit: type=1400 audit(1761153007.141:416): avc: denied { write } for pid=3927 comm="syz.0.184" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.523893][ T29] audit: type=1400 audit(1761153007.351:417): avc: denied { create } for pid=3937 comm="syz.4.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.772051][ T3960] SELinux: policydb version 0 does not match my version range 15-35 [ 44.796933][ T3960] SELinux: failed to load policy [ 44.942605][ T3973] loop1: detected capacity change from 0 to 512 [ 44.952305][ T3973] ======================================================= [ 44.952305][ T3973] WARNING: The mand mount option has been deprecated and [ 44.952305][ T3973] and is ignored by this kernel. Remove the mand [ 44.952305][ T3973] option from the mount to silence this warning. [ 44.952305][ T3973] ======================================================= [ 44.991647][ T3975] serio: Serial port ptm0 [ 45.009617][ T3973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.016556][ T3973] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.201: bad orphan inode 13 [ 45.033875][ T3973] ext4_test_bit(bit=12, block=18) = 1 [ 45.039313][ T3973] is_bad_inode(inode)=0 [ 45.043489][ T3973] NEXT_ORPHAN(inode)=2130706432 [ 45.048378][ T3973] max_ino=32 [ 45.051591][ T3973] i_nlink=1 [ 45.108419][ T3973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.204626][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.308222][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881089bca00: rx timeout, send abort [ 45.316505][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104a2c800: rx timeout, send abort [ 45.324783][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881089bca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.339129][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104a2c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 45.393815][ T3994] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 45.436700][ T3997] loop4: detected capacity change from 0 to 512 [ 45.463682][ T3997] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.211: EA inode hash validation failed [ 45.487657][ T3997] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.497333][ T4002] __nla_validate_parse: 4 callbacks suppressed [ 45.497352][ T4002] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.214'. [ 45.517404][ T3997] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.211: corrupted inode contents [ 45.567828][ T3997] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.211: mark_inode_dirty error [ 45.587371][ T4008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 45.599354][ T3997] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.211: corrupted inode contents [ 45.659330][ T3997] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.211: mark_inode_dirty error [ 45.708631][ T3997] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.211: mark inode dirty (error -117) [ 45.737195][ T3997] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 45.747423][ T3997] EXT4-fs (loop4): 1 orphan inode deleted [ 45.764432][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.832643][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.901876][ T4041] syz.1.227 (4041) used greatest stack depth: 9984 bytes left [ 45.939016][ T4053] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 45.991035][ T4061] loop4: detected capacity change from 0 to 512 [ 46.009320][ T4061] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.144946][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 46.153780][ T4079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.237'. [ 46.162943][ T4079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 46.171791][ T4079] netlink: 2 bytes leftover after parsing attributes in process `syz.0.237'. [ 46.214141][ T4079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.237'. [ 46.721713][ T4141] netlink: 'syz.4.249': attribute type 83 has an invalid length. [ 47.500915][ T4234] 9p: Unknown access argument o: -22 [ 47.852808][ T4257] loop4: detected capacity change from 0 to 1024 [ 47.875465][ T4257] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.906110][ T4257] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.926162][ T4257] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.936414][ T4257] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.273: Invalid inode table block 0 in block_group 0 [ 47.953124][ T4264] loop0: detected capacity change from 0 to 512 [ 47.980954][ T4264] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.276: error while reading EA inode 32 err=-116 [ 48.003674][ T4257] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.013416][ T4264] EXT4-fs (loop0): Remounting filesystem read-only [ 48.030345][ T4264] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 48.034007][ T4257] EXT4-fs error (device loop4): ext4_quota_write:7334: inode #3: comm syz.4.273: mark_inode_dirty error [ 48.040622][ T4264] EXT4-fs (loop0): 1 orphan inode deleted [ 48.063892][ T4257] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.273: Failed to acquire dquot type 0 [ 48.094420][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.114013][ T4257] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.273: Invalid inode table block 0 in block_group 0 [ 48.152319][ T4257] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.154581][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.161999][ T4257] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.273: mark_inode_dirty error [ 48.213978][ T4257] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.273: Invalid inode table block 0 in block_group 0 [ 48.233996][ T4257] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.259485][ T4257] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 48.276272][ T4257] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.273: Invalid inode table block 0 in block_group 0 [ 48.374027][ T4257] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.399972][ T4257] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.273: mark_inode_dirty error [ 48.411109][ T4257] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 48.420193][ T4257] EXT4-fs (loop4): 1 truncate cleaned up [ 48.434298][ T4257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.508680][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.547464][ T4273] loop3: detected capacity change from 0 to 1024 [ 48.571889][ T4273] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.585324][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.638737][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.686761][ T4283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.704588][ T3406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.712325][ T3406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.720093][ T3406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.727761][ T3406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 48.735106][ T3406] rtc rtc0: __rtc_set_alarm: err=-22 [ 