last executing test programs: 1.205756222s ago: executing program 3 (id=653): capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.179896264s ago: executing program 3 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 1.037434905s ago: executing program 3 (id=673): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80800}, 0x10) 940.405833ms ago: executing program 3 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x4040) 850.21666ms ago: executing program 3 (id=667): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) 817.008823ms ago: executing program 4 (id=668): capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 802.652895ms ago: executing program 4 (id=669): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(r0) 781.881816ms ago: executing program 4 (id=670): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40100, 0x1bb) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x2000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000) 780.587226ms ago: executing program 1 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 751.668119ms ago: executing program 4 (id=677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 742.215919ms ago: executing program 1 (id=678): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000000500000006000100053f0003080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 447.214073ms ago: executing program 4 (id=683): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x7, 0x0, 0x0, 0x304, 0xfffffffd}, 0x9c) 446.770533ms ago: executing program 1 (id=692): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) setgroups(0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 424.871435ms ago: executing program 0 (id=695): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) 339.659062ms ago: executing program 2 (id=685): capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 339.503872ms ago: executing program 4 (id=686): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) 338.857812ms ago: executing program 0 (id=697): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x7, 0x0, 0x0, 0x304, 0xfffffffd}, 0x9c) 338.284732ms ago: executing program 1 (id=687): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) 296.376655ms ago: executing program 0 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 293.866356ms ago: executing program 2 (id=689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4330, &(0x7f0000000200)={0x0, 0xa67d, 0x400, 0x800000, 0x234}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r1, 0x2b08, 0x214, 0xa4, 0x0, 0x0) 197.941374ms ago: executing program 1 (id=690): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) getuid() 197.488454ms ago: executing program 2 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0x1e0}, {&(0x7f0000001440)="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", 0xabb}], 0x4}}], 0x1, 0x0) 197.001883ms ago: executing program 0 (id=704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4330, &(0x7f0000000200)={0x0, 0xa67d, 0x400, 0x800000, 0x234}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r1, 0x2b08, 0x214, 0xa4, 0x0, 0x0) 166.716866ms ago: executing program 2 (id=693): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010040000000500000006000100053f0003080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 155.848077ms ago: executing program 1 (id=694): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 154.599487ms ago: executing program 0 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 143.703378ms ago: executing program 2 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3260}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0xb) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.354539ms ago: executing program 3 (id=699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 589.19µs ago: executing program 2 (id=710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 0s ago: executing program 0 (id=700): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 28.687468][ T29] audit: type=1400 audit(1755884896.665:62): avc: denied { mounton } for pid=3264 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.688840][ T3264] cgroup: Unknown subsys name 'net' [ 28.710420][ T29] audit: type=1400 audit(1755884896.665:63): avc: denied { mount } for pid=3264 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.738320][ T29] audit: type=1400 audit(1755884896.695:64): avc: denied { unmount } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.938986][ T3264] cgroup: Unknown subsys name 'cpuset' [ 28.945708][ T3264] cgroup: Unknown subsys name 'rlimit' [ 29.097457][ T29] audit: type=1400 audit(1755884897.075:65): avc: denied { setattr } for pid=3264 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.121870][ T29] audit: type=1400 audit(1755884897.085:66): avc: denied { create } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.142880][ T29] audit: type=1400 audit(1755884897.085:67): avc: denied { write } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.163674][ T29] audit: type=1400 audit(1755884897.085:68): avc: denied { read } for pid=3264 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.185040][ T29] audit: type=1400 audit(1755884897.095:69): avc: denied { mounton } for pid=3264 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.185122][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.210790][ T29] audit: type=1400 audit(1755884897.095:70): avc: denied { mount } for pid=3264 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.244242][ T29] audit: type=1400 audit(1755884897.205:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.264643][ T3264] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.979518][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 31.054039][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.061173][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.068774][ T3305] bridge_slave_0: entered allmulticast mode [ 31.075377][ T3305] bridge_slave_0: entered promiscuous mode [ 31.098311][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 31.112167][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.119313][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.126858][ T3305] bridge_slave_1: entered allmulticast mode [ 31.133406][ T3305] bridge_slave_1: entered promiscuous mode [ 31.155100][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.187733][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.199628][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 31.235780][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 