49.088336][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 49.098200][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 49.135654][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 49.135670][ T29] audit: type=1400 audit(1761153011.981:639): avc: denied { connect } for pid=4314 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.161457][ T29] audit: type=1400 audit(1761153011.981:640): avc: denied { ioctl } for pid=4314 comm="syz.0.298" path="socket:[6689]" dev="sockfs" ino=6689 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.233867][ T29] audit: type=1326 audit(1761153012.071:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 49.257232][ T29] audit: type=1326 audit(1761153012.071:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 49.297518][ T29] audit: type=1326 audit(1761153012.121:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 49.321012][ T29] audit: type=1326 audit(1761153012.121:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 49.447901][ T29] audit: type=1400 audit(1761153012.291:645): avc: denied { create } for pid=4335 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.467217][ T29] audit: type=1400 audit(1761153012.291:646): avc: denied { write } for pid=4335 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.513898][ T4339] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 49.520463][ T4339] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.528163][ T4339] vhci_hcd vhci_hcd.0: Device attached [ 49.546427][ T29] audit: type=1400 audit(1761153012.291:647): avc: denied { ioctl } for pid=4335 comm="syz.0.306" path="socket:[6724]" dev="sockfs" ino=6724 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.596395][ T4340] vhci_hcd: connection closed [ 49.603803][ T12] vhci_hcd: stop threads [ 49.612817][ T12] vhci_hcd: release socket [ 49.617272][ T12] vhci_hcd: disconnect device [ 49.653193][ T29] audit: type=1326 audit(1761153012.491:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4344 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 50.089914][ T4356] loop3: detected capacity change from 0 to 8192 [ 50.124147][ T4356] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.149698][ T4356] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 50.158291][ T4356] FAT-fs (loop3): Filesystem has been set read-only [ 50.340138][ T4384] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.402751][ T4386] SELinux: Context Ü is not valid (left unmapped). [ 50.798102][ T4425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.336'. [ 50.975214][ T4431] usb usb5: usbfs: process 4431 (syz.3.339) did not claim interface 0 before use [ 51.061691][ T4442] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.206735][ T4457] netlink: 'syz.0.347': attribute type 29 has an invalid length. [ 51.225237][ T4457] netlink: 'syz.0.347': attribute type 29 has an invalid length. [ 51.253992][ T4457] netlink: 500 bytes leftover after parsing attributes in process `syz.0.347'. [ 51.263028][ T4457] unsupported nla_type 66 [ 51.308037][ T4465] macvtap0: refused to change device tx_queue_len [ 51.348909][ T4469] sd 0:0:1:0: device reset [ 51.515198][ T4486] sd 0:0:1:0: device reset [ 51.543987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.705068][ T4511] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.365'. [ 51.750876][ T4498] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.365'. [ 51.902289][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 52.313434][ T4575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 52.453792][ T4595] tipc: Enabling of bearer rejected, failed to enable media [ 52.557448][ T4605] loop3: detected capacity change from 0 to 764 [ 52.586956][ T4605] rock: directory entry would overflow storage [ 52.593185][ T4605] rock: sig=0x4f50, size=4, remaining=3 [ 52.598870][ T4605] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 53.204302][ T4658] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 53.225892][ T4660] loop0: detected capacity change from 0 to 256 [ 53.260626][ T4663] pim6reg: entered allmulticast mode [ 53.293863][ T4663] pim6reg: left allmulticast mode [ 53.413059][ T4678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.426'. [ 53.449796][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.428'. [ 53.458811][ T4681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.428'. [ 53.484290][ T4682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.427'. [ 53.549340][ T4691] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 53.555902][ T4691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 53.563599][ T4691] vhci_hcd vhci_hcd.0: Device attached [ 53.595470][ T4692] vhci_hcd: cannot find the pending unlink 1073741833 [ 53.602685][ T4692] vhci_hcd: connection closed [ 53.602789][ T52] vhci_hcd: stop threads [ 53.611845][ T52] vhci_hcd: release socket [ 53.616298][ T52] vhci_hcd: disconnect device [ 53.908387][ T4709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.919851][ T4709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.457395][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 54.457479][ T29] audit: type=1326 audit(1761153017.301:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.507449][ T29] audit: type=1326 audit(1761153017.331:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.530828][ T29] audit: type=1326 audit(1761153017.331:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.554097][ T29] audit: type=1326 audit(1761153017.331:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.577569][ T29] audit: type=1326 audit(1761153017.331:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.600904][ T29] audit: type=1326 audit(1761153017.331:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.624172][ T29] audit: type=1326 audit(1761153017.331:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.647407][ T29] audit: type=1326 audit(1761153017.331:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.670842][ T29] audit: type=1326 audit(1761153017.331:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.694202][ T29] audit: type=1326 audit(1761153017.331:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b3b1efc9 code=0x7ffc0000 [ 54.722455][ T4731] pim6reg: entered allmulticast mode [ 54.729891][ T4731] pim6reg: left allmulticast mode [ 54.916261][ T4747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4747 comm=syz.3.452 [ 55.419975][ T4780] serio: Serial port ptm0 [ 55.559944][ T4800] loop4: detected capacity change from 0 to 1024 [ 55.567005][ T4800] EXT4-fs: Ignoring removed orlov option [ 55.572695][ T4800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.595724][ T4800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.689163][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.055762][ T4839] __nla_validate_parse: 4 callbacks suppressed [ 56.055780][ T4839] netlink: 19 bytes leftover after parsing attributes in process `syz.4.482'. [ 56.147603][ T4844] netlink: 7 bytes leftover after parsing attributes in process `syz.4.485'. [ 56.177163][ T4844] netlink: 7 bytes leftover after parsing attributes in process `syz.4.485'. [ 56.325912][ T4853] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 56.735902][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 56.775303][ T4886] bond_slave_0: entered promiscuous mode [ 56.781031][ T4886] bond_slave_1: entered promiscuous mode [ 56.812307][ T4886] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 56.820897][ T4892] serio: Serial port ptm0 [ 56.831978][ T4886] bond_slave_0: left promiscuous mode [ 56.837501][ T4886] bond_slave_1: left promiscuous mode [ 57.166243][ T4917] loop0: detected capacity change from 0 to 1024 [ 57.173335][ T4917] EXT4-fs: Ignoring removed orlov option [ 57.179069][ T4917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.226440][ T4917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.281725][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.338030][ T4930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.357442][ T4930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.592127][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.621317][ T4938] chnl_net:caif_netlink_parms(): no params data found [ 57.674899][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.692609][ T5057] serio: Serial port ptm0 [ 57.766908][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.778711][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.785874][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.793141][ T4938] bridge_slave_0: entered allmulticast mode [ 57.799877][ T4938] bridge_slave_0: entered promiscuous mode [ 57.807064][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.814160][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.821400][ T4938] bridge_slave_1: entered allmulticast mode [ 57.828071][ T4938] bridge_slave_1: entered promiscuous mode [ 57.844040][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.877350][ T4938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.888671][ T4938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.955145][ T4938] team0: Port device team_slave_0 added [ 57.961948][ T4938] team0: Port device team_slave_1 added [ 58.032915][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.039968][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.066169][ T4938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.104331][ T5207] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 58.111055][ T5207] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.118683][ T5207] vhci_hcd vhci_hcd.0: Device attached [ 58.124366][ T52] bridge_slave_1: left allmulticast mode [ 58.130024][ T52] bridge_slave_1: left promiscuous mode [ 58.135792][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.144151][ T52] bridge_slave_0: left allmulticast mode [ 58.145148][ T5208] vhci_hcd: cannot find the pending unlink 1073741833 [ 58.149806][ T52] bridge_slave_0: left promiscuous mode [ 58.162433][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.169494][ T5208] vhci_hcd: connection closed [ 58.169914][ T2156] vhci_hcd: stop threads [ 58.179048][ T2156] vhci_hcd: release socket [ 58.183465][ T2156] vhci_hcd: disconnect device [ 58.211005][ T5211] loop0: detected capacity change from 0 to 512 [ 58.224834][ T5211] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.336214][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.346171][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.355912][ T52] bond0 (unregistering): Released all slaves [ 58.365313][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.372433][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.398435][ T4938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.438387][ T52] hsr_slave_0: left promiscuous mode [ 58.445017][ T52] hsr_slave_1: left promiscuous mode [ 58.455312][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.462780][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.471004][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.478462][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.490716][ T52] veth1_macvtap: left promiscuous mode [ 58.496278][ T52] veth0_macvtap: left promiscuous mode [ 58.501834][ T52] veth1_vlan: left promiscuous mode [ 58.507461][ T52] veth0_vlan: left promiscuous mode [ 58.593392][ T52] team0 (unregistering): Port device team_slave_1 removed [ 58.605185][ T52] team0 (unregistering): Port device team_slave_0 removed [ 58.665058][ T4938] hsr_slave_0: entered promiscuous mode [ 58.680856][ T4938] hsr_slave_1: entered promiscuous mode [ 58.688397][ T4938] debugfs: 'hsr0' already exists in 'hsr' [ 58.694184][ T4938] Cannot create hsr debugfs directory [ 58.869809][ T4938] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.894304][ T4938] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.903058][ T4938] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.935361][ T4938] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.142175][ T4938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.177249][ T4938] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.232756][ T2156] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.240087][ T2156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.290422][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.297524][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.425112][ T4938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.547414][ T4938] veth0_vlan: entered promiscuous mode [ 59.556004][ T4938] veth1_vlan: entered promiscuous mode [ 59.571700][ T4938] veth0_macvtap: entered promiscuous mode [ 59.579572][ T4938] veth1_macvtap: entered promiscuous mode [ 59.591387][ T4938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.603001][ T4938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.614207][ T1717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.623074][ T1717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.642184][ T1717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.656729][ T29] kauditd_printk_skb: 592 callbacks suppressed [ 59.656746][ T29] audit: type=1400 audit(1761153022.501:1399): avc: denied { mounton } for pid=4938 comm="syz-executor" path="/root/syzkaller.15anPK/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.659944][ T1717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.673898][ T29] audit: type=1400 audit(1761153022.501:1400): avc: denied { mount } for pid=4938 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.718231][ T29] audit: type=1400 audit(1761153022.501:1401): avc: denied { mount } for pid=4938 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.740158][ T29] audit: type=1400 audit(1761153022.501:1402): avc: denied { mounton } for pid=4938 comm="syz-executor" path="/root/syzkaller.15anPK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.766924][ T29] audit: type=1400 audit(1761153022.501:1403): avc: denied { mounton } for pid=4938 comm="syz-executor" path="/root/syzkaller.15anPK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.795216][ T29] audit: type=1400 audit(1761153022.531:1404): avc: denied { mounton } for pid=4938 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.818179][ T29] audit: type=1400 audit(1761153022.531:1405): avc: denied { mount } for pid=4938 comm="syz-executor" name="/" dev="gadgetfs" ino=4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 59.859535][ T29] audit: type=1326 audit(1761153022.701:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 59.899721][ T29] audit: type=1326 audit(1761153022.701:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 59.923237][ T29] audit: type=1326 audit(1761153022.731:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5375 comm="syz.4.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 59.991485][ T5385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.537'. [ 60.029411][ T5397] loop3: detected capacity change from 0 to 512 [ 60.037145][ T5397] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.070237][ T5402] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5402 comm=syz.4.541 [ 60.241707][ T5422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.388020][ T5429] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 60.394102][ T5433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.553'. [ 60.459610][ T5441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5441 comm=syz.5.558 [ 60.484405][ T5443] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 60.524375][ T5445] netlink: 19 bytes leftover after parsing attributes in process `syz.5.561'. [ 60.593034][ T5454] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 60.599674][ T5454] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 60.607321][ T5454] vhci_hcd vhci_hcd.0: Device attached [ 60.692662][ T5455] vhci_hcd: connection closed [ 60.699430][ T1717] vhci_hcd: stop threads [ 60.708521][ T1717] vhci_hcd: release socket [ 60.713169][ T1717] vhci_hcd: disconnect device [ 61.072482][ T5473] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 61.082296][ T5475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5475 comm=syz.0.572 [ 61.140890][ T5479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 61.149995][ T5479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 61.210365][ T5501] netlink: 19 bytes leftover after parsing attributes in process `syz.0.576'. [ 61.273977][ T5513] netlink: 20 bytes leftover after parsing attributes in process `syz.5.580'. [ 61.328113][ T1717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.444322][ T1717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.480092][ T5482] chnl_net:caif_netlink_parms(): no params data found [ 61.497645][ T1717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.562077][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.569284][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.577538][ T5482] bridge_slave_0: entered allmulticast mode [ 61.584067][ T5482] bridge_slave_0: entered promiscuous mode [ 61.590974][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.598090][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.605817][ T5482] bridge_slave_1: entered allmulticast mode [ 61.612211][ T5482] bridge_slave_1: entered promiscuous mode [ 61.629784][ T1717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.647340][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.657823][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.679003][ T5482] team0: Port device team_slave_0 added [ 61.685886][ T5482] team0: Port device team_slave_1 added [ 61.706694][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.713783][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.739873][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.753513][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.760539][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.786496][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.820743][ T5482] hsr_slave_0: entered promiscuous mode [ 61.826817][ T5482] hsr_slave_1: entered promiscuous mode [ 61.832719][ T5482] debugfs: 'hsr0' already exists in 'hsr' [ 61.838468][ T5482] Cannot create hsr debugfs directory [ 61.844076][ T1717] bridge_slave_1: left allmulticast mode [ 61.849722][ T1717] bridge_slave_1: left promiscuous mode [ 61.855533][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.863428][ T1717] bridge_slave_0: left allmulticast mode [ 61.869128][ T1717] bridge_slave_0: left promiscuous mode [ 61.874818][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.946115][ T1717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.956025][ T1717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.965481][ T1717] bond0 (unregistering): Released all slaves [ 62.021034][ T1717] hsr_slave_0: left promiscuous mode [ 62.026888][ T1717] hsr_slave_1: left promiscuous mode [ 62.032464][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.039890][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.047506][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.054987][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.065270][ T1717] veth1_macvtap: left promiscuous mode [ 62.070774][ T1717] veth0_macvtap: left promiscuous mode [ 62.076358][ T1717] veth1_vlan: left promiscuous mode [ 62.081583][ T1717] veth0_vlan: left promiscuous mode [ 62.142999][ T1717] team0 (unregistering): Port device team_slave_1 removed [ 62.153242][ T1717] team0 (unregistering): Port device team_slave_0 removed [ 62.203570][ T5482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 62.211996][ T5482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 62.220683][ T5482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 62.229482][ T5482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 62.263025][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.275238][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.284624][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.291697][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.302402][ T2156] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.309626][ T2156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.369346][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.470475][ T5482] veth0_vlan: entered promiscuous mode [ 62.478287][ T5482] veth1_vlan: entered promiscuous mode [ 62.492467][ T5482] veth0_macvtap: entered promiscuous mode [ 62.500138][ T5482] veth1_macvtap: entered promiscuous mode [ 62.510842][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.521695][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.532369][ T2156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.542944][ T2156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.551821][ T2156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.563368][ T2156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.609102][ T5890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.570'. [ 62.661227][ T5898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5898 comm=syz.6.585 [ 63.568326][ T5944] pimreg: entered allmulticast mode [ 63.573798][ T5941] sd 0:0:1:0: device reset [ 