31.250788][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 31.268847][ T3305] team0: Port device team_slave_0 added [ 31.288231][ T3305] team0: Port device team_slave_1 added [ 31.350309][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.357917][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.366765][ T3301] bridge_slave_0: entered allmulticast mode [ 31.374480][ T3301] bridge_slave_0: entered promiscuous mode [ 31.383993][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.391569][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.398927][ T3300] bridge_slave_0: entered allmulticast mode [ 31.405825][ T3300] bridge_slave_0: entered promiscuous mode [ 31.412995][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.420833][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.448251][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.467784][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.475665][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.483215][ T3301] bridge_slave_1: entered allmulticast mode [ 31.489887][ T3301] bridge_slave_1: entered promiscuous mode [ 31.505315][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.512614][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.520037][ T3300] bridge_slave_1: entered allmulticast mode [ 31.526699][ T3300] bridge_slave_1: entered promiscuous mode [ 31.533786][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.541069][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.568625][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.608201][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.615563][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.624559][ T3302] bridge_slave_0: entered allmulticast mode [ 31.631209][ T3302] bridge_slave_0: entered promiscuous mode [ 31.642908][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.650713][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.658390][ T3311] bridge_slave_0: entered allmulticast mode [ 31.665011][ T3311] bridge_slave_0: entered promiscuous mode [ 31.672348][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.679569][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.687042][ T3311] bridge_slave_1: entered allmulticast mode [ 31.693716][ T3311] bridge_slave_1: entered promiscuous mode [ 31.707079][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.716481][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.723664][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.731160][ T3302] bridge_slave_1: entered allmulticast mode [ 31.737974][ T3302] bridge_slave_1: entered promiscuous mode [ 31.745818][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.774785][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.785655][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.807940][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.819771][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.830951][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.860716][ T3305] hsr_slave_0: entered promiscuous mode [ 31.868347][ T3305] hsr_slave_1: entered promiscuous mode [ 31.876836][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.900162][ T3301] team0: Port device team_slave_0 added [ 31.908167][ T3301] team0: Port device team_slave_1 added [ 31.925624][ T3300] team0: Port device team_slave_0 added [ 31.933009][ T3300] team0: Port device team_slave_1 added [ 31.956517][ T3311] team0: Port device team_slave_0 added [ 31.980370][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.987356][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.014486][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.026915][ T3302] team0: Port device team_slave_0 added [ 32.041001][ T3311] team0: Port device team_slave_1 added [ 32.053733][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.061918][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.088936][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.100233][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.107932][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.134792][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.146722][ T3302] team0: Port device team_slave_1 added [ 32.169414][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.176589][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.202910][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.226314][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.233666][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.260644][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.272059][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.279403][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.305966][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.321864][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.329128][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.355891][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.369064][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.376325][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.403844][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.435176][ T3311] hsr_slave_0: entered promiscuous mode [ 32.441650][ T3311] hsr_slave_1: entered promiscuous mode [ 32.447820][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 32.453889][ T3311] Cannot create hsr debugfs directory [ 32.482097][ T3301] hsr_slave_0: entered promiscuous mode [ 32.488721][ T3301] hsr_slave_1: entered promiscuous mode [ 32.494780][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.500792][ T3301] Cannot create hsr debugfs directory [ 32.518489][ T3300] hsr_slave_0: entered promiscuous mode [ 32.524615][ T3300] hsr_slave_1: entered promiscuous mode [ 32.531032][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.537048][ T3300] Cannot create hsr debugfs directory [ 32.593062][ T3302] hsr_slave_0: entered promiscuous mode [ 32.599312][ T3302] hsr_slave_1: entered promiscuous mode [ 32.605654][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 32.611707][ T3302] Cannot create hsr debugfs directory [ 32.761173][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.779285][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.788596][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.803355][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.831233][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.844942][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.863890][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.876035][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.890615][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.902142][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.917800][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.928007][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.965352][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.981600][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.994992][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.004698][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.040749][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.050686][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.060312][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.069833][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.108406][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.131180][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.146953][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.154245][ T1898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.168378][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.175662][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.206311][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.215307][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.244835][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.256211][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.272056][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.289315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.296527][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.306519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.313906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.326000][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.333348][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.351229][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.371963][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.379514][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.418059][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.441266][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.454588][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.461991][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.479081][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.486478][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.502643][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.539704][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.557490][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.568336][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.575684][ T1898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.589591][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.596823][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.645058][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.670241][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.785871][ T3305] veth0_vlan: entered promiscuous mode [ 33.799048][ T3300] veth0_vlan: entered promiscuous mode [ 33.809898][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.822265][ T3300] veth1_vlan: entered promiscuous mode [ 33.833041][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.842776][ T3305] veth1_vlan: entered promiscuous mode [ 33.874231][ T3305] veth0_macvtap: entered promiscuous mode [ 33.887079][ T3300] veth0_macvtap: entered promiscuous mode [ 33.899252][ T3300] veth1_macvtap: entered promiscuous mode [ 33.914123][ T3305] veth1_macvtap: entered promiscuous mode [ 33.941987][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.969484][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.977962][ T3301] veth0_vlan: entered promiscuous mode [ 33.987360][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.000315][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.010627][ T3301] veth1_vlan: entered promiscuous mode [ 34.020685][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.030191][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.040031][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.055149][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.083636][ T3311] veth0_vlan: entered promiscuous mode [ 34.089921][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.106327][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.124497][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.124512][ T29] audit: type=1400 audit(1755884902.105:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.V3CasZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.149505][ T3302] veth0_vlan: entered promiscuous mode [ 34.163739][ T29] audit: type=1400 audit(1755884902.115:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.186909][ T29] audit: type=1400 audit(1755884902.115:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.V3CasZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.213303][ T29] audit: type=1400 audit(1755884902.115:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.236175][ T29] audit: type=1400 audit(1755884902.115:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.V3CasZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.264228][ T29] audit: type=1400 audit(1755884902.115:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.V3CasZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.292538][ T29] audit: type=1400 audit(1755884902.115:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.313699][ T29] audit: type=1400 audit(1755884902.145:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.336717][ T29] audit: type=1400 audit(1755884902.145:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.340781][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.380039][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.389309][ T85] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.398887][ T3301] veth0_macvtap: entered promiscuous mode [ 34.406494][ T3301] veth1_macvtap: entered promiscuous mode [ 34.419343][ T3311] veth1_vlan: entered promiscuous mode [ 34.430628][ T29] audit: type=1400 audit(1755884902.405:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.465345][ T3311] veth0_macvtap: entered promiscuous mode [ 34.485845][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.498886][ T3302] veth1_vlan: entered promiscuous mode [ 34.506963][ T3311] veth1_macvtap: entered promiscuous mode [ 34.530392][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.566812][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.577549][ T3302] veth0_macvtap: entered promiscuous mode [ 34.594078][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.603841][ T3302] veth1_macvtap: entered promiscuous mode [ 34.611916][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.623075][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.641075][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.652898][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.662468][ T3482] loop1: detected capacity change from 0 to 128 [ 34.678605][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.700153][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.723645][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.755387][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.784307][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.803174][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.825088][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.856826][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.890583][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.939154][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.015506][ T3506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'. [ 35.093555][ T3517] loop2: detected capacity change from 0 to 128 [ 35.131446][ T3517] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 35.146406][ T3517] System zones: 1-3, 19-19, 35-36 [ 35.164255][ T3523] syzkaller1: entered promiscuous mode [ 35.169865][ T3523] syzkaller1: entered allmulticast mode [ 35.197016][ T3517] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.211567][ T3517] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.274594][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.367485][ T3539] capability: warning: `syz.0.32' uses 32-bit capabilities (legacy support in use) [ 35.381859][ T3542] loop4: detected capacity change from 0 to 256 [ 35.424326][ T3546] mmap: syz.3.35 (3546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.452072][ T3544] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 35.493512][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 35.502717][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 35.511943][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 35.521714][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 35.530842][ T3553] netlink: 'syz.3.38': attribute type 6 has an invalid length. [ 35.863901][ T3587] loop4: detected capacity change from 0 to 512 [ 35.893342][ T3587] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.902654][ T3587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 35.911657][ T3587] System zones: 1-12 [ 35.916119][ T3587] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.53: corrupted in-inode xattr: e_value size too large [ 35.930625][ T3587] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.53: couldn't read orphan inode 15 (err -117) [ 35.943256][ T3587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.988822][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.090344][ T3604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 36.099953][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 36.117957][ T3604] bridge0: port 3(macsec1) entered blocking state [ 36.124656][ T3604] bridge0: port 3(macsec1) entered disabled state [ 36.132950][ T3604] macsec1: entered allmulticast mode [ 36.139966][ T3604] macsec1: left allmulticast mode [ 36.324952][ T3621] loop0: detected capacity change from 0 to 512 [ 36.342024][ T3621] ======================================================= [ 36.342024][ T3621] WARNING: The mand mount option has been deprecated and [ 36.342024][ T3621] and is ignored by this kernel. Remove the mand [ 36.342024][ T3621] option from the mount to silence this warning. [ 36.342024][ T3621] ======================================================= [ 36.399109][ T3621] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.410902][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.418713][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.426242][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.446515][ T3621] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.67: bg 0: block 248: padding at end of block bitmap is not set [ 36.464069][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.471880][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.479708][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.487752][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.495411][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.502950][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.510728][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.519652][ T3621] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.67: Failed to acquire dquot type 1 [ 36.533740][ T3385] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 36.544131][ T3621] EXT4-fs (loop0): 1 truncate cleaned up [ 36.551294][ T3621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.582359][ T3628] fido_id[3628]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.634339][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 36.643564][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 36.652537][ T3630] netlink: 'syz.1.70': attribute type 20 has an invalid length. [ 36.666033][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.666110][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 36.683977][ T3630] netlink: 'syz.1.70': attribute type 20 has an invalid length. [ 36.684211][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.703014][ T3630] Zero length message leads to an empty skb [ 36.773544][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.806323][ T3630] syz.1.70 (3630) used greatest stack depth: 10584 bytes left [ 36.806397][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.822898][ T3642] netlink: 'syz.3.76': attribute type 19 has an invalid length. [ 36.848672][ T35] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.884921][ T35] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.920821][ T35] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.938048][ T35] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.940920][ T3621] syz.0.67 (3621) used greatest stack depth: 9280 bytes left [ 36.990632][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.186239][ T3677] loop4: detected capacity change from 0 to 1024 [ 37.236312][ T3677] EXT4-fs: Ignoring removed nobh option [ 37.242272][ T3677] EXT4-fs: inline encryption not supported [ 37.310255][ T3691] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 37.327034][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.448860][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.515583][ T3705] loop3: detected capacity change from 0 to 128 [ 37.627963][ T3714] syz.3.104: attempt to access beyond end of device [ 37.627963][ T3714] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 37.668513][ T3714] syz.3.104: attempt to access beyond end of device [ 37.668513][ T3714] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 37.728289][ T3714] syz.3.104: attempt to access beyond end of device [ 37.728289][ T3714] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 37.797144][ T3714] syz.3.104: attempt to access beyond end of device [ 37.797144][ T3714] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 37.857595][ T3714] syz.3.104: attempt to access beyond end of device [ 37.857595][ T3714] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 37.930831][ T3714] syz.3.104: attempt to access beyond end of device [ 37.930831][ T3714] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 37.978352][ T3714] syz.3.104: attempt to access beyond end of device [ 37.978352][ T3714] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 38.040645][ T3714] syz.3.104: attempt to access beyond end of device [ 38.040645][ T3714] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 38.096842][ T3714] syz.3.104: attempt to access beyond end of device [ 38.096842][ T3714] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 38.163504][ T3714] syz.3.104: attempt to access beyond end of device [ 38.163504][ T3714] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 38.783827][ T3751] loop4: detected capacity change from 0 to 1024 [ 38.811144][ T3751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.846003][ T3751] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.029919][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.129518][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 39.129536][ T29] audit: type=1326 audit(1755884907.115:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3776 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 39.326018][ T3788] tls_set_device_offload_rx: netdev not found [ 39.526227][ T29] audit: type=1400 audit(1755884907.495:325): avc: denied { watch watch_reads } for pid=3804 comm="syz.2.133" path="/23/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.641388][ T3818] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.685688][ T29] audit: type=1400 audit(1755884907.665:326): avc: denied { getopt } for pid=3815 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.949233][ T29] audit: type=1326 audit(1755884907.935:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.019524][ T29] audit: type=1326 audit(1755884907.955:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.043553][ T29] audit: type=1326 audit(1755884907.955:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.067113][ T29] audit: type=1326 audit(1755884907.955:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.090734][ T29] audit: type=1326 audit(1755884907.955:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.114779][ T29] audit: type=1326 audit(1755884907.955:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.138205][ T29] audit: type=1326 audit(1755884907.955:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 40.605719][ T3847] netlink: 'syz.2.153': attribute type 13 has an invalid length. [ 40.642076][ T3847] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.306401][ T3910] loop4: detected capacity change from 0 to 512 [ 41.319387][ T3910] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.332813][ T3910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.364406][ T3910] EXT4-fs (loop4): 1 truncate cleaned up [ 41.381100][ T3910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.410425][ T3910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.733491][ T3946] loop4: detected capacity change from 0 to 512 [ 41.766078][ T3946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 41.797924][ T3946] System zones: 1-12 [ 41.817125][ T3946] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.197: error while reading EA inode 32 err=-116 [ 41.841380][ T3946] EXT4-fs (loop4): Remounting filesystem read-only [ 41.848709][ T3946] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.862866][ T3946] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 41.874983][ T3953] syz.0.200 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.875281][ T3946] EXT4-fs (loop4): 1 orphan inode deleted [ 41.893151][ T3946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.937601][ T3946] __nla_validate_parse: 10 callbacks suppressed [ 41.937625][ T3946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 41.953619][ T3946] netlink: 108 bytes leftover after parsing attributes in process `syz.4.197'. [ 41.968053][ T3946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.197'. [ 42.015117][ T3946] netlink: 108 bytes leftover after parsing attributes in process `syz.4.197'. [ 42.024546][ T3946] netlink: 84 bytes leftover after parsing attributes in process `syz.4.197'. [ 42.075429][ T3973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.104322][ T3973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.123496][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.240218][ T3991] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 42.277158][ T4000] loop4: detected capacity change from 0 to 512 [ 42.284221][ T3991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.309223][ T3991] bond1: (slave geneve2): making interface the new active one [ 42.317412][ T4000] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.327295][ T3991] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 42.353355][ T4000] EXT4-fs (loop4): 1 truncate cleaned up [ 42.369766][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.385309][ T4008] netlink: 80 bytes leftover after parsing attributes in process `syz.2.225'. [ 42.401498][ T4005] PID 4005 killed due to inadequate hugepage pool [ 42.425261][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.446885][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 42.456489][ T4015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.477272][ T4015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.608939][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 42.620798][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 43.303448][ T4114] loop4: detected capacity change from 0 to 1024 [ 43.313382][ T4114] ext4: Unknown parameter 'nouser_xattr' [ 43.324626][ T4116] netlink: '+}[@': attribute type 298 has an invalid length. [ 43.513434][ T4128] process 'syz.2.264' launched './file0' with NULL argv: empty string added [ 43.676975][ T4145] netlink: 6 bytes leftover after parsing attributes in process `syz.0.272'. [ 43.801058][ T4165] batman_adv: batadv0: Adding interface: ipvlan2 [ 43.808334][ T4165] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.836385][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.847224][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.868439][ T4165] batman_adv: batadv0: Interface activated: ipvlan2 [ 43.913248][ T4174] 9pnet_fd: Insufficient options for proto=fd [ 44.139444][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 44.139493][ T29] audit: type=1400 audit(1755884912.125:501): avc: denied { bind } for pid=4200 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.216213][ T29] audit: type=1326 audit(1755884912.175:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 44.240053][ T29] audit: type=1326 audit(1755884912.175:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74fcb5ebe9 code=0x7ffc0000 [ 44.302331][ T29] audit: type=1400 audit(1755884912.285:504): avc: denied { create } for pid=4209 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.352668][ T29] audit: type=1400 audit(1755884912.285:505): avc: denied { setopt } for pid=4209 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.352864][ T4214] loop1: detected capacity change from 0 to 512 [ 44.372516][ T29] audit: type=1400 audit(1755884912.285:506): avc: denied { write } for pid=4209 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.372550][ T29] audit: type=1400 audit(1755884912.285:507): avc: denied { read } for pid=4209 comm="syz.1.300" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.386102][ T4214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.433524][ T4214] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.303: invalid indirect mapped block 4294967295 (level 0) [ 44.449233][ T4214] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.303: invalid indirect mapped block 4294967295 (level 1) [ 44.465306][ T4214] EXT4-fs (loop1): 1 orphan inode deleted [ 44.471571][ T4214] EXT4-fs (loop1): 1 truncate cleaned up [ 44.478025][ T4214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.494459][ T29] audit: type=1326 audit(1755884912.475:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4acb0ebe9 code=0x7ffc0000 [ 44.517882][ T29] audit: type=1326 audit(1755884912.475:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4acb0ebe9 code=0x7ffc0000 [ 44.541263][ T29] audit: type=1326 audit(1755884912.475:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4acb0ebe9 code=0x7ffc0000 [ 44.627987][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.743480][ T4241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4241 comm=syz.0.313 [ 44.855085][ T4253] loop1: detected capacity change from 0 to 512 [ 44.909421][ T4253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.922529][ T4253] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.990279][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.003339][ T9] hid_parser_main: 18 callbacks suppressed [ 45.003373][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.050108][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.101947][ T4276] fido_id[4276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.327265][ T4281] vlan2: entered allmulticast mode [ 45.491579][ T4299] ALSA: seq fatal error: cannot create timer (-19) [ 45.557112][ T4307] batman_adv: batadv0: Adding interface: ipvlan2 [ 45.563617][ T4307] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.589102][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.600175][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.611261][ T4307] batman_adv: batadv0: Interface activated: ipvlan2 [ 45.651507][ T4311] loop4: detected capacity change from 0 to 128 [ 45.720618][ T4317] bio_check_eod: 101 callbacks suppressed [ 45.720633][ T4317] syz.4.345: attempt to access beyond end of device [ 45.720633][ T4317] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 45.754406][ T4317] syz.4.345: attempt to access beyond end of device [ 45.754406][ T4317] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 45.787316][ T4317] syz.4.345: attempt to access beyond end of device [ 45.787316][ T4317] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 45.819466][ T4317] syz.4.345: attempt to access beyond end of device [ 45.819466][ T4317] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 45.850652][ T4317] syz.4.345: attempt to access beyond end of device [ 45.850652][ T4317] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 45.864999][ T4317] syz.4.345: attempt to access beyond end of device [ 45.864999][ T4317] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 45.879916][ T4317] syz.4.345: attempt to access beyond end of device [ 45.879916][ T4317] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 45.893488][ T4317] syz.4.345: attempt to access beyond end of device [ 45.893488][ T4317] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 45.907663][ T4317] syz.4.345: attempt to access beyond end of device [ 45.907663][ T4317] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 45.921272][ T4317] syz.4.345: attempt to access beyond end of device [ 45.921272][ T4317] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 46.062357][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a64bc00: rx timeout, send abort [ 46.070821][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a64be00: rx timeout, send abort [ 46.079510][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a64bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 46.094568][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a64be00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 46.299063][ T4345] batman_adv: batadv0: Adding interface: ipvlan2 [ 46.305523][ T4345] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.331521][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.342566][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.353895][ T4345] batman_adv: batadv0: Interface activated: ipvlan2 [ 46.375046][ T4354] loop1: detected capacity change from 0 to 128 [ 46.614273][ T4374] syzkaller1: entered promiscuous mode [ 46.619998][ T4374] syzkaller1: entered allmulticast mode [ 46.722017][ T4378] netlink: 'syz.1.368': attribute type 6 has an invalid length. [ 47.337620][ T4395] loop3: detected capacity change from 0 to 1024 [ 47.348583][ T4395] ext4: Unknown parameter 'nouser_xattr' [ 47.883419][ T4404] PID 4404 killed due to inadequate hugepage pool [ 48.196393][ T4430] __nla_validate_parse: 7 callbacks suppressed [ 48.196487][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 48.212183][ T4430] netlink: 108 bytes leftover after parsing attributes in process `syz.0.399'. [ 48.224742][ T4430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 48.234061][ T4430] netlink: 108 bytes leftover after parsing attributes in process `syz.0.399'. [ 48.243379][ T4430] netlink: 84 bytes leftover after parsing attributes in process `syz.0.399'. [ 48.585501][ T4445] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 48.601154][ T4445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.622099][ T4445] bond1: (slave geneve2): making interface the new active one [ 48.631938][ T4445] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 48.705561][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.716329][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.179495][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 49.179514][ T29] audit: type=1326 audit(1755884917.165:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.210105][ T29] audit: type=1326 audit(1755884917.165:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.234263][ T29] audit: type=1326 audit(1755884917.165:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.259024][ T29] audit: type=1326 audit(1755884917.165:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.283713][ T29] audit: type=1326 audit(1755884917.165:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.307516][ T29] audit: type=1326 audit(1755884917.165:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.331146][ T29] audit: type=1326 audit(1755884917.165:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.355264][ T29] audit: type=1326 audit(1755884917.165:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.379337][ T29] audit: type=1326 audit(1755884917.165:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.403079][ T29] audit: type=1326 audit(1755884917.165:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.0.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe492f0ebe9 code=0x7ffc0000 [ 49.487407][ T4475] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 49.511672][ T4475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.537696][ T4475] bond1: (slave geneve2): making interface the new active one [ 49.554410][ T4475] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 49.737940][ T4486] loop1: detected capacity change from 0 to 1024 [ 49.752773][ T4486] ext4: Unknown parameter 'nouser_xattr' [ 50.164771][ T4510] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 50.179781][ T4510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.222348][ T4510] bond1: (slave geneve2): making interface the new active one [ 50.245004][ T4510] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 50.297770][ T4506] netlink: 'syz.3.433': attribute type 13 has an invalid length. [ 50.410827][ T4506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.730790][ T4557] netlink: 'syz.4.440': attribute type 1 has an invalid length. [ 50.760166][ T4557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.900910][ T4557] bond1: (slave geneve2): making interface the new active one [ 50.921620][ T4557] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 51.039175][ T4566] netlink: 'syz.2.456': attribute type 1 has an invalid length. [ 51.079592][ T4566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.126271][ T4572] netlink: 'syz.4.447': attribute type 13 has an invalid length. [ 51.214160][ T4572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.159632][ T4627] netlink: 'syz.0.465': attribute type 13 has an invalid length. [ 52.249937][ T4627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.623144][ T4654] loop3: detected capacity change from 0 to 1024 [ 52.654175][ T4654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.720593][ T4654] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.760396][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 52.769404][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 52.795016][ T4670] bridge0: port 3(macsec1) entered blocking state [ 52.801691][ T4670] bridge0: port 3(macsec1) entered disabled state [ 52.810245][ T4670] macsec1: entered allmulticast mode [ 52.816140][ T4670] macsec1: left allmulticast mode [ 52.872976][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.907996][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.915768][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.923337][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.931590][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.939244][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.946915][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.954569][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.962200][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.969796][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.977375][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.985589][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 53.020633][ T4677] fido_id[4677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.178801][ T4683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.488'. [ 53.253837][ T4681] netlink: 'syz.1.486': attribute type 13 has an invalid length. [ 53.272122][ T4681] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 53.304793][ T4694] 9pnet_fd: Insufficient options for proto=fd [ 53.323776][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 53.333059][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 53.342389][ T4696] netlink: 'syz.3.505': attribute type 20 has an invalid length. [ 53.405794][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 53.414909][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 53.423852][ T4696] netlink: 'syz.3.505': attribute type 20 has an invalid length. [ 53.477494][ T4710] loop4: detected capacity change from 0 to 512 [ 53.498862][ T4710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.530008][ T4710] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.497: invalid indirect mapped block 4294967295 (level 0) [ 53.556456][ T4710] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.497: invalid indirect mapped block 4294967295 (level 1) [ 53.575048][ T4710] EXT4-fs (loop4): 1 orphan inode deleted [ 53.580972][ T4710] EXT4-fs (loop4): 1 truncate cleaned up [ 53.587263][ T4710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.632299][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.683451][ T1036] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.725418][ T4724] fido_id[4724]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.899049][ T4736] netlink: 'syz.1.509': attribute type 13 has an invalid length. [ 53.916306][ T4736] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 54.167135][ T4741] 9pnet_fd: Insufficient options for proto=fd [ 54.546362][ T4763] netlink: 6 bytes leftover after parsing attributes in process `syz.2.522'. [ 55.423697][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 55.423787][ T29] audit: type=1326 audit(1755884923.405:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.458065][ T29] audit: type=1326 audit(1755884923.405:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.482624][ T29] audit: type=1326 audit(1755884923.405:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.506556][ T29] audit: type=1326 audit(1755884923.415:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c2806ec23 code=0x7ffc0000 [ 55.530099][ T29] audit: type=1326 audit(1755884923.415:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c2806ec23 code=0x7ffc0000 [ 55.553651][ T29] audit: type=1326 audit(1755884923.415:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.577570][ T29] audit: type=1326 audit(1755884923.415:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.601380][ T29] audit: type=1326 audit(1755884923.415:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.624921][ T29] audit: type=1326 audit(1755884923.415:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.649095][ T29] audit: type=1326 audit(1755884923.415:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.2.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2806ebe9 code=0x7ffc0000 [ 55.676851][ T4787] netlink: 96 bytes leftover after parsing attributes in process `syz.1.534'. [ 55.794246][ T4792] netlink: 6 bytes leftover after parsing attributes in process `syz.1.536'. [ 55.854956][ T4818] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.277864][ T4826] netlink: 96 bytes leftover after parsing attributes in process `syz.2.548'. [ 56.466285][ T4845] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.635604][ T4852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 56.777441][ T4885] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.806533][ T4891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4891 comm=syz.4.579 [ 56.833157][ T4895] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 57.060720][ T4927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4927 comm=syz.3.594 [ 57.642889][ T4962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4962 comm=syz.1.611 [ 57.937181][ T4992] netlink: 'syz.1.626': attribute type 19 has an invalid length. [ 58.209611][ T5029] netlink: 'syz.2.640': attribute type 19 has an invalid length. [ 58.223145][ T1898] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.241149][ T1898] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.255661][ T1898] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.265316][ T1898] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.292791][ T5037] netlink: 'syz.0.655': attribute type 19 has an invalid length. [ 58.306945][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.329199][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.341146][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.359465][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.538646][ T5069] __nla_validate_parse: 23 callbacks suppressed [ 58.538661][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 58.554202][ T5069] netlink: 'syz.4.660': attribute type 19 has an invalid length. [ 58.562186][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 58.577702][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.587111][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.597431][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.606982][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.621767][ T5073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 58.631457][ T5073] netlink: 108 bytes leftover after parsing attributes in process `syz.4.662'. [ 58.652250][ T5073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 58.662321][ T5073] netlink: 108 bytes leftover after parsing attributes in process `syz.4.662'. [ 58.671705][ T5073] netlink: 84 bytes leftover after parsing attributes in process `syz.4.662'. [ 58.715702][ T5080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 58.724867][ T5080] netlink: 108 bytes leftover after parsing attributes in process `syz.0.676'. [ 58.738055][ T5080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.676'. [ 59.511146][ T5149] netlink: 'syz.0.696': attribute type 6 has an invalid length. [ 59.705378][ T5157] netlink: 'syz.2.710': attribute type 6 has an invalid length. [ 59.748440][ T5153] ================================================================== [ 59.757019][ T5153] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 59.764543][ T5153] [ 59.766886][ T5153] read to 0xffff88811a8f03d8 of 4 bytes by task 5148 on cpu 1: [ 59.774806][ T5153] atime_needs_update+0x25f/0x3e0 [ 59.780129][ T5153] touch_atime+0x4a/0x340 [ 59.784482][ T5153] shmem_file_splice_read+0x5b1/0x600 [ 59.789988][ T5153] splice_direct_to_actor+0x26c/0x680 [ 59.795383][ T5153] do_splice_direct+0xda/0x150 [ 59.800711][ T5153] do_sendfile+0x380/0x650 [ 59.805405][ T5153] __x64_sys_sendfile64+0x105/0x150 [ 59.810664][ T5153] x64_sys_call+0x2bb0/0x2ff0 [ 59.815988][ T5153] do_syscall_64+0xd2/0x200 [ 59.820778][ T5153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.826699][ T5153] [ 59.829029][ T5153] write to 0xffff88811a8f03d8 of 4 bytes by task 5153 on cpu 0: [ 59.837024][ T5153] touch_atime+0x1e8/0x340 [ 59.841984][ T5153] shmem_file_splice_read+0x5b1/0x600 [ 59.847566][ T5153] splice_direct_to_actor+0x26c/0x680 [ 59.853149][ T5153] do_splice_direct+0xda/0x150 [ 59.858209][ T5153] do_sendfile+0x380/0x650 [ 59.862859][ T5153] __x64_sys_sendfile64+0x105/0x150 [ 59.868390][ T5153] x64_sys_call+0x2bb0/0x2ff0 [ 59.873119][ T5153] do_syscall_64+0xd2/0x200 [ 59.877865][ T5153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.883902][ T5153] [ 59.886341][ T5153] value changed: 0x2b37364c -> 0x2bcfcccc [ 59.892439][ T5153] [ 59.894790][ T5153] Reported by Kernel Concurrency Sanitizer on: [ 59.901329][ T5153] CPU: 0 UID: 0 PID: 5153 Comm: syz.1.694 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.912022][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.922368][ T5153] ==================================================================