63.576167][ T5944] pimreg: left allmulticast mode [ 63.617741][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 63.861389][ T6009] capability: warning: `syz.0.625' uses deprecated v2 capabilities in a way that may be insecure [ 63.935346][ T6021] sd 0:0:1:0: device reset [ 63.972801][ T6025] pimreg: entered allmulticast mode [ 63.985002][ T6025] pimreg: left allmulticast mode [ 64.112688][ T1717] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.128901][ T6070] loop5: detected capacity change from 0 to 2048 [ 64.145715][ T6070] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.260762][ T4938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.291686][ T6088] random: crng reseeded on system resumption [ 64.368986][ T6121] netlink: 168 bytes leftover after parsing attributes in process `syz.3.649'. [ 64.378098][ T6121] tipc: Started in network mode [ 64.383057][ T6121] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 64.392028][ T6121] tipc: Enabling of bearer rejected, failed to enable media [ 64.665842][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 64.665859][ T29] audit: type=1326 audit(1761153027.511:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fdce5e67 code=0x7ffc0000 [ 64.696777][ T29] audit: type=1326 audit(1761153027.511:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fdc8b099 code=0x7ffc0000 [ 64.720119][ T29] audit: type=1326 audit(1761153027.511:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 64.743524][ T29] audit: type=1326 audit(1761153027.541:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fdce5e67 code=0x7ffc0000 [ 64.766916][ T29] audit: type=1326 audit(1761153027.541:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fdc8b099 code=0x7ffc0000 [ 64.790296][ T29] audit: type=1326 audit(1761153027.541:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 64.813701][ T29] audit: type=1326 audit(1761153027.541:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fdce5e67 code=0x7ffc0000 [ 64.837095][ T29] audit: type=1326 audit(1761153027.541:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f09fdc8b099 code=0x7ffc0000 [ 64.860440][ T29] audit: type=1326 audit(1761153027.541:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 64.883778][ T29] audit: type=1326 audit(1761153027.541:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.4.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09fdce5e67 code=0x7ffc0000 [ 64.992611][ T6212] loop5: detected capacity change from 0 to 512 [ 64.994574][ T6211] loop3: detected capacity change from 0 to 2048 [ 65.031465][ T6211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.105426][ T6235] netlink: 'syz.5.659': attribute type 1 has an invalid length. [ 65.123060][ T6238] netlink: 76 bytes leftover after parsing attributes in process `syz.4.660'. [ 65.138477][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.156018][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.165582][ T6235] bond1: (slave geneve2): making interface the new active one [ 65.182979][ T6235] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.266752][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.277634][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.311593][ T6312] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.323536][ T6312] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.381987][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.672'. [ 65.633951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.872075][ T6423] loop5: detected capacity change from 0 to 2048 [ 65.881867][ T6423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.961451][ T4938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.184020][ T3717] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.190239][ T6068] Bluetooth: hci0: command 0x1003 tx timeout [ 66.197312][ T6065] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 66.835131][ T6468] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 66.843796][ T6467] loop0: detected capacity change from 0 to 164 [ 66.854320][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.872314][ T6467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.890183][ T6467] Symlink component flag not implemented [ 66.895889][ T6467] Symlink component flag not implemented [ 66.910434][ T6467] Symlink component flag not implemented (7) [ 66.917250][ T6467] Symlink component flag not implemented (116) [ 66.943501][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.955686][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.085167][ T6514] ip6t_srh: unknown srh match flags 4000 [ 67.094624][ T6519] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 67.095380][ T6514] loop6: detected capacity change from 0 to 512 [ 67.103381][ T6515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.703'. [ 67.113998][ T6514] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.701: error while reading EA inode 32 err=-116 [ 67.151235][ T6514] EXT4-fs (loop6): Remounting filesystem read-only [ 67.158950][ T6514] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 67.169463][ T6514] EXT4-fs (loop6): 1 orphan inode deleted [ 67.176030][ T6514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.206742][ T5482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.533790][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.720'. [ 67.557762][ T6571] program syz.6.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.588283][ T6577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=6577 comm=syz.6.725 [ 67.622440][ T6584] netlink: 'syz.3.727': attribute type 3 has an invalid length. [ 67.683763][ T6588] loop3: detected capacity change from 0 to 8192 [ 67.870433][ T6606] loop4: detected capacity change from 0 to 2048 [ 67.871313][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6608 comm=syz.6.737 [ 67.889262][ T6608] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6608 comm=syz.6.737 [ 67.912924][ T6606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.034746][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.095927][ T6635] netlink: 3 bytes leftover after parsing attributes in process `syz.4.745'. [ 68.105158][ T6635] !60ªX¹¦À: renamed from caif0 [ 68.111508][ T6635] !60ªX¹¦À: entered allmulticast mode [ 68.117075][ T6635] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 68.301473][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 68.310680][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 68.342259][ T6665] netlink: 240 bytes leftover after parsing attributes in process `syz.0.754'. [ 68.592248][ T6694] loop4: detected capacity change from 0 to 512 [ 68.602531][ T6698] serio: Serial port ptm0 [ 68.609210][ T6694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.622398][ T6694] ext4 filesystem being mounted at /200/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.665225][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.739180][ T6713] loop0: detected capacity change from 0 to 4096 [ 68.749299][ T6713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.763615][ T6713] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.778: corrupted inode contents [ 68.776250][ T6713] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.778: mark_inode_dirty error [ 68.790390][ T6713] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.778: corrupted inode contents [ 68.802492][ T6713] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.778: mark_inode_dirty error [ 68.814291][ T6713] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.778: corrupted inode contents [ 68.830054][ T6713] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.778: mark_inode_dirty error [ 68.843186][ T6713] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.778: corrupted inode contents [ 68.856860][ T6713] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.778: mark_inode_dirty error [ 68.868313][ T6713] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 68.889950][ T6725] loop3: detected capacity change from 0 to 512 [ 68.890332][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.897348][ T6725] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.007761][ T6753] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.031756][ T6755] loop0: detected capacity change from 0 to 512 [ 69.036158][ T6757] loop3: detected capacity change from 0 to 512 [ 69.038731][ T6755] EXT4-fs: Ignoring removed i_version option [ 69.050501][ T6755] EXT4-fs: Ignoring removed bh option [ 69.066433][ T6757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.066633][ T6755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.079404][ T6757] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.093296][ T6755] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.129694][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.149140][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.608923][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.796'. [ 69.622149][ T6776] loop6: detected capacity change from 0 to 2048 [ 69.644781][ T6773] loop4: detected capacity change from 0 to 1024 [ 69.656161][ T6776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.668557][ T6773] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 69.679515][ T6773] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 69.702697][ T6773] JBD2: no valid journal superblock found [ 69.708603][ T6773] EXT4-fs (loop4): Could not load journal inode [ 69.725965][ T6773] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 69.779336][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.803'. [ 69.812467][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 69.812485][ T29] audit: type=1400 audit(1761153032.651:2390): avc: denied { read } for pid=6812 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.880831][ T5482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.888285][ T29] audit: type=1400 audit(1761153032.721:2391): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.919773][ T29] audit: type=1400 audit(1761153032.761:2392): avc: denied { write } for pid=6819 comm="syz.3.808" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.971239][ T29] audit: type=1326 audit(1761153032.811:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d707efc9 code=0x7ffc0000 [ 69.994702][ T29] audit: type=1326 audit(1761153032.811:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d707efc9 code=0x7ffc0000 [ 70.018210][ T29] audit: type=1326 audit(1761153032.811:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f75d707efc9 code=0x7ffc0000 [ 70.041695][ T29] audit: type=1326 audit(1761153032.811:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d707efc9 code=0x7ffc0000 [ 70.065310][ T29] audit: type=1326 audit(1761153032.811:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6828 comm="syz.5.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75d707efc9 code=0x7ffc0000 [ 70.238135][ T29] audit: type=1326 audit(1761153032.891:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 70.261603][ T29] audit: type=1326 audit(1761153032.891:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 70.296080][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.819'. [ 70.331007][ T6872] loop5: detected capacity change from 0 to 2048 [ 70.358919][ T6872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.472899][ T4938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.587507][ T6915] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 70.756029][ T6945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6945 comm=syz.4.833 [ 70.842527][ T6956] Falling back ldisc for ttyS3. [ 71.156250][ T7000] netlink: 332 bytes leftover after parsing attributes in process `syz.5.843'. [ 71.178933][ T7006] loop3: detected capacity change from 0 to 128 [ 71.194902][ T7006] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.223090][ T7006] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.569776][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.777373][ T7086] loop4: detected capacity change from 0 to 128 [ 71.788128][ T7086] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.801866][ T7086] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.872534][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.187903][ T7133] __nla_validate_parse: 3 callbacks suppressed [ 72.187922][ T7133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.890'. [ 72.347738][ T7145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.906'. [ 72.397427][ T7153] loop4: detected capacity change from 0 to 512 [ 72.426750][ T7153] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.439951][ T7153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.466893][ T7153] EXT4-fs (loop4): 1 truncate cleaned up [ 72.473036][ T7153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.571340][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.785413][ T7190] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.841878][ T7197] loop3: detected capacity change from 0 to 2048 [ 72.866907][ T7197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.933621][ T7197] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.948895][ T7197] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 72.961227][ T7197] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.961227][ T7197] [ 72.971015][ T7197] EXT4-fs (loop3): Total free blocks count 0 [ 72.977100][ T7197] EXT4-fs (loop3): Free/Dirty block details [ 72.983011][ T7197] EXT4-fs (loop3): free_blocks=2415919104 [ 72.988819][ T7197] EXT4-fs (loop3): dirty_blocks=32 [ 72.994093][ T7197] EXT4-fs (loop3): Block reservation details [ 73.000096][ T7197] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 73.015692][ T7197] syz.3.917 (7197) used greatest stack depth: 9512 bytes left [ 73.064512][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.326608][ T7252] loop5: detected capacity change from 0 to 2048 [ 73.355655][ T7252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.386909][ T7261] loop6: detected capacity change from 0 to 512 [ 73.398356][ T7252] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.413370][ T7261] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 73.423445][ T7252] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 73.435796][ T7252] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.435796][ T7252] [ 73.438255][ T7261] EXT4-fs (loop6): 1 truncate cleaned up [ 73.445472][ T7252] EXT4-fs (loop5): Total free blocks count 0 [ 73.445489][ T7252] EXT4-fs (loop5): Free/Dirty block details [ 73.445503][ T7252] EXT4-fs (loop5): free_blocks=2415919104 [ 73.463129][ T7261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.468897][ T7252] EXT4-fs (loop5): dirty_blocks=32 [ 73.468915][ T7252] EXT4-fs (loop5): Block reservation details [ 73.468928][ T7252] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 73.569382][ T4938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.580663][ T5482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.683329][ T7289] loop3: detected capacity change from 0 to 512 [ 73.690669][ T7289] journal_path: Lookup failure for './file0/../file0' [ 73.697555][ T7289] EXT4-fs: error: could not find journal device path [ 73.757180][ T7298] loop6: detected capacity change from 0 to 512 [ 73.785844][ T7298] journal_path: Lookup failure for './file0/../file0' [ 73.792685][ T7298] EXT4-fs: error: could not find journal device path [ 73.942863][ T7315] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 74.100997][ T7333] loop5: detected capacity change from 0 to 512 [ 74.118113][ T7333] journal_path: Lookup failure for './file0/../file0' [ 74.124986][ T7333] EXT4-fs: error: could not find journal device path [ 74.189788][ T7342] xt_hashlimit: max too large, truncated to 1048576 [ 74.283084][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.974'. [ 74.297835][ T7345] IPVS: Error connecting to the multicast addr [ 74.358525][ T7347] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 74.500759][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'. [ 74.517853][ T7359] IPVS: Error connecting to the multicast addr [ 74.617765][ T7373] IPv6: Can't replace route, no match found [ 74.928834][ T7387] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1003'. [ 74.970536][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.995'. [ 74.979855][ T7394] IPVS: Error connecting to the multicast addr [ 75.079313][ T7409] xt_hashlimit: max too large, truncated to 1048576 [ 75.103652][ T7407] loop6: detected capacity change from 0 to 2048 [ 75.112912][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 75.123428][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'. [ 75.145508][ T7407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.203998][ T7425] serio: Serial port ptm0 [ 75.213896][ T7407] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.236508][ T7407] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 75.248952][ T7407] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.248952][ T7407] [ 75.258741][ T7407] EXT4-fs (loop6): Total free blocks count 0 [ 75.264785][ T7407] EXT4-fs (loop6): Free/Dirty block details [ 75.270774][ T7407] EXT4-fs (loop6): free_blocks=2415919104 [ 75.276546][ T7407] EXT4-fs (loop6): dirty_blocks=32 [ 75.281741][ T7407] EXT4-fs (loop6): Block reservation details [ 75.287915][ T7407] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 75.289858][ T7430] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1010'. [ 75.330876][ T5482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.374178][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1011'. [ 75.392354][ T7437] IPVS: Error connecting to the multicast addr [ 75.404626][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 75.404685][ T29] audit: type=1400 audit(1761153038.251:2990): avc: denied { create } for pid=7440 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.438536][ T29] audit: type=1400 audit(1761153038.271:2991): avc: denied { ioctl } for pid=7440 comm="syz.4.1014" path="socket:[15204]" dev="sockfs" ino=15204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.463220][ T29] audit: type=1400 audit(1761153038.271:2992): avc: denied { bind } for pid=7440 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.482619][ T29] audit: type=1400 audit(1761153038.271:2993): avc: denied { read } for pid=7440 comm="syz.4.1014" path="socket:[15204]" dev="sockfs" ino=15204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.507560][ T29] audit: type=1400 audit(1761153038.321:2994): avc: denied { setopt } for pid=7440 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.527065][ T29] audit: type=1400 audit(1761153038.321:2995): avc: denied { write } for pid=7440 comm="syz.4.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.548956][ T29] audit: type=1326 audit(1761153038.351:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.6.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9c2efc9 code=0x7ffc0000 [ 75.572528][ T29] audit: type=1326 audit(1761153038.351:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.6.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9c2efc9 code=0x7ffc0000 [ 75.596052][ T29] audit: type=1326 audit(1761153038.391:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.6.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fece9c2efc9 code=0x7ffc0000 [ 75.619522][ T29] audit: type=1326 audit(1761153038.391:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.6.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fece9c2efc9 code=0x7ffc0000 [ 75.694725][ T7450] xt_hashlimit: max too large, truncated to 1048576 [ 75.798060][ T7464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7464 comm=syz.6.1025 [ 75.957577][ T7481] xt_hashlimit: max too large, truncated to 1048576 [ 76.063278][ T7494] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7494 comm=syz.4.1038 [ 76.159352][ T7505] loop5: detected capacity change from 0 to 736 [ 76.246995][ T7517] serio: Serial port ptm0 [ 76.567333][ T7530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7530 comm=syz.5.1052 [ 77.532456][ T7590] serio: Serial port ptm0 [ 78.435423][ T7620] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 78.482265][ T7624] loop6: detected capacity change from 0 to 164 [ 78.496431][ T7624] syz.6.1091: attempt to access beyond end of device [ 78.496431][ T7624] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 78.525575][ T7624] syz.6.1091: attempt to access beyond end of device [ 78.525575][ T7624] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 78.767122][ T7657] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 78.901043][ T7669] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 80.214484][ T7851] netlink: 'syz.5.1127': attribute type 1 has an invalid length. [ 80.339908][ T7869] loop5: detected capacity change from 0 to 164 [ 80.348205][ T7869] syz.5.1134: attempt to access beyond end of device [ 80.348205][ T7869] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.362189][ T7869] syz.5.1134: attempt to access beyond end of device [ 80.362189][ T7869] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 80.416782][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 80.416800][ T29] audit: type=1326 audit(1761153043.261:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.5.1148" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75d707efc9 code=0x0 [ 80.447382][ T7878] __nla_validate_parse: 3 callbacks suppressed [ 80.447396][ T7878] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1136'. [ 80.462717][ T7878] tipc: Started in network mode [ 80.467625][ T7878] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 80.476579][ T7878] tipc: Enabling of bearer rejected, failed to enable media [ 80.528567][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.535969][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.578240][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.597770][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.616838][ T29] audit: type=1326 audit(1761153043.461:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.640323][ T29] audit: type=1326 audit(1761153043.461:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.664082][ T29] audit: type=1326 audit(1761153043.501:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.687623][ T29] audit: type=1326 audit(1761153043.501:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.711234][ T29] audit: type=1326 audit(1761153043.501:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.734778][ T29] audit: type=1326 audit(1761153043.501:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.758197][ T29] audit: type=1326 audit(1761153043.501:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.781657][ T29] audit: type=1326 audit(1761153043.501:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.805094][ T29] audit: type=1326 audit(1761153043.511:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7891 comm="syz.4.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fdceefc9 code=0x7ffc0000 [ 80.876864][ T6372] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.894969][ T6372] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.913886][ T6372] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.936375][ T6372] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.009592][ T7904] random: crng reseeded on system resumption [ 81.097756][ T7919] loop4: detected capacity change from 0 to 512 [ 81.159261][ T7930] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 81.207022][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.214252][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.278078][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.288252][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.354133][ T6355] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.371460][ T6355] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.383187][ T6355] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.392251][ T6355] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.404349][ T7943] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1163'. [ 81.504398][ T7957] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1182'. [ 81.571798][ T7968] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 81.836876][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.844172][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.887736][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.897721][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.936966][ T2156] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.955340][ T2156] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.969165][ T2156] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.978525][ T2156] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.015129][ T7996] netlink: 'syz.4.1199': attribute type 1 has an invalid length. [ 82.029768][ T7996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.049027][ T7996] bond1: (slave geneve2): making interface the new active one [ 82.058289][ T7996] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 82.074438][ T6368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.091836][ T6368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.101540][ T6368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.110410][ T6368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.170366][ T8039] netlink: 'syz.6.1192': attribute type 1 has an invalid length. [ 82.526943][ T8066] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 82.551060][ T8066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.609566][ T8101] bond1: (slave geneve2): making interface the new active one [ 82.649752][ T8101] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 82.967533][ T8124] loop5: detected capacity change from 0 to 8192 [ 83.107735][ T8124] ================================================================== [ 83.115854][ T8124] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 83.122972][ T8124] [ 83.125301][ T8124] write to 0xffff88810c336294 of 2 bytes by task 8133 on cpu 1: [ 83.132925][ T8124] fat16_ent_put+0x28/0x60 [ 83.137343][ T8124] fat_alloc_clusters+0x4d1/0xa80 [ 83.142376][ T8124] fat_get_block+0x258/0x5e0 [ 83.146976][ T8124] __block_write_begin_int+0x400/0xf90 [ 83.152442][ T8124] cont_write_begin+0x5fc/0x970 [ 83.157302][ T8124] fat_write_begin+0x4f/0xe0 [ 83.161911][ T8124] cont_write_begin+0x1b0/0x970 [ 83.166770][ T8124] fat_write_begin+0x4f/0xe0 [ 83.171423][ T8124] generic_cont_expand_simple+0xb0/0x150 [ 83.177068][ T8124] fat_cont_expand+0x3e/0x170 [ 83.181752][ T8124] fat_fallocate+0x177/0x1c0 [ 83.186358][ T8124] vfs_fallocate+0x3b6/0x400 [ 83.190953][ T8124] __x64_sys_fallocate+0x7a/0xd0 [ 83.195905][ T8124] x64_sys_call+0x2518/0x3000 [ 83.200598][ T8124] do_syscall_64+0xd2/0x200 [ 83.205096][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.210990][ T8124] [ 83.213314][ T8124] read to 0xffff88810c336200 of 512 bytes by task 8124 on cpu 0: [ 83.221046][ T8124] fat_mirror_bhs+0x1df/0x320 [ 83.225724][ T8124] fat_alloc_clusters+0x98b/0xa80 [ 83.230754][ T8124] fat_get_block+0x258/0x5e0 [ 83.235364][ T8124] __block_write_begin_int+0x400/0xf90 [ 83.240829][ T8124] cont_write_begin+0x5fc/0x970 [ 83.245680][ T8124] fat_write_begin+0x4f/0xe0 [ 83.250279][ T8124] generic_perform_write+0x184/0x490 [ 83.255593][ T8124] __generic_file_write_iter+0x9e/0x120 [ 83.261153][ T8124] generic_file_write_iter+0x8d/0x2f0 [ 83.266523][ T8124] aio_write+0x2e5/0x410 [ 83.270775][ T8124] io_submit_one+0xacd/0x11d0 [ 83.275459][ T8124] __se_sys_io_submit+0xfb/0x280 [ 83.280424][ T8124] __x64_sys_io_submit+0x43/0x50 [ 83.285377][ T8124] x64_sys_call+0x2d6c/0x3000 [ 83.290075][ T8124] do_syscall_64+0xd2/0x200 [ 83.294576][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.300470][ T8124] [ 83.302793][ T8124] Reported by Kernel Concurrency Sanitizer on: [ 83.308964][ T8124] CPU: 0 UID: 0 PID: 8124 Comm: syz.5.1212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.318681][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.328731][ T8124] ==================